Who this applies to
This policy covers krormark.com and any newsletter, email course, or digital product I offer through it, including content delivered via Substack.
Who I am
Kim Rørmark, operating as an individual based in Norway.
What I collect
When you sign up for the newsletter or email course:
- Your email address
- Your name, if you provide it
- Timestamps of sign-up and engagement (opens, clicks)
When you visit the site:
- Standard technical data (IP address, browser type, pages visited) via Google Analytics
- Cookies for basic site functionality
When you buy a digital product or course:
- Your name, email, and payment confirmation. Payment details themselves are handled by Stripe (I never see or store your card details)
Why I collect it
- To send you the newsletter, course emails, or product you signed up for
- To understand what content is working, so I can write better
- To process purchases and give you access to what you paid for
I do not sell your data. I do not share your email list with anyone.
Where your data lives
- Email and newsletter data: Substack
- Website hosting and forms: WordPress / WPX-hosting
- Payments: Stripe
These providers may store data outside Norway/EEA; where that's the case, they operate under their own data protection commitments (Substack and most major providers are Privacy Shield/SCC-compliant for EU data).
Your rights
Under GDPR, you can:
- Ask what data I hold on you
- Ask me to correct or delete it
- Withdraw consent and unsubscribe at any time (every email has an unsubscribe link)
- Complain to Datatilsynet (the Norwegian Data Protection Authority) if you think I've mishandled your data
How long I keep it
I keep your email on file for as long as you're subscribed. If you unsubscribe, Substack removes you from active sends; I don't maintain a separate database of former subscribers.
Changes to this policy
If this changes, I'll update the date at the top. I won't email you about minor wording changes.