Privacy Policy

Effective Date: 6 May 2025

Herb Woman School (operated by Salon AS) is committed to protecting your personal data and your right to privacy. This policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

This policy complies with the General Data Protection Regulation (GDPR).

1. Who We Are

This website, www.herbwoman.com, is operated by Salon AS, a registered company based in Norway. We are responsible for managing your data when you use our services.

Contact for privacy questions: Email: support@herbwoman.com

2. What Information We Collect

We may collect and process the following personal data:

  • Name and contact details (email address, phone number)
  • Professional information (job title, area of interest)
  • Demographic data (country, language preference)
  • Purchase and payment information (only if you buy a course or product)
  • Website usage data (pages visited, links clicked)
  • Technical data (IP address, browser type, device information)
  • Communication preferences (email and update settings)
  • Information you voluntarily submit (survey responses, form entries)

3. How We Use Your Data

We use the data we collect to:

  • Provide and manage your access to our learning platform and resources
  • Send materials you request (guides, checklists, educational documents)
  • Communicate about courses, products, and resources (only with your consent)
  • Personalise your experience based on your interests and learning progress
  • Improve the website and teaching materials through analytics
  • Fulfil legal and regulatory obligations

4. Legal Basis for Processing Your Data

Under the GDPR, we collect and use your personal data only when one or more of the following applies:

  • Consent: You have given clear and informed consent (for example, by subscribing to our email list).
  • Contract: We need the data to fulfil a contract with you (for example, course registration or purchase).
  • Legal obligation: We are required to process data by law.
  • Legitimate interest: It is in our legitimate interest to improve our services and communicate with users, while respecting your rights.

5. How We Store and Protect Your Data

We take appropriate technical and organisational measures to protect your personal data. These include:

  • Secure hosting of our website and learning platform
  • Encrypted transmission of sensitive data (including payment details)
  • Restricted access to personal data (authorised personnel only)
  • Regular security monitoring and updates

Your data is stored on secure servers within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place as required under GDPR (such as Standard Contractual Clauses).

We retain your data only as long as necessary to fulfil the purposes in this policy, including legal, accounting, or reporting obligations. After this period, your data is securely deleted or anonymised.

6. Sharing Your Data

We do not sell, rent, or trade your personal data. We share your information only in the following cases:

  • Service providers: With trusted third-party providers (payment processors, email services, learning platforms) who help deliver our services and are contractually bound to protect your data.
  • Legal requirements: When required by law (for example, tax or regulatory obligations).
  • With your consent: If you give explicit permission (for example, to collaborate with other students or mentors).

All third parties who process your data must comply with GDPR and provide adequate data protection guarantees.

Certificate Requirements

To receive a certificate, students must allow essential functional cookies and progress tracking. These are required to verify lesson completion, exam results, and course participation.

If a student disables these technologies, the school cannot verify progress and cannot issue a certificate.

7. Your Rights Under GDPR

You have the right to access, correct, delete, or restrict the use of your personal data. Specifically, you can:

  • Request a copy of the personal data we hold about you
  • Ask us to update or correct inaccurate or incomplete data
  • Withdraw your consent at any time (where processing is based on consent)
  • Object to data processing based on our legitimate interests
  • Request deletion of your data (“right to be forgotten”) in certain situations
  • Lodge a complaint with a supervisory authority

Supervisory authority for Norway: Datatilsynet (Norwegian Data Protection Authority)

To exercise any of your rights, contact us at: support@herbwoman.com

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website. These help us:

  • Understand how visitors use the site
  • Remember your preferences (language, login status)
  • Deliver relevant content

You can control or disable cookies through your browser settings. Some features of the website may not function properly without cookies.

For more details, see our Cookie Policy.

9. Children’s Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from anyone under this age without verified parental consent.

If you believe a child has provided us with personal data, please contact us immediately so we can delete the information.

10. Changes to This Policy

We may update this privacy policy to reflect changes in the law, our services, or our data practices. When we make changes, we update the Effective Date at the top of this page. Where appropriate, we notify you by email or website notice.

We encourage you to review this policy periodically.

11. Contact Information

If you have questions, concerns, or wish to exercise your rights, contact us:

Email: support@herbwoman.com Operator: Salon AS Website: www.herbwoman.com Address: Skreddarstuva 141, 4160 Finnøy, Norway