Privacy Policy

Effective Date: 6th of May 2025

At Herb Woman School (operated by Salon AS), we are committed to protecting your personal data and your right to privacy. This privacy policy explains how we collect, use, store, and protect your information when you visit our website or interact with our services. It is designed to comply with the General Data Protection Regulation (GDPR) and to reflect the values of transparency and respect that guide our work.

1. Who We Are

This website, www.https://herbwoman.comhttps://herbwoman.com/island, is operated by Salon AS, a registered company based in Norway. We are responsible for managing your data when you use our services.

If you have any questions about this policy or how we use your data, you can contact us at:
support@https://herbwoman.comhttps://herbwoman.com/island

2. What Information We Collect

We may collect and process the following personal data:

Name and contact details (such as email address and phone number)
Professional information (such as job title or area of interest)
Demographic data (such as postal code or language preference)
Purchase and payment information (only if you buy a course or product)
Information about how you use our website (pages visited, links clicked, etc.)
IP address, browser type, and device information (automatically collected)
Preferences for receiving emails and course updates
Any information you voluntarily submit (e.g., survey responses, form entries)

3. How We Use Your Data

We use the data we collect for the following purposes:

To provide and manage your access to our online learning platform and resources
To send you the materials you request (such as guides, checklists, or herbal PDFs)
To communicate with you about our courses, offerings, and resources (only if you opt in)
To personalize your experience based on your interests and learning progress
To improve the website and our teaching materials through analytics
To fulfill legal and regulatory obligations if applicable

4. Our Legal Basis for Processing Your Data

Under the GDPR, we only collect and use your personal data when one or more of the following applies:

You have given us clear and informed consent (for example, by signing up for our email list)
We need the data to fulfill a contract with you (e.g., course registration or purchase)
We are required to do so by law
It is in our legitimate interest to improve our services and communicate with interested users, while always respecting your rights

5. How we store and protect your data

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

Secure hosting of our website and learning platform
Encrypted transmission of sensitive data (e.g., payment details)
Restricted access to personal data (authorized personnel only)
Regular monitoring and security updates

Your data is stored on secure servers within the European Economic Area (EEA). If we ever need to transfer data outside the EEA, we ensure appropriate safeguards are in place as required under GDPR (such as Standard Contractual Clauses or equivalent mechanisms).

We retain your data only as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting obligations. After this period, your data will be securely deleted or anonymized.

6. Sharing your data

We do not sell, rent, or trade your personal data. We only share your information in the following limited cases:

With trusted third-party service providers (e.g., payment processors, email services, learning platforms) who help us deliver our services and are contractually bound to protect your data
When legally required (e.g., to comply with tax, legal, or regulatory obligations)
If you give explicit consent (e.g., to collaborate with other students or mentors)

We ensure that any third parties who process your data comply with GDPR and provide adequate data protection guarantees.

7. Your rights under GDPR

You have the right to access, correct, delete, or restrict the use of your personal data. Specifically, you can:

Request a copy of the personal data we hold about you
Ask us to update or correct inaccurate or incomplete data
Withdraw your consent at any time (where processing is based on consent)
Object to data processing based on our legitimate interests
Request erasure of your data (“the right to be forgotten”) in certain situations
Lodge a complaint with a supervisory authority (in Iceland, this is Persónuvernd)

To exercise any of your rights, please contact us at: support@https://herbwoman.comhttps://herbwoman.com/island

8. Cookies and tracking technologies

We use cookies and similar technologies to enhance your experience on our website. These help us:

Understand how visitors use the site
Remember your preferences (e.g., language, login status)
Deliver relevant content and offers

You can control or disable cookies through your browser settings. Please note that some features of the website may not function properly without cookies.

For more details, see our full Cookie Policy.

9. Children’s privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under this age without verified parental consent.

If you believe a child has provided us with personal data, please contact us immediately so we can delete the information.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in the law, our services, or our data practices. When we make changes, we will update the Effective Date at the top of this page and, where appropriate, notify you (e.g., via email or website notice).

We encourage you to review this policy periodically to stay informed about how we protect your data.