Privacy Policy

Naturebeings
ellen@naturebeings.co
Norwegian org.no: 925 428 000

Last updated: May 2026

1. Introduction

This Privacy Policy explains how Naturebeings ("we", "us", "our") collects, uses, and protects personal data when you visit our website, https://www.naturebeings.co, or interact with us through our contact form or waitlist.

We are committed to handling your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Norwegian privacy legislation (Personopplysningsloven).

The data controller responsible for your data is:

Ellen Øgaard / Naturebeings
Email: ellen@naturebeings.co
Norwegian org.no: 925 428 000

2. What Data We Collect and Why

a) Waitlist and Contact Forms

When you sign up for our waitlist or contact us through the website, we collect:

  • Your name

  • Your email address

  • Any additional information you voluntarily share in the form

Purpose: To respond to your enquiry, manage your waitlist registration, and assess fit for The Expansion Reset program.

Legal basis: Your consent (GDPR Article 6(1)(a)), and our legitimate interest in responding to enquiries (GDPR Article 6(1)(f)).

Form data is stored within the Squarespace platform, which hosts our website.

b) Newsletter and Email Communications

If you opt in to receive emails from us, we will use your name and email address to send newsletters and updates about Naturebeings.

Purpose: Email marketing and program updates.
Legal basis: Your explicit consent (GDPR Article 6(1)(a)).

You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us at ellen@naturebeings.co.

c) Website Analytics

We use Google Analytics 4 (GA4), implemented via Google Tag Manager, to understand how visitors use our website. This may involve the collection of:

  • Pages visited and time spent

  • Traffic sources (e.g. how you found the site)

  • Device type, browser, and operating system

  • Anonymised or pseudonymised IP address

Purpose: To improve our website and understand our audience.
Legal basis: Your consent, given via the cookie banner when you first visit the site (GDPR Article 6(1)(a)).

We also use Squarespace's built-in analytics, which collects similar visitor statistics as an inherent part of hosting the site.

d) Cookies

Our website uses cookies — small text files stored on your device. We use the following types of cookies:

  • Strictly necessary cookies: Required for the site to function (e.g. session management). These cannot be disabled.

  • Analytics cookies: Used by Google Analytics and Squarespace to collect anonymised usage data. These are only set with your consent.

You can manage your cookie preferences at any time via the "Cookie Preferences" link at the bottom of our website.

e) Google Fonts

Our website loads fonts from Google Fonts, a service provided by Google LLC. When fonts are loaded, your IP address is transmitted to Google's servers. We use this service to maintain consistent visual design across devices.

Legal basis: Legitimate interest in website functionality (GDPR Article 6(1)(f)).

f) Form Security (Google reCAPTCHA)

Our forms are protected by Google reCAPTCHA Enterprise to prevent spam and automated abuse. This service analyses user interactions and may collect device and behaviour data to determine whether a submission is from a human. reCAPTCHA is governed by Google's Privacy Policy.

Legal basis: Legitimate interest in protecting the integrity of our forms (GDPR Article 6(1)(f)).

3. Third-Party Data Processors

We share certain data with the following third-party processors who act on our behalf:

Squarespace, Inc.

Purpose: Website hosting, forms, analytics, and email campaigns
Country: USA (EU data transfer safeguards in place)
Privacy Policy: https://www.squarespace.com/privacy

Google LLC

Purpose: Analytics (GA4), fonts, reCAPTCHA, Tag Manager
Country: USA (EU data transfer safeguards in place)
Privacy Policy: https://policies.google.com/privacy

These processors are bound by data processing agreements and are required to handle your data only as instructed by us and in compliance with applicable privacy law.

We do not sell your personal data to any third party.

4. International Data Transfers

Our website is hosted by Squarespace and uses Google services, both based in the United States. These transfers take place under appropriate safeguards, including the EU–US Data Privacy Framework and Standard Contractual Clauses (SCCs), ensuring your data is protected in line with GDPR requirements.

5. How Long We Keep Your Data

  • Waitlist and contact form submissions: Until the relevant program cycle has ended, or until you request deletion

  • Email marketing subscribers: Until you unsubscribe or request deletion

  • Analytics data: Up to 14 months (Google Analytics default)

  • Cookie data: Per cookie expiry — see Cookie Preferences on site

6. Your Rights Under GDPR

As a resident of the EU or Norway, you have the following rights regarding your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.

  • Right to rectification: You may ask us to correct any inaccurate data.

  • Right to erasure: You may ask us to delete your personal data ("the right to be forgotten").

  • Right to restriction of processing: You may ask us to limit how we use your data.

  • Right to data portability: You may request your data in a structured, machine-readable format.

  • Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.

  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at ellen@naturebeings.co. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

7. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. Our website is hosted on Squarespace's secure infrastructure and is served over HTTPS.

8. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

10. Contact

If you have any questions or concerns about how we handle your data, please contact:

Ellen Øgaard / Naturebeings
Email: ellen@naturebeings.co
Norwegian org.no: 925 428 000