Privacy Policy

This page explains what we collect on this site, why we need it, who else gets it, and what you can ask us to do with it. We don’t sell your data.

Who is responsible

Studio Volyk, based in Norway, decides how your data is used. Under GDPR that makes us the controller. Questions go to [email protected].

What we collect

Your name, email and phone number when you fill in a form. Anything you write or say to us by email, text or on a call. And some basic information about your visit: which pages you saw, whether you watched the video, your device and browser, rough location from your IP address, and the ad or link that brought you here.

We don’t need patient or health information, so please don’t send any.

Why we use it

To send you the training you asked for. To follow up by email and text, which we only do with your consent. To talk about working together, and to do the work if you become a client. To see how the site and our ads perform, if you accept those cookies. To keep the site secure and free of spam. And to keep accounting records for clients, which Norwegian law requires.

The form is optional, but without your email and phone we can’t send you the training. We don’t make automated decisions about you that have legal or similar effects.

Legal basis

Under GDPR article 6 we rely on: your request (sending the training), your consent (follow-up messages and tracking cookies), a contract or steps toward one (working together), our legitimate interest (security and spam protection), and legal obligation (bookkeeping). You can withdraw consent at any time. That doesn’t undo what was done before.

Text messages

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.

Your number only goes to the providers that send our texts. Reply STOP to any message to stop them, or HELP for help.

Who else gets your data

Only the services we use to run the business, and only what they need:

• HighLevel (LeadConnector), for the website, forms, CRM, email and texts, plus the delivery companies it uses to send them
• Google, for YouTube video hosting and Google Ads measurement
• Meta, for ad measurement, only if you accept marketing cookies
• Our accountant, for client invoices and payments

We also share data if the law requires it, or to protect our legal rights.

Transfers outside Europe

Some of these companies are in the US. When data leaves the EU/EEA, we rely on the EU-US Data Privacy Framework for certified companies, or on the EU Standard Contractual Clauses. Ask us and we’ll send you a copy.

Cookies

Some cookies are needed for the site to work, for example to submit the form. Analytics and ad cookies only run if you accept them in the cookie banner. To change your choice, clear cookies in your browser and the banner will appear again.

How long we keep it

If you don’t become a client, we delete your details 24 months after we last spoke. Client data stays while we work together, and accounting records are kept for 5 years after the end of the financial year, as Norwegian law requires. If you unsubscribe, we keep your email or number on a do-not-contact list so we don’t message you again by mistake.

Your rights

You can ask to see the data we have about you, correct it, delete it, limit how we use it, or get a copy to take somewhere else. You can also object to how we use it for our legitimate interests. Email [email protected] and we’ll answer within a month.

If you’re not happy with how we handle your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the authority in your own country.

US visitors

We don’t sell your personal information. We only “share” it for cross-context behavioral advertising, as California law defines it, through ad cookies you accept. You can ask to see or delete your data in the same way as above, and asking won’t change how we treat you.

Security

We use established providers, limit who can access your data, and use encrypted connections. No system is completely safe. If a breach affects you, we’ll tell you and the authorities as the law requires.

Children

This site is for business owners and isn’t meant for anyone under 18. We don’t knowingly collect their data.

Changes

If we change this policy, the date at the top will change. If it’s a big change, we’ll also email you.