Privacy Policy
Last updated: 7 August 2026
This Privacy Policy explains how Path to Norway handles your personal data when you use our service.
1. Who we are
Controller of your personal data: PathToNorway AS, Stokkabrautene 19, 4023 Stavanger, Norway.
Organization number: 938 112 347
Email: info@pathtonorway.com
2. What data we collect
Depending on how you use the service, we may collect:
- Name
- Email address
- Login credentials (encrypted where applicable)
- Purchase history
- Access tier selected
- Quiz/test results and progress
- Analytics events, approximate location, and device/browser information if you allow analytics
3. Why we use your data
We process data to:
- Create and manage accounts
- Provide paid access
- Process payments
- Deliver content and track progress
- Understand and improve the service when you have allowed analytics
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
4. Legal bases
Depending on context, processing is based on:
- Performance of a contract
- Legal obligations
- Legitimate interests
- Consent for optional analytics
5. Payment providers
Payments may be processed by third parties such as:
- Stripe
- Vipps
These providers process payment information under their own privacy terms.
6. Data sharing
We may share limited data with trusted providers for:
- Hosting and infrastructure (Cloudflare)
- Login and account management (Auth0)
- Database and storage (Supabase)
- Payment processing (Stripe, Vipps)
- Email delivery
- Privacy-friendly analytics through PostHog EU, only after consent
- Accounting and compliance
We do not sell personal data.
7. International data transfers
Some of our providers, such as Stripe, Auth0, and Cloudflare, are based in or may process data in the United States or other countries outside the EEA.
Where personal data is transferred outside the EEA, we rely on safeguards such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.
8. Retention
We retain data only as long as necessary for service delivery, legal obligations, dispute handling, and legitimate business needs.
Purchase and accounting records are kept for five years, as required by the Norwegian Bookkeeping Act (bokføringsloven).
Account data is kept while your account is active and is deleted or anonymised when you delete your account, unless longer retention is legally required.
9. Your rights
Subject to applicable law, you may request:
- Access to your data
- Correction
- Deletion
- Restriction
- Objection
- Portability
- Withdrawal of consent where relevant
Requests can be sent to info@pathtonorway.com.
10. Security
We use reasonable technical and organisational measures to protect personal data, but no system is 100% secure.
11. Cookies
We use necessary cookies or local storage for login, security, and remembering your privacy choices. If you choose Allow analytics, PostHog may use cookies or local storage through features.pathtonorway.com to measure product usage. Analytics is off until you consent, and you can withdraw consent at any time from Privacy choices.
12. Complaints
Complaints can be sent to info@pathtonorway.com.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no).
13. Updates
We may update this policy from time to time. The latest version will be published on this website.