Privacy Policy
Last updated: October 16, 2026
This Privacy Policy explains how TeachOps (teachops.online), a brand of Studio Nordstrønen / Tom Nordstrønen ("we", "us", "our"), collects and uses personal data when you visit our website, watch our videos, sign up for free resources, join a waitlist or buy our courses. We process personal data in line with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act, and, where they apply to you, the laws listed in section 12.
1. Who is responsible for your data
The data controller is Studio Nordstrønen, Tom Nordstrønen, registered in the Brønnøysund Register Centre, Norway. VAT number: NO 947044745 MVA. Website: studionordstronen.no.
Address: Strønevegen 403, NO-5218, Vestland, Norway
Contact for all privacy matters: our contact form at teachops.online/contact
Norway is part of the EEA, so we are established in the EEA and do not need a separate EU representative. We have not appointed a Data Protection Officer because we are not required to; privacy questions go to the contact above.
2. What data we collect and where it comes from
- Information you give us: name, email address, country, answers to forms or quizzes, messages to us, and account details when you sign up, join a waitlist, contact us or create an account.
- Purchase information: name, email, billing address, country, VAT details, order history, coupon used and payment status. Card and payment details are handled by our payment providers and are not stored by us.
- Course and usage data: lessons accessed, progress, video playback, downloads, and email interactions such as opens and clicks.
- Technical data: IP address, device and browser type, language, pages visited, referring page, approximate location derived from IP, and cookie or similar identifiers (see our Cookie Policy).
- Data from third parties: payment providers (payment confirmation), and social/video platforms if you contact us there.
We do not intentionally collect special categories of personal data (such as health data) and ask that you do not send them to us.
3. Why we use your data and our legal basis
- Deliver what you asked for (free downloads, waitlist updates, course access, customer support). Legal basis: performance of a contract or steps before entering a contract (GDPR art. 6(1)(b)).
- Process payments, bookkeeping and tax. Legal basis: contract and legal obligation (art. 6(1)(b) and (c)), including the Norwegian Bookkeeping Act.
- Send marketing emails about our courses and resources. Legal basis: your consent (art. 6(1)(a)). You can withdraw consent at any time using the unsubscribe link or by contacting us via the contact form. Withdrawal does not affect earlier processing.
- Send service emails about your order or account. Legal basis: contract (art. 6(1)(b)).
- Operate, secure and improve the website and courses, measure performance, and prevent fraud and abuse. Legal basis: our legitimate interests (art. 6(1)(f)). You may object at any time (see section 8).
- Analytics and non-essential cookies or similar technologies. Legal basis: your consent where required (art. 6(1)(a) and the Norwegian Electronic Communications Act).
- Establish, exercise or defend legal claims. Legal basis: legitimate interests (art. 6(1)(f)).
Where we rely on consent or on a contract, providing the data is necessary for the service concerned; without it we cannot deliver it. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.
4. Who we share data with
We do not sell your personal data. We share it only with recipients who process it on our behalf or where required, such as:
- Kajabi, LLC (website hosting, course platform, email delivery, checkout, contact management and analytics) and its sub-processors, such as Amazon Web Services, RudderStack and Datadog.
- Payment providers used at checkout, such as Stripe or PayPal, and Kajabi Payments.
- Video and content hosts such as Wistia and YouTube (Google) when you watch embedded videos.
- Accountants, advisers and IT or professional service providers bound by confidentiality.
- Authorities, courts and others where the law requires or permits disclosure.
A list of our current processors is available on request.
5. Transfers outside the EEA
Some recipients, including Kajabi, are based in or process data in the United States or other countries outside the EU/EEA. Where personal data is transferred outside the EU/EEA, we rely on a legal transfer mechanism, such as an adequacy decision (including the EU-US Data Privacy Framework for certified companies) or the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can request a copy of the safeguards by contacting us via the contact form.
6. How long we keep data
- Subscriber and contact data: until you unsubscribe or ask us to delete it, and we may keep a minimal suppression record so we do not email you again.
- Waitlist data: until the launch communication has been completed or you unsubscribe, whichever is earlier.
- Customer and accounting records: five years after the end of the financial year, as required by Norwegian bookkeeping law.
- Course account and progress data: while your account or access is active, and then for a reasonable period needed for support and legal claims.
- Support correspondence: up to 3 years after the matter is closed.
- Analytics and cookie data: as set out in our Cookie Policy and by the providers' settings.
7. Security
We use appropriate technical and organizational measures, such as access controls, encrypted connections (HTTPS), and reliable providers, to protect your data. If a personal data breach is likely to put your rights at risk, we will notify the supervisory authority and, where required, you. No online service can be completely secure.
8. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data erased ("right to be forgotten") where the conditions are met;
- restrict processing in certain cases;
- object to processing based on legitimate interests, and to object at any time to direct marketing;
- data portability: receive your data in a structured, commonly used, machine-readable format;
- withdraw consent at any time, without affecting earlier processing;
- not be subject to solely automated decisions with legal or similar effects (we do not make such decisions).
To use your rights, contact us via our contact form at teachops.online/contact. We may need to verify your identity, and we will respond within one month (extendable by two months for complex requests). You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) or to the supervisory authority in the country where you live or work.
9. Children
Our courses are intended for adults and professionals. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
10. Third-party links and embedded content
Our website links to or embeds other services (for example YouTube and Wistia). They have their own privacy policies and we are not responsible for their practices.
11. Cookies
We use cookies and similar technologies as described in our Cookie Policy. Where consent is required, non-essential cookies are used only after you agree. Where supported, we respect browser signals such as Global Privacy Control as an opt-out of sale/sharing and targeted advertising.
12. Additional information for specific regions
United Kingdom
For UK visitors, the UK GDPR and the Data Protection Act 2018 apply. The rights in section 8 apply equally. You may complain to the Information Commissioner's Office (ico.org.uk).
Switzerland
For Swiss residents, the Swiss Federal Act on Data Protection (FADP) applies in addition. You may contact the Federal Data Protection and Information Commissioner (FDPIC).
California, USA (CCPA/CPRA) and other US states
We collect the categories of personal information described in section 2 (identifiers, commercial information, internet activity, and inferences from your use of the site) for the business purposes in section 3. In the past 12 months we have not sold personal information for money. Some analytics or advertising cookies, if enabled, may count as "sharing" for cross-context behavioral advertising; you can opt out through the cookie settings or a Global Privacy Control signal. California residents and residents of other US states with privacy laws have the right to know, access, correct, delete and port their personal information, to opt out of sale/sharing and targeted advertising, and not to be discriminated against for exercising these rights. To exercise them, contact us via our contact form at teachops.online/contact; you may use an authorized agent. We do not knowingly sell or share personal information of consumers under 16. We do not use sensitive personal information to infer characteristics.
Canada (PIPEDA and CASL)
We handle personal information with your consent and for the purposes stated in this policy. You may withdraw consent, access and correct your information, and complain to the Office of the Privacy Commissioner of Canada. Commercial emails are sent only with consent and always include an unsubscribe option.
Australia
We handle personal information in line with the Australian Privacy Principles of the Privacy Act 1988. You may request access or correction and, if unsatisfied with our response, complain to the Office of the Australian Information Commissioner (oaic.gov.au). Our overseas recipients are listed in section 4 and 5.
Brazil (LGPD)
For Brazilian users, the LGPD applies in addition. Our legal bases correspond to those in section 3, and you have the rights in section 8 as well as the right to information about shared data and to anonymization or blocking of unnecessary data. Complaints may be made to the Autoridade Nacional de Proteção de Dados (ANPD).
Other countries
If you live elsewhere, you have the rights granted by your local law, and we will honor them as far as applicable. Contact us at the address in section 1.
13. Email marketing
We send marketing emails only to people who have subscribed or bought from us and consented where required. Every email contains a one-click unsubscribe link, and we honor opt-outs promptly. Our emails identify us as the sender and include our postal address, as required by laws such as the US CAN-SPAM Act and CASL.
14. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page with the date of the last update. For material changes we will inform you where required.
15. Contact
Studio Nordstrønen / TeachOps, Strønevegen 403, NO-5218, Vestland, Norway. Contact form: teachops.online/contact.