Privacy Policy
This explains what personal data I collect when you visit this website, book a call or work with me as a coaching client, why I need it, and what rights you have. It follows the Norwegian Personal Data Act (personopplysningsloven), which includes the EU General Data Protection Regulation (GDPR).
In short
- I, Linda Laurena, use your data to arrange calls, take payment and give you nutrition coaching.
- I may handle health information you choose to share, based on your consent.
- I don't sell your data or use it for advertising.
- You can ask to see, correct or delete your data at any time: linda.laurena@gmail.com
1. Who is responsible
Linda Laurena, Org.nr. 936 742 432, Norway. I am the data controller (behandlingsansvarlig), which means I decide how and why your data is used.
Contact: linda.laurena@gmail.com
2. What I collect, why, and on what basis
- Booking a free discovery call
- Your name, email and anything you write in the booking form. I use it to arrange the call and answer your questions. Basis: steps you request before entering a contract (GDPR Art. 6(1)(b)).
- Buying a package
- Your name, email, billing details and payment confirmation. I use it to take payment, deliver the service and keep accounts. Basis: contract (Art. 6(1)(b)) and legal obligation under Norwegian bookkeeping law (Art. 6(1)(c)).
- Coaching
- What you tell me about your eating, training, goals and health, plus my session notes and our messages. I use it to give you individual nutrition coaching. Basis: contract (Art. 6(1)(b)). For health information, your explicit consent (Art. 9(2)(a)).
- Visiting this website
- Technical data such as your IP address, handled by the hosting provider to deliver and protect the site. Basis: legitimate interest (Art. 6(1)(f)).
Health information is sensitive. You decide what to share, and I only ask for what is useful for your coaching. You can withdraw your consent at any time.
Do you have to give me this data?
You don't have to give me anything beyond what is needed to book and pay. Without your name, email and payment details I can't book a session or deliver a package. Sharing health information is voluntary, but without it I may not be able to give you advice that fits your situation. I do not make automated decisions or profile you.
3. Cookies and tracking
This website does not use cookies for advertising or analytics. The pages load fonts from Google Fonts, so your browser contacts Google's servers and your IP address is shared with them. The booking page (cal.com) and payment page (Stripe) are run by those companies and may use their own cookies under their own policies.
4. Who else receives your data
I only use providers needed to run my practice. I do not sell your data or use it for advertising.
- cal.com: booking calls (privacy policy)
- Stripe: payments. I never see or store your card number. (privacy policy)
- Netlify: website hosting (privacy policy)
- Email, video call and messaging tools we use to communicate, for example Gmail and the messaging app we agree on
- Accountant and public authorities, where the law requires it
Some providers are based outside the EU/EEA, for example in the USA. In that case the transfer relies on approved safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Where a provider handles data on my behalf, I rely on its data processing agreement.
5. How long I keep it
- Accounting records (invoices, payment records): 5 years, as required by the Norwegian Bookkeeping Act (bokføringsloven).
- Coaching information and session notes: only as long as needed to give you the service and to support you if you return. After that I delete or anonymise them. You can ask me to delete them sooner, unless I am required to keep something.
- Booking and email correspondence: as long as it is relevant to our work together, then deleted.
6. Reviews on this website
Client reviews are published with the client's permission. If you are quoted and want your review changed or removed, email me and I will do it.
7. Your rights
Under the GDPR and the Norwegian Personal Data Act you can ask me to:
- show you the data I hold about you (access)
- correct data that is wrong (rectification)
- delete your data (erasure)
- limit how I use it, or object to it
- give you your data in a portable format
- withdraw consent you have given. This does not affect what I did before you withdrew it.
Email linda.laurena@gmail.com. I will reply within one month.
If you are unhappy with how I handle your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the data protection authority in your own country.
8. Changes
If I change this policy, the new version will appear on this page with a new date.