Our privacy policy

IKYA AS · Version dated 13 August 2026

This policy explains what personal data we collect, why we use it, who we share it with, and what rights you have. It is written to the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).

​

1. Who we are

IKYA AS is the data controller for the personal data described here.

Karenslyst allé 9B, 0278 Oslo, Norway Organisation number: NO 924 484 969 Email: info@ikya.org · Telephone: +47 401 95 441

For any question about your data, or to exercise any of the rights in section 10, write to info@ikya.org.

​

2. What this policy covers

This policy covers www.ikya.org — our website, your student account, our educations, our newsletter, and our contact with you.

​

3. What we collect

When you enrol in an education:

Your first and last name, email address, telephone number, and postal address. Your choice of payment option, and whether you accepted our terms and the arrangements for contact between students.

When you pay:

We do not receive or store your card number. Payment is handled by Stripe through Wix; we receive confirmation that payment succeeded, the amount, and the date.

When you use your student account: 

Your login details, which teachings and materials you have accessed, and your subscription status.

When you attend a teaching: 

If you attend online, Zoom processes your name, email address and connection details, and the session is recorded. If you attend in person, you may appear in photographs or recordings. See section 7.

When you contact us, or answer a question we ask: 

The content of your message. If you complete our post-purchase questions about how you found us, those answers are stored together with your enrolment and are not anonymous.

When you subscribe to our newsletter: 

Your name and email address, and whether you have opened or clicked our emails.

When you visit the website: 

Your IP address, browser and device information, and pages visited. See section 9 on cookies.

​

4. Why we use it, and our legal basis

What we do --> Legal basis

​

Deliver your education: access to teachings, recordings and the IKYA Library; scheduling; practical messages --> Performance of our contract with you

Send your crystals and materials, where you do not collect them --> Performance of our contract with you

Take payment and issue receipts --> Performance of our contract; legal obligation

Share your contact details within your study gathering (section 5) --> Performance of our contract with you

Keep accounting records --> Legal obligation under the Norwegian Bookkeeping Act

Handle complaints, withdrawals and refunds --> Legal obligation; our legitimate interest in defending claims

Send marketing emails about offerings unrelated to your education --> Your consent

Use photographs and recordings of you in public material --> Your consent (section 7)

Analytics cookies, to understand how our website is used --> Your consent (section 9)

Advertising cookies, to measure our advertising and show it to people who have visited our website --> Your consent (section 9)

Keep our website and accounts secure --> Our legitimate interest in protecting our systems and our students

​

Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and you may object at any time.

​

5. Sharing your details with fellow students

Studying with IKYA means studying alongside other students, and this involves sharing some of your data with them.

Your name, email address and telephone number are shared with your IKYA Ganapati, with experienced students supporting mentorship, and with the fellow students in the study gatherings you take part in, so that you can contact one another.

This is set out in the terms of purchase you accept at signup, and accepting it is a condition of enrolment. Your fellow students are told that your details are confidential, may be used only to support study, and may not be passed on, used for marketing, or used for any purpose unconnected with the education.

We ask students to respect one another's wishes about how and how often they are contacted. If you are receiving contact you are unhappy with, write to info@ikya.org and we will address it.

We do not sell your personal data, and we do not share it for anyone else's marketing.

​

6. Who else we share it with

We use the following service providers, who process data on our instructions:

• Wix — our website, student accounts, course platform, forms, contact records, email sending, and the chat window on our website

• Stripe — card payments, through Wix

• Zoom — online teachings and workshops

• Google — our calendars, and the analytics and advertising services described in section 9

• Bring and DHL — delivery of crystals and materials, where posted; they receive your name, address and telephone number

• Our accountant and auditor, for statutory bookkeeping

We may also disclose data where we are legally required to, or to establish or defend a legal claim.

​

7. Photographs and recordings

Teachings and workshops at IKYA Center are recorded and photographed, and online sessions are recorded. Recordings are used for the course platform, so students can review teachings, and may be used in our public material and social media.

If you would prefer not to appear in public material, tell the facilitator at any teaching or write to info@ikya.org, and we will keep you out of frame or remove the relevant recordings from public use. You can ask at any time, and it has no effect on your participation.

Recordings of teachings are retained as part of our teaching library. Where you have asked not to appear publicly, we remove the material from public use.

​

8. Transfers outside the EEA

Some of our providers process data outside the EEA, including in the United States. Where that happens, the transfer relies on a European Commission adequacy decision, or on Standard Contractual Clauses together with additional safeguards. You may ask us which applies to a particular provider.

​

9. Cookies, analytics and advertising

We use cookies and similar technologies in three groups.

Necessary. These are needed for the website to work — keeping you logged in, remembering your basket, security, and the operational logging our website platform uses to keep the site running and detect faults. They are always active and do not require your consent.

Analytics. We use Google Analytics to understand how our website is used, so we can improve it.

Advertising. We use Google Ads to measure our advertising and to show advertising to people who have visited our website.

Analytics and advertising cookies are set only if you consent. When you first visit, you can Accept, Decline All, or choose for yourself under Settings. Declining costs you nothing — the website works the same way.

You can change or withdraw your consent at any time. If you cannot find the cookie settings on the page, clearing the cookies for www.ikya.org in your browser will bring the choice back. Turning off cookies in your browser is not the same as withdrawing consent, and we do not treat it as such.

​

10. How long we keep your data

• Accounting records — five years after the end of the financial year, as required by the Norwegian Bookkeeping Act

• Your enrolment and course records — for the duration of the education and for as long as needed to handle any claim arising from it

• Your student account — until you ask us to close it

• Newsletter data — until you unsubscribe, after which we keep a record that you unsubscribed

• Enquiries that do not lead to enrolment — twelve months. Correspondence about a purchase is kept with your course record instead

• Recordings — as described in section 7
   

11. Your rights

You have the right to:

• access the personal data we hold about you

• correct data that is wrong or incomplete

• erase your data, where we have no continuing reason to hold it

• restrict or object to our use of your data

• receive your data in a portable form

• withdraw consent at any time, where we rely on consent — this does not affect what we did before you withdrew it
   

Write to info@ikya.org. We answer within one month. We may need to confirm your identity first.

Withdrawing consent to marketing does not affect the practical messages we must send you about an education you have purchased.

​

12. Complaints

If you are unhappy with how we handle your data, please tell us first at info@ikya.org.

You also have the right to complain to the Norwegian Data Protection Authority:

Datatilsynet, Postboks 458 Sentrum, 0105 Oslo · www.datatilsynet.no

If you live in another EEA country, you may complain to your own supervisory authority instead.

​

13. Security

Your data is held in systems protected by access controls and encryption in transit. Access is limited to people who need it to do their work, and they are bound to confidentiality. No system is perfectly secure, but we take reasonable steps to protect your data and to respond quickly if something goes wrong.

​

14. Changes to this policy

When we change this policy we update the version date above. Where a change materially affects you, we will tell you directly.

​

IKYA AS · Karenslyst allé 9B, 0278 Oslo, Norway · Organisation number NO 924 484 969 · info@ikya.org

​

​