Privacy policy

Personal data collected through the Academy service under the NaturalLift Academy brand is processed by the operator of the service. Privacy contact: academy@naturalliftbynes.se. Full controller identity (registered name, organisation number and address) is published here once available via site configuration.

Account and sign-in: name, email address, password (stored as a password hash), language preference (locale), and email verification status.

Purchases and orders (when sales are enabled): order and payment-related data needed to complete the purchase, including references from the payment provider. We do not store full card details in the Academy.

Course access and progress: which trainings you can access, lesson and module progress, and quiz/final exam status.

Certificates: data needed to issue and display certificates (for example the name on the certificate and a verification code).

Technical data: necessary cookies/session data for sign-in and language, and server logs that may include technical information (for example timestamps and error messages) for operations and security.

To create and administer your account, authenticate you and manage sign-in.

To provide access to purchased or granted trainings and store your study progress.

To run quizzes and final exams and to issue certificates.

To send necessary email, such as verification, password reset and order-related messages.

To process payments and fulfil orders when purchase features are enabled.

To protect the service, troubleshoot technical issues and meet applicable legal obligations.

Contract: processing needed to provide the account, course access, examinations and certificates for the services you use.

Legitimate interests: operations, security, troubleshooting and platform stability, balanced against your privacy.

Legal obligation: processing required under accounting or other applicable law when purchases are made.

Consent: where the law requires consent (for example certain cases of immediate delivery of digital content in checkout), it is collected in connection with that step when sales are enabled.

Sign-in sessions are handled by Auth.js and are normally valid for up to 30 days, or until you sign out.

Account data, course access, progress, examination results and certificates are kept while the account is active and as long as needed to provide the service or meet legal requirements.

Order and payment-related data are kept as long as needed for order handling, customer support and accounting when sales are enabled.

Technical logs are kept for a limited time for operations and security.

We use service providers needed to run the Academy:

Hostinger – application hosting and infrastructure.

Resend – email delivery (for example verification and password reset).

OnPay / Simply – payment processing when purchase features are enabled.

Personal data is stored in the Academy database using PostgreSQL as database technology, in the environment where the service runs (on Hostinger). PostgreSQL is storage technology, not a separate recipient.

We do not share your data with third parties for their marketing.

The Academy is operated with processing intended within the EU/EEA. Some providers (for example email or payment services) may, as processors or independent controllers, process data under their own terms, which in some cases may involve transfers outside the EU/EEA.

Where such transfers occur, appropriate safeguards under applicable data protection law should be used. Contact us if you want more information about current providers.

Under the GDPR you may request access to your personal data, rectification, erasure, restriction of processing, objection to certain processing and, where applicable, data portability.

You may also use in-account features where available (for example export or deletion as designed in the service).

If you believe processing violates data protection law, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Questions about this policy or requests to exercise your rights: academy@naturalliftbynes.se.