Skip to main content
Privacy

Privacy Policy

Last updated: 7 August 2026

This Privacy Policy explains how Path to Norway handles your personal data when you use our service.

1. Who we are

Controller of your personal data: PathToNorway AS, Stokkabrautene 19, 4023 Stavanger, Norway.

Organization number: 938 112 347

Email: info@pathtonorway.com

2. What data we collect

Depending on how you use the service, we may collect:

  • Name
  • Email address
  • Login credentials (encrypted where applicable)
  • Purchase history
  • Access tier selected
  • Quiz/test results and progress
  • Analytics events, approximate location, and device/browser information if you allow analytics

3. Why we use your data

We process data to:

  • Create and manage accounts
  • Provide paid access
  • Process payments
  • Deliver content and track progress
  • Understand and improve the service when you have allowed analytics

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal bases

Depending on context, processing is based on:

  • Performance of a contract
  • Legal obligations
  • Legitimate interests
  • Consent for optional analytics

5. Payment providers

Payments may be processed by third parties such as:

  • Stripe
  • Vipps

These providers process payment information under their own privacy terms.

6. Data sharing

We may share limited data with trusted providers for:

  • Hosting and infrastructure (Cloudflare)
  • Login and account management (Auth0)
  • Database and storage (Supabase)
  • Payment processing (Stripe, Vipps)
  • Email delivery
  • Privacy-friendly analytics through PostHog EU, only after consent
  • Accounting and compliance

We do not sell personal data.

7. International data transfers

Some of our providers, such as Stripe, Auth0, and Cloudflare, are based in or may process data in the United States or other countries outside the EEA.

Where personal data is transferred outside the EEA, we rely on safeguards such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

8. Retention

We retain data only as long as necessary for service delivery, legal obligations, dispute handling, and legitimate business needs.

Purchase and accounting records are kept for five years, as required by the Norwegian Bookkeeping Act (bokføringsloven).

Account data is kept while your account is active and is deleted or anonymised when you delete your account, unless longer retention is legally required.

9. Your rights

Subject to applicable law, you may request:

  • Access to your data
  • Correction
  • Deletion
  • Restriction
  • Objection
  • Portability
  • Withdrawal of consent where relevant

Requests can be sent to info@pathtonorway.com.

10. Security

We use reasonable technical and organisational measures to protect personal data, but no system is 100% secure.

11. Cookies

We use necessary cookies or local storage for login, security, and remembering your privacy choices. If you choose Allow analytics, PostHog may use cookies or local storage through features.pathtonorway.com to measure product usage. Analytics is off until you consent, and you can withdraw consent at any time from Privacy choices.

12. Complaints

Complaints can be sent to info@pathtonorway.com.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no).

13. Updates

We may update this policy from time to time. The latest version will be published on this website.