Privacy Policy
Last updated: May 2026
1. Who we are
Nyholm Learning is operated by Sissel Nyholm, based in Denmark. We are the data controller for the personal information you provide when using our website and services.
Business name: Nyholm Learning
CVR number: [CVR NUMBER]
Country: Denmark
Contact: help@nyholmlearning.com
Website: nyholmlearning.com
2. What data we collect
We collect personal data only where necessary for delivering our services. This includes:
- Name and email address — provided when you contact us, take our placement test, or create an account
- Payment information — processed securely by Stripe; we never see or store your card details
- Placement test results — your answers and CEFR level result when you complete the free test
- Course progress — which lessons you have watched, quiz scores, and certificate status
- Purchase history — which courses you have purchased and when
- Account credentials — email and hashed password, stored securely in Supabase
- Marketing consent — whether you opted in to receive news and updates
3. Why we collect it and our legal basis
We process your personal data on the following legal bases under GDPR:
- Contract performance (Article 6(1)(b)) — We need your name, email, and payment details to create and manage your account, process your purchase, and deliver access to your course content.
- Legitimate interest (Article 6(1)(f)) — We send transactional emails such as your placement test result, purchase confirmation, and important account updates. These are necessary for the services you requested.
- Consent (Article 6(1)(a)) — We only send marketing emails (news, course updates, special offers) if you have explicitly opted in. You can withdraw this consent at any time by unsubscribing or contacting us.
4. How we use your data
- To create and maintain your account on nyholmlearning.com
- To process payments and grant access to purchased courses
- To send your placement test result by email
- To track your progress through course content
- To issue certificates upon passing assessments
- To respond to enquiries submitted via the contact form
- To send marketing communications, where you have given consent
- To comply with legal obligations (e.g. accounting records)
5. Third-party processors
We use a small number of trusted third-party services to operate our platform. All processors handle your data in accordance with GDPR:
Supabase — Database and authentication
EU-hosted infrastructure. Data stored in the European Union.
Stripe — Payment processing
Data Processing Agreement (DPA) in place. PCI-DSS compliant. We never store card details.
Resend — Transactional email delivery
Used to send placement test results, purchase confirmations, and account emails.
Vimeo — Video hosting
Course video content is hosted on Vimeo. Vimeo may set cookies when videos are played.
Hetzner — Server infrastructure
Servers located in Germany / the European Union.
6. Data retention
- Account data — retained for as long as your account is active. You may request deletion at any time.
- Purchase records — retained for 5 years in accordance with Danish accounting law (Bogføringsloven).
- Placement test results — retained until you request deletion.
- Marketing consent — you can withdraw consent at any time; we will stop sending marketing emails promptly.
7. Your rights under GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of all personal data we hold about you
- Right to erasure — request deletion of your personal data (subject to legal retention obligations)
- Right to portability — receive your data in a structured, machine-readable format
- Right to rectification — correct inaccurate or incomplete data
- Right to withdraw consent — withdraw marketing consent at any time without affecting prior processing
- Right to lodge a complaint — you may complain to Datatilsynet (the Danish Data Protection Agency) at datatilsynet.dk
To exercise any of these rights, contact us at help@nyholmlearning.com. We will respond within 30 days.
8. Cookies
We use only essential cookies necessary to operate the website. We do not use advertising, analytics, or tracking cookies.
| Cookie | Purpose |
|---|---|
| sb-* (Supabase) | Authentication session — keeps you signed in |
| Stripe session | Secure payment processing |
9. Refund policy
Because our courses are digital products delivered immediately upon purchase, the following policy applies:
- You are entitled to a full refund within 14 days of purchase, provided you have not accessed any course content.
- Once you access any lesson, video, or downloadable material, you explicitly waive your 14-day right of withdrawal in accordance with EU consumer law (Directive 2011/83/EU, Article 16(m)).
- At the point of purchase, you are asked to confirm that you understand and accept this waiver.
- To request a refund, contact us at help@nyholmlearning.com within 14 days of purchase.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: help@nyholmlearning.com
Address: Nyholm Learning, Denmark