This privacy policy provides you with details of how we collect and process your personal data when you use our services or/and when you request materials from us. This privacy policy may be adjusted and updated to reflect our internal routines and legal obligations. You will always find the current version on our webpage leighnoren.com.
Kessel och Norén Consult & Holding AB (559058-9825) is the data controller and we are responsible for all the personal data that we process (referred to as “we”, “us” or “our” in this privacy policy).
Kessel och Norén Consult & Holding AB is fully compliant with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and we extend the rights following to all our users, regardless of whether you live in the EU or not.
By providing us with your personal data, you guarantee us that you are at least 18 years old.
What data do we collect?
We process information about you in form of name, e-mail address, your IP-address, what product you purchased, payment details, information relating to your health and sexuality and other potential personal data that you might provide us with, given that we do not consider the data to be outside our scope of our purpose of processing your personal data.
We mainly collect your personal data from you, however personal data such as your IP-address is collected when you visit your webpage, depending on your browser settings.
We may request that you confirm or update your personal data at any given time to ensure that the data we process is accurate and up to date.
Why do we process your personal data?
We process your personal data to be able to provide you with support, send you requested materials and to be able to provide you with individual coaching. We also process information about why you have signed up for our newsletter, signed up for a waitlist or why you have chosen to download our free online materials to be able to tailor the content list for you.
Moreover, we also process your personal data in order to be able to provide you with information about your purchases, to be able to complete transactions and any personal data that we are obligated by the law to preserve in accordance with the accounting regulation (Sw. bokföringslagen).
We only process your personal data if we have a legal ground for such process. We process your personal data relating to name, e-mail address, information relating to your health and sexuality based upon your given consent. You have the right to withdraw your consent at any given time. If you chose to withdraw your consent, we will delete your personal data from our records and databases except information that we are required to preserve for a certain amount of time to fulfill our legal obligations.
If you wish to withdraw your consent, you do this by sending an e-mail to us at hello@leighnoren.com.
However, if you wish to unsubscribe to our e-mails, you can do this by simply click the link “Click here to unsubscribe from further e-mails” at the bottom of any of our e-mails. We will take this to mean that you are withdrawing your consent for us to use your data and make sure that you are removed from our e-mail list.
We process personal data relating to information about your purchases and payment details which is necessary for us in order to fulfill our agreement. We also process the personal data to be able to respond to any complaints or disputes that might arise relating to the agreement.
We also process your personal data relating to invoices and receipt in order to fulfill our legal obligations following the accounting regulation (Sw. “bokföringslagen”)
How long is the data processed for?
If you are a client of ours, we process your personal data for as long as you are our client, given that you have not withdrawn your consent. If you would choose to withdraw your consent all the personal data relating to you will be deleted.
We also process your personal data in e-mail format for as long it takes us to answer the e-mail but never longer than 30 days.
Personal data that is of importance for the contractual relationship between us and you are normally stored for as long as the contractual relationship lasts and thereafter for a maximum of three years.
Other information relating to invoices and receipt is stored for eight years as mandated by the accounting regulation (Sw. “bokföringslagen”).
We do not share personal data with any third party other than GDPR-compliant service providers, professional advisors such as lawyers, bankers, auditors and insurers and government bodies where we are required by law to provide information. We have signed a personal data processing agreement with all our suppliers, which means that they are obliged to process the information securely, correctly and with confidentiality. A supplier is never allowed to use the information for any purpose other than that in accordance with our instructions.
Note however that out website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
Cookies
We use the standard “cookies” feature of major web browsers (see our Cookie policy [LINK] for details). We do not set any personally identifiable information in cookies, nor do we employ any data-capture mechanisms on our webpage other than cookies.
Transfer of data to a third country
We use suppliers, for example to communicate with you, which means you’re your personal data may be transferred to the USA. The transfer of personal data to the USA will be based upon that you have given your explicit consent to such transfer, as the USA does not provide an equivalent protection to the GDPR.
Furthermore, we may use other suppliers for example to store personal data, which may take place outside the EU and the EEA. Before we use such a supplier, we ensure that the countries legislation has an adequate level of protection for personal data or that we have taken technical measures to achieve an adequate level of protection and that EU standard contractual clauses has been signed to ensure that your rights are protection.
Security
All the data including personal data that we receive is protected by confidentiality. We also protect all the data that we process by using various of different technical and organizational measures. This means that we have internal routines which limits the possibility that an unauthorized person would be granted accesses the data.
The GDPR provides the following rights for you as a data subject;
Right to information and access
You have the right to be given information about the personal data processing relating to you and how the personal data is processed. You also have the right to request a copy of the personal data that we process. If you exercise your right, we will provide you with the information within 30 days from when we received your request.
Right to rectification
You have the right to contact us and request that any inaccurate information is rectified. This also means that you have the right to add such personal data that is missing and that is relevant considering the purpose of the personal data processing.
Right to erasure
You have the right to contact us and request that the personal data relating to you be erased, for example if the personal data is no longer needed for the purpose for which it was collected for or if the processing is based upon consent and you withdraw your consent.
Right to limitation of processing
In certain cases, you have the right to demand that the processing of your personal data is to be limited. Limited means that the data is flagged so that in the future the personal data may only be processed for certain limited purposes.
When the limitation ceases are applicable, you are informed of this.
Right to object
You have the right to object against our personal data processing. If you object towards our processing we are only allowed to continue to process your personal data, is we have a legitimate interest that overrides your interest, rights and freedoms or if the processing is carried out for the establishment, exercise or defense of any legal claims.
Data portability
You have the right to extract your personal data in such a format that it can be read by another supplier of a similar service.
Complaints
If you are unhappy with any aspects of how we collect and process your personal data, you have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (Imy.se).
Our contact details
If you wish to get in touch with us regarding the process of your personal data or want to exercise any of your rights you can contact us using the following details,
Email Address: hello@leighnoren.com
Last Updated: August, 2021
Copyright © 2019-2026 Leigh Norén. All Rights Reserved. | Website by Pinegate Road
Cookie policy | Terms & Conditions | Privacy Policy