top of page

Privacy Policy

Last updated: October 5, 2026

Crystal Kingdom School ("we", "us", "our") respects your privacy. This policy explains what personal data we collect when you visit www.crystalkingdom.org, contact us, sign up for our free content, or enroll in our courses, and how we use and protect it.

1. Who is responsible for your data

Crystal Kingdom School
Monika Zgalin (Wapiti Azalea)
Skogveien 12, 1831 Askim, Norway
Email: [school email]

We are the data controller under the EU General Data Protection Regulation (GDPR), which applies in Norway through the EEA Agreement.

2. What data we collect

  • Contact details you give us: name, email address, phone number (optional), and the content of your message when you use our contact form, chat, email or WhatsApp.

  • Newsletter and free content sign-ups: your name and email address when you request our free guided meditation or subscribe to our newsletter.

  • Course enrollment: your name, email address and course progress, handled through our course platform, Teachable. Payments are processed by Teachable and its payment partners. We never see or store your full card details.

  • Crystal kit orders: your name, shipping address, email and phone number, so we can send your order.

  • Technical data: when you visit our website, our website platform (Wix) automatically collects data such as IP address, browser type, device, pages visited and cookies.

3. Why we use your data and the legal basis

  • To answer your messages and questions (our legitimate interest in responding to you).

  • To give you access to your course, track your progress, issue your certificate and provide support (performance of a contract).

  • To process payments, refunds and kit deliveries (performance of a contract and legal obligations, such as accounting).

  • To send you the free meditation, newsletters and information about our courses (your consent). You can unsubscribe at any time using the link in every email.

  • To keep our website secure and understand how it is used (our legitimate interest, and your consent where cookies require it).

We do not sell your personal data, and we do not use it for automated decision-making.

4. Who we share your data with

We only share your data with trusted service providers who help us run the school:

  • Wix.com (website, forms, chat, email marketing)

  • Teachable (online courses and payments) and its payment processors

  • YouTube / Google (embedded videos)

  • Postal and courier services (crystal kit delivery only)

  • Our accountant or authorities, where the law requires it

Some of these providers are based outside the EEA, for example in the United States. In those cases, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

The International Association of Therapists (IAOTH), which accredits our certificates, does not receive your personal data from us unless you ask us to share it.

5. Cookies

Our website uses cookies to work properly, remember your preferences, and help us understand how visitors use the site. You can accept or decline non-essential cookies in the cookie banner, and change your choice at any time in your browser settings. Embedded YouTube videos may also set cookies when you play them.

6. How long we keep your data

  • Contact messages: for as long as needed to answer you and stay in touch. You can ask us to delete them at any time.

  • Newsletter data: until you unsubscribe.

  • Student and course data: for as long as you have access to the course, and then as long as needed to confirm your certification.

  • Payment and order records: as long as accounting law requires (in Norway, normally 5 years).

7. Your rights

You have the right to:

  • Access the personal data we hold about you

  • Correct data that is wrong or incomplete

  • Ask us to delete your data

  • Restrict or object to how we use your data

  • Receive your data in a portable format

  • Withdraw your consent at any time, without affecting earlier processing

To use any of these rights, write to us at [school email]. We will reply within one month.

If you believe we have not handled your data correctly, you can complain to the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no) or to the data protection authority in your own country.

8. Security

We use reputable platforms with secure, encrypted connections, and we only give access to your data to people who need it to run the school.

9. Children

Our courses and website are intended for adults. We do not knowingly collect personal data from children under 16.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.

11. Contact

For any questions about this policy or your personal data, write to:
[school email]

bottom of page