PRIVACY POLICY
Last updated: October 2, 2026
Your privacy is important to me. This Privacy Policy explains what personal information Northern Lights Coaching & Consulting collects, why I use it, how it may be stored or shared, and the rights available to you.
1. Who is responsible for your information
Northern Lights Coaching & Consulting (NLCC) is the trading name of Soren Stone Coaching, an enkeltpersonforetak (ENK) registered in Norway, organisation number 937 735 030.
Data controller: Soren Stone Coaching
Organisation number: NO 937735030
Business address: Bygdøy allé 21, 0256 Oslo, Norway
Email: sorenwstone@gmail.com
My websites are:
www.northernlightscoaching.eu
www.sorenstonecoaching.no
Soren Stone Coaching is the data controller for personal information processed in connection with these websites and services unless another organisation is identified as the controller for a particular service.
Certain relationship services are offered in collaboration with Kirien Eyma, who participates as a relational and mindfulness practitioner. When you choose Co-Facilitated Relationship Counselling, Kirien may receive or have access to personal information reasonably necessary to provide that service, as described below.
Kirien does not have access to information about clients who work individually with me simply because he collaborates with me on relationship services.
2. What information I collect
The information I collect depends on how you interact with me.
It may include:
Contact information: your name, email address, telephone number, country or location, and information submitted through website, booking, or contact forms.
Service information: appointment information, correspondence, course or account information, and information you voluntarily share while participating in counselling, coaching, relationship work, consultations, groups, courses, workshops, retreats, or other services.
For Co-Facilitated Relationship Counselling, service information may also include information necessary for Kirien and me to coordinate and provide the shared relationship work.
Payment and invoice information: information necessary to administer purchases, payments, invoices, refunds, and financial records.
Session notes: I may make limited written notes or doodles during sessions to help me follow and remember our conversation. I aim to keep these brief and avoid unnecessary identifying information.
Technical information: my website and service providers may process information such as IP address, browser and device information, approximate location based on technical information, referring pages, pages visited, cookie information, and information about how the website is used.
I aim to collect only information reasonably relevant to the purpose for which it is being used.
3. Sensitive or special-category information
Because of the nature of counselling, coaching, and relationship work, you may choose to share information that is considered a special category of personal data under data-protection law. This may include information concerning health, racial or ethnic origin, religion or philosophical beliefs, sexual orientation, sexual life, or other protected information.
I do not ask you to disclose more sensitive information than is reasonably relevant to the service you have chosen.
In Co-Facilitated Relationship Counselling, information you choose to share during shared sessions will necessarily be available to both practitioners. Information from individual sessions connected with the co-facilitated work may also be discussed between Kirien and me where reasonably necessary to maintain continuity or provide the shared service, as explained in the Informed Consent.
Where processing sensitive information requires explicit consent, I will rely on that consent or another lawful basis available under applicable law. Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not make processing that occurred before withdrawal unlawful, although in some circumstances I may no longer be able to provide a service that depends on processing that information.
4. How I use personal information
I may use personal information to:
respond to inquiries
communicate with you
schedule and provide services you request
coordinate and provide Co-Facilitated Relationship Counselling where you have chosen that service
manage bookings, events, courses, and accounts
administer purchases and payments
issue invoices and maintain required financial records
operate and secure my website and business systems
respond to administrative, privacy, or legal matters
improve services where appropriate
send newsletters or marketing communications when you have chosen to receive them
I do not sell your personal information.
Information obtained through counselling, coaching, or relationship work is not provided to Kirien for marketing or for purposes unrelated to the service you have chosen.
5. Legal bases for processing
Different activities may rely on different legal bases.
Information necessary to respond to a service request, arrange an appointment, administer a purchase, or provide an agreed service may be processed because it is necessary to take steps at your request before entering into an agreement or to perform an agreement with you.
When you choose Co-Facilitated Relationship Counselling, this may include processing reasonably necessary for Kirien and me to coordinate and provide the co-facilitated service.
Information I am required to keep for accounting, taxation, or other legal purposes is processed because I have a legal obligation to do so.
Some limited administrative, security, fraud-prevention, or business-management activities may be processed on the basis of legitimate interests where those interests are not overridden by your rights and interests.
Newsletters, optional marketing, non-essential cookies, and other activities based on consent are processed where appropriate consent has been obtained. Where consent is the legal basis for processing, you may withdraw that consent at any time.
Special-category information receives the additional protections described above.
6. Service providers, collaborators, and sharing
I use third-party services to help operate my business.
Depending on how you interact with Northern Lights Coaching & Consulting, these may include providers for:
website hosting
scheduling
payment processing
invoicing and accounting
email
communications
videoconferencing
course delivery
analytics
advertising
other technical services
Providers may include services such as Squarespace, Stripe, Fiken, Google, Calendly, and WhatsApp, as well as other providers introduced or replaced over time.
Where a provider processes information on my behalf, I aim to use appropriate contractual and privacy arrangements. Some providers may act as independent controllers of certain information under their own terms and privacy policies.
Co-Facilitated Relationship Counselling
When you choose Co-Facilitated Relationship Counselling, Kirien Eyma participates as an authorised collaborating practitioner in providing that service.
Information that may be available to Kirien can include:
your name and relevant contact or scheduling information
information you voluntarily share during consultations or shared relationship sessions
information reasonably necessary for preparing for or coordinating sessions
relevant information arising during individual sessions connected with the shared relationship work, where necessary for continuity or responsible co-facilitation
Kirien and I may communicate with one another about the relationship work between sessions when reasonably necessary to prepare, reflect on the relationship process, coordinate the work, or maintain continuity. Kirien is expected to treat information learned through the co-facilitated work as private and to use it only for purposes connected with providing the agreed service.
Information about clients who work only with me individually is not ordinarily shared with Kirien. The way privacy and information from optional individual sessions are handled within relationship work is described more fully in the Informed Consent. I may also disclose information where required by law or where disclosure is otherwise lawfully necessary.
7. Transfers outside Norway and the EEA
Some service providers may store or process personal information outside Norway or the European Economic Area.
Where personal information is transferred outside the EEA, I use or rely on an appropriate transfer mechanism where required, such as an adequacy decision, contractual safeguards, or another lawful transfer mechanism.
Information about relevant safeguards can be requested by contacting me.
8. How long I keep information
I keep personal information only for as long as reasonably necessary for the purpose for which it was collected or where I am legally required to retain it.
For example:
inquiry and ordinary correspondence is periodically reviewed and deleted when no longer reasonably needed
information connected with an ongoing client or customer relationship may be retained while we are working together and for a reasonable period afterward where needed for administration, follow-up, dispute resolution, or legitimate business purposes
brief session notes are kept only for as long as reasonably necessary for the work
information connected with Co-Facilitated Relationship Counselling is retained only for as long as reasonably necessary for providing and administering that work or where another lawful retention requirement applies
invoices, payments, and accounting documentation are retained for the period required by applicable Norwegian accounting and tax law
newsletter information is retained until you unsubscribe, withdraw consent, or the mailing list is otherwise discontinued
I periodically review information I hold and delete or anonymise information that I no longer need.
9. How I protect information
I use reasonable technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse.
Access to information is limited to what is reasonably necessary for operating my business and providing services. Where Kirien participates in Co-Facilitated Relationship Counselling, his access is limited to information reasonably necessary for providing that service.
No electronic system or communication method can guarantee absolute security.
If I become aware of a personal-data breach, I will respond in accordance with applicable data-protection requirements.
10. Cookies and analytics
This website may use cookies and similar technologies necessary for basic website operation.
Optional cookies or technologies used for analytics, advertising, or other non-essential purposes are used only where the required consent has been obtained.
You can accept, reject, or manage optional cookies through the cookie-preference controls available on the website. You may also manage cookies through your browser settings, although disabling necessary technologies may affect some website functions.
Consent to optional cookies can be changed or withdrawn through the website's cookie settings.
11. Marketing communications
If you choose to join a mailing list or receive marketing communications, I may use your contact information to send those communications.
You can unsubscribe at any time through the unsubscribe function in the message or by contacting me.
Withdrawing marketing consent does not affect ordinary administrative or service-related communications necessary for an existing relationship.
Personal information shared in counselling, coaching, relationship sessions, or consultations is not used for marketing purposes.
12. Your data-protection rights
Depending on the circumstances and applicable law, you may have the right to:
request access to personal information held about you
request correction of inaccurate or incomplete information
request deletion of information in certain circumstances
request restriction of processing in certain circumstances
object to certain processing
receive certain information in a portable format where the right to data portability applies
withdraw consent where consent is the legal basis for processing
Some rights have legal limitations and do not apply in every circumstance.
To exercise your rights or ask a privacy question about information processed through Northern Lights Coaching & Consulting, including information used in Co-Facilitated Relationship Counselling, contact sorenwstone@gmail.com.
You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet, or another competent data-protection authority where applicable.
13. Automated decision-making
I do not use personal information to make decisions about you based solely on automated processing that produces legal or similarly significant effects.
14. Third-party websites
My website may contain links to websites or services operated by other organisations.
I am not responsible for the privacy practices of independent third-party websites. Their handling of personal information is governed by their own privacy policies and terms.
15. Changes to this Privacy Policy
I may update this Privacy Policy to reflect changes to my services, collaborators, technology, service providers, or legal requirements.
The current version will remain available on this page, and the date above will show when it was last updated.
If I make a significant change that materially alters how personal information already collected is used, I will take reasonable steps to provide appropriate notice where required.
16. Contact
Questions about this Privacy Policy, your personal information, or your privacy rights are welcome.
Soren Stone Coaching / Northern Lights Coaching & Consulting
Organisation number: NO 937735030
Bygdøy allé 21, 0256 Oslo, Norway
Email: sorenwstone@gmail.com