Privacy Policy

Last Updated: February 18, 2026

1 — Introduction & Controller Identity

This Privacy Policy explains how Ile Konsult AS (“Ile Konsult AS”, “we”, “us”, or “our”) collects, uses, and protects personal data when you visit our website and interact with our educational services available across Canada. It applies to www.ilekonsult.no and any pages under that domain (the “Site”). We operate from Norway and provide business education and professional development programs designed for learners and organizations throughout Canada.

Data Controller: Ile Konsult AS, Bestemorstien 9, Nordstrand, 1177 Oslo, Norway. Contact: [email protected]. Phone: +47 22 55 43 70. We currently do not appoint a Data Protection Officer given the scale and nature of our processing; however, we handle all requests promptly via the contact details above.

By using the Site, submitting a form, or otherwise providing personal data, you acknowledge that you have read this Privacy Policy. Where consent is required (for example, for analytics and marketing cookies in the EEA/UK, including Norway), we will request it explicitly and record your choice.

2 — Personal Data We Collect

We collect only the information necessary to operate the Site, respond to inquiries, deliver educational materials, and improve our services. Categories include:

• Identity and contact data: full name, email address, telephone number, organization, role/title (if provided).
• Form content: free‑text messages, program selections, learning objectives, cohort preferences, and any other details you submit in the contact/enrollment forms.
• Technical data: IP address, device and browser type, operating system, language settings, approximate location derived from IP (city/region level), and system timestamps.
• Usage data: pages viewed, time on page, scroll depth, referrers, and click paths collected after consent for analytics where applicable.
• Cookies and identifiers: essential session cookies; optional analytics and marketing identifiers, if you consent (see Section 4 and our Cookie Policy).
• Conversion events: program inquiry submissions, catalog requests, and enrollment interest signals (e.g., button clicks) used to measure content effectiveness after consent where required.

We do not intentionally collect special‑category data (e.g., health, religion, political opinions), financial account details, or government IDs via this Site. Please do not include sensitive information in free‑text fields.

3 — Why We Process Personal Data & Legal Basis

• Responding to inquiries and pre‑contract steps (GDPR Art. 6(1)(b)) and, where applicable, consent (Art. 6(1)(a)): We use your details to answer questions, share program outlines, and coordinate enrollment steps.
• Providing educational materials and service administration (Art. 6(1)(b)): We process contact and program data to deliver schedules, resources, and onboarding information.
• Analytics (Art. 6(1)(a) consent): To understand how the Site is used and improve content, after you grant consent in the cookie banner/panel.
• Marketing and remarketing (Art. 6(1)(a) consent): Where permitted by law and after consent, we may measure campaign effectiveness and reach relevant audiences.
• Security and fraud prevention (Art. 6(1)(f) legitimate interests): Protecting the Site from abuse, maintaining availability, and diagnosing issues.
• Legal and compliance (Art. 6(1)(c)): Meeting record‑keeping duties and responding to lawful requests.

Automated decision‑making: We do not engage in automated decision‑making or profiling that produces legal or similarly significant effects within the meaning of GDPR Article 22.

4 — Cookies & Tracking Technologies

We use cookies and similar technologies to make the Site function, understand usage, and—subject to consent—support advertising measurement. Categories used on this Site align with our Cookie Policy:

• Essential (no consent required): _site_session, cookie_consent, anti‑CSRF tokens. Retention ranges from session to 12 months.
• Analytics (consent): Google Analytics 4 identifiers such as _ga (2 years) and _ga_XXXXXXXXXX (2 years). We apply IP anonymization and retain aggregated analytics for up to 14 months.
• Marketing (consent): Google Ads and Meta identifiers such as _gcl_au (90 days), _fbp (90 days), and _fbc (90 days when click ID is present) to support remarketing and conversion measurement in permitted jurisdictions.

Beyond cookies, we may deploy pixel tags or server‑side logging to record high‑level performance and conversion events where legally permitted. You can manage consent at any time via the “Manage cookie preferences” link in the footer or the cookie banner.

5 — Consent in the EEA/UK (including Norway)

Users in the EEA/UK (and Norway as an EEA member) receive a consent notice for analytics and marketing. These categories activate only after explicit, informed, freely given consent (GDPR Art. 6(1)(a)). We store your choice in the cookie_consent cookie for up to 12 months. You may withdraw consent at any time from the footer link or by clearing cookies. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

6 — Sharing with Service and Advertising Partners

We do not sell personal data. We share limited data with service providers to run the Site and, where consented, to analyze usage or measure campaigns. These providers are contractually bound to process data only on our instructions.

• Google LLC (Google Analytics 4, Google Ads, Tag Manager): cookie IDs, usage data, and conversions for analytics and advertising measurement.
• Meta Platforms, Inc. (Meta Pixel, Conversions): page views, conversions, and hashed identifiers to create audiences and measure advertising once you consent.
• Cloudflare, Inc. (CDN and security): IP‑based request handling and threat mitigation to keep the Site reliable and performant.

We may also disclose data where required by law, to protect our rights, or during a corporate transaction as described in Section 13.

7 — International Transfers

When personal data is transferred outside the EEA/UK (for example to the United States for Google or Meta), we use appropriate safeguards. Depending on the recipient and context, these include the EU‑US Data Privacy Framework (and UK Extension), Standard Contractual Clauses (EU 2021/914), and comparable UK International Data Transfer Addendum where applicable. We assess transfer risks and implement supplementary measures when needed.

8 — Data Retention

• Contact submissions: retained for up to 2 years from the last interaction to respond to inquiries and track program interest.
• Analytics data: up to 14 months in aggregated form after consent.
• Marketing cookies: per cookie lifetime (typically 90 days for advertising identifiers) after consent.
• Email correspondence: for the duration of the relationship plus up to 1 year for reference.
• Server logs: up to 90 days unless security investigations require longer.
• Consent records: up to 3 years for audit purposes.
• Legal/tax records: retained as required by Norwegian law.

9 — Your Rights

If you are in the EEA/UK (including Norway), you have the following rights under GDPR and applicable national law: access, rectification, erasure, restriction, portability, and objection. Where we rely on consent, you may withdraw it at any time. To exercise any right, email [email protected] with details sufficient for us to identify you and your request. We will respond within 30 days (this period may be extended by up to 60 days for complex requests; we will inform you if this occurs).

Supervisory authority: You may lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority). We would appreciate the chance to address your concerns first via the contact information above.

Canada (PIPEDA): For learners in Canada engaging with our programs, you may request access to or correction of your personal information, and you may challenge our compliance with fair information principles. Contact us at the details above. Where applicable, we will provide our response in writing and outline reasons if a request cannot be fulfilled under a statutory exemption.

10 — Children

This Site is not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided personal data to us, contact us and we will delete it promptly unless retention is legally required.

11 — Do Not Track

Some browsers offer a Do Not Track (DNT) signal. Our Site does not currently respond to DNT. Consent choices in our cookie banner and preferences panel govern whether analytics or marketing cookies load.

12 — Access, Portability, and Deletion Requests

To request a copy of your data, ask for deletion, or exercise portability rights where applicable, email [email protected] with the subject “Data Request” and describe your relationship with us (e.g., inquiry date, program interested in). We will verify identity using reasonable measures and complete eligible requests within statutory timelines.

13 — Business Transfers

If Ile Konsult AS is involved in a merger, acquisition, asset sale, financing, reorganization, or insolvency, personal data may be transferred to a successor entity subject to safeguards consistent with this Policy. If material changes occur, we will post a notice on the Site before the transfer takes effect.

14 — California (CCPA/CPRA)

For visitors from California, the following categories may have been collected and disclosed for business purposes in the past 12 months: identifiers (name, email, IP), internet or network activity (Site usage), and inferences (interests) for advertising after consent. We do not sell personal information as defined by the CCPA. We may share information for cross‑context behavioral advertising after consent. Rights include: know, delete, correct, and opt‑out of sharing. Submit requests by emailing [email protected] with “California Privacy Request”. We will verify identity consistent with the law. We do not discriminate against you for exercising your rights.

15 — Virginia (VCDPA)

Virginia residents have rights to access, correct, delete, obtain a copy of data, and opt out of targeted advertising. Submit requests at [email protected] with “Virginia Privacy Request”. If we deny a request, you may appeal within 60 days by emailing “Appeal of Refusal — Privacy Request”. We do not sell personal data or engage in profiling with legal or similarly significant effects.

16 — Nevada

Nevada residents may submit a verified opt‑out request by emailing “Nevada Do Not Sell Request” to [email protected]. We do not currently sell personal information as defined under Nevada law.

17 — Changes to This Policy

We may update this Policy to reflect operational, legal, or regulatory changes. Material updates will be announced via a homepage banner at least 14 days before taking effect. The “Last Updated” date at the top of this page reflects the most recent revision.

18 — Contact

Controller: Ile Konsult AS

Address: Bestemorstien 9, Nordstrand, 1177 Oslo, Norway

Email: [email protected]

For privacy inquiries, please email us with the subject line “Privacy Inquiry”. If your question concerns cookies, you may also review and adjust your preferences at any time via our Cookie Policy and the cookie controls in the footer.