Siri Kalla Integrative Healthcare
Last updated: October 22, 2026
Siri Kalla Integrative Healthcare (organisation number 920 226 531) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal data in accordance with the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act and applicable EU data protection law. Our Fertility and Nourished Cycles are brand names of Siri Kalla Integrative Healthcare.
Data controller: Siri Kalla Integrative Healthcare
Organisation number: 920 226 531
Contact email: [email protected]
If you have questions about this Privacy Policy or wish to exercise your data protection rights, you may contact us using the email address above.
We only collect personal data that is necessary for clearly defined purposes. Depending on how you interact with us, we may collect the following:
When you sign up for a webinar, newsletter or free resource, or submit a lead form (including Meta Instant Lead Forms), we may collect your name, email address and phone number (if provided).
Purpose: To deliver the requested content, confirm registrations, provide relevant follow-up information and communicate with you regarding your enquiry.
When you register for webinars or other educational events, we collect the information required to manage your registration.
Purpose: To confirm your participation, send access links or materials, provide reminders and follow up where relevant.
When you buy a course or programme (such as Nourished Cycles), we collect your name, email address, phone number (if provided), purchase and payment information (such as the product, price, payment method and payment status – but never your full card number), your course access and progress, and anything you choose to post in the course community group or submit for the live Q&A sessions.
Purpose: To deliver the course, manage payments and payment plans, provide customer support, assess guarantee requests and meet our accounting obligations.
If you explicitly opt in to receive newsletters or marketing communications, we collect your email address and, where applicable, your name.
Purpose: To send you the communications you have consented to. You may unsubscribe at any time using the unsubscribe link in our emails or by contacting us directly.
Some of our services touch on health. Sharing health information with us is always voluntary, and you are never required to do so in order to access a course or our general content. Health information may be shared in the following ways:
Course participants do not need to send us blood test results or other medical records. Participants interpret their own results using the tools in the course.
Health data is used solely for the stated purpose and is never used for advertising or profiling, or shared with third parties for marketing purposes.
When you visit our website, we may collect limited technical data using cookies and similar technologies, only after you give consent. This may include pages visited, the time and date of your visit, browser and device type, and IP address.
Purpose: To analyse website usage, improve user experience and measure the effectiveness of our content and marketing.
Course participants have access to an AI assistant (the Nourished Cycles bot) that answers questions based on our course material. Conversations with the assistant are anonymous: the assistant does not know who you are, and conversations are not stored together with your name, email address or other information that identifies you. Only Siri Kalla has access to the conversations, which may be reviewed to improve the assistant and the course.
We recommend that you do not enter your name or other identifying information in the chat.
If you contact us by email or through other channels, we process the personal data you provide in order to respond to your enquiry. We encourage you not to share unnecessary sensitive information through email or other unsecured channels.
Providing personal data is voluntary. However, if you choose not to provide certain information (such as an email address), we may be unable to deliver the requested service.
We process personal data only when we have a lawful basis under GDPR:
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
We use clear and active consent mechanisms, including explicit opt-in checkboxes for newsletters and marketing, cookie consent banners before any non-essential cookies or tracking are activated, and explicit consent before you submit health-related information in questionnaires.
You may withdraw consent at any time by clicking the unsubscribe link in our emails, adjusting your cookie preferences or contacting us at [EMAIL].
Where health or fertility-related data is collected, it is processed only with explicit consent, used strictly for the stated purpose, stored securely with restricted access, never shared with advertising platforms or used for marketing, and deleted or anonymised when no longer required.
We use trusted service providers to run our business. Where they process personal data on our behalf, they act as data processors under GDPR and handle data only according to our instructions.
Used for storing contact information, managing email and SMS communication, handling lead and form submissions, and hosting our courses and course community. GoHighLevel may store data on servers outside the EU/EEA, including the United States. Safeguards include the EU Standard Contractual Clauses (SCCs) and participation in the EU–US Data Privacy Framework.
Used to process card payments and monthly payments under our internal payment plan. We never see or store your full card number. Stripe may process data in the United States under the EU–US Data Privacy Framework and the SCCs.
If you choose to pay with Klarna, Klarna processes your data as an independent data controller in accordance with Klarna's own privacy notice.
Used to run the AI course assistant described in section 2g. MindPal stores data in secure data centres in the United States, encrypts data in transit and at rest, and does not use conversations or uploaded material to train AI models. Because conversations are anonymous, we do not use MindPal to process information that identifies you.
Used to deliver our webinars and manage time-limited offers. These services process your name, email address and webinar activity, and may store data outside the EU/EEA.
Used to host live sessions. Zoom may process data in the United States under the EU–US Data Privacy Framework.
Used for email correspondence and internal documents. Google may process data in the United States under the EU–US Data Privacy Framework.
Used for invoicing and bookkeeping. Purchase information is stored as required by the Norwegian Bookkeeping Act.
We use Meta technologies, including the Meta Pixel, Meta Instant Lead Forms and the Conversions API (CAPI).
What data may be collected: When you consent to marketing cookies or submit a Meta lead form, Meta may collect page visits, form submissions and interactions, device and browser information, IP address, and a Meta identifier if you are logged into Facebook or Instagram.
Purpose: Measuring advertising performance, understanding audience engagement and delivering relevant ads on Meta platforms.
Legal relationship: For the initial collection of data via the Meta Pixel and Instant Lead Forms, Siri Kalla Integrative Healthcare and Meta Platforms Ireland Ltd. act as joint controllers. We have accepted Meta's Joint Controller Addendum. Meta is responsible for subsequent processing of data within its platforms. Meta's Privacy Policy: https://www.facebook.com/privacy/policy
Important: We do not send health-related or sensitive data to Meta.
You have the right to:
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet): https://www.datatilsynet.no
Requests may be sent to [EMAIL]. We respond within 30 days.
We retain personal data only as long as necessary:
Statistics are kept in aggregated form that does not identify you. Data is securely deleted or anonymised when no longer required.
We apply appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls and authentication, secure platforms and vendors, regular security monitoring, and incident response procedures, including GDPR breach reporting where required.
Some of our service providers store or process data outside the EU/EEA, mainly in the United States. Where international transfers occur, we ensure protection through the EU Standard Contractual Clauses, the EU–US Data Privacy Framework where the provider participates, and encryption and strict access controls.
We may update this Privacy Policy to reflect legal or operational changes. The latest version will always be available on our website. Material changes will be clearly communicated.