Privacy Policy

Version 1.0, last updated: 24 October 2026

1. Who is responsible for your data

Abundantly Productive, organization number 926 739 883, Skogfaret 43, 4900 Tvedestrand, Norway. Contact for privacy questions: [email protected].

This policy explains what personal data we collect through The Airtable Toolbox website and shop, why we collect it, and what rights you have under the GDPR and the Norwegian Personal Data Act.

2. What data we collect

  • Order and account data: name, email address, billing address, country (for VAT), login details for your Dashboard, order history, and a record of your consent at checkout.
  • Payment data: payments are processed by Stripe. We receive confirmation of payment and limited details (such as the last four digits of a card) but not your full card number.
  • Free resource sign-ups and newsletters: name and email address, and your marketing consent.
  • Quiz and workshop data: your answers to quizzes, registration details, and any questions you send us.
  • Custom client work: business information you share so we can build your Airtable base, which may include access to your Airtable workspace.
  • Communications: emails and messages you send us.
  • Technical data: IP address, browser and device type, pages visited, and cookie identifiers (see section 7).

We do not knowingly collect sensitive personal data, and ask that you do not send it to us.

We need certain information, such as your email address and the billing details requested at checkout, to process your order, deliver your purchase and meet our legal obligations. If you do not provide the required information, we may be unable to complete your order or provide the requested service. Optional information is identified as such where it is collected.

3. Why we use your data and our legal basis

We use your personal data for the purposes below. The legal basis depends on why we need the information.

Orders, digital products and customer accounts

We use your order and account information to process purchases, deliver digital products, provide access to your customer dashboard and manage your orders.

Legal basis: performance of a contract, Article 6(1)(b) of the GDPR.

Order emails and customer support

We use your contact details to send order confirmations, product-access links and other messages needed to deliver your purchase. We also use information you provide to respond to support requests relating to your purchase.

Legal basis: performance of a contract, Article 6(1)(b).

General enquiries

We use the information in your emails and messages to respond to questions and other correspondence. Where your enquiry concerns a service you are considering buying, we may use it to take steps at your request before entering into a contract.

Legal basis: our legitimate interest in responding to people who contact us, Article 6(1)(f), or taking steps at your request before entering into a contract, Article 6(1)(b), as applicable.

Newsletters and marketing emails

With your consent, we use your name and email address to send newsletters, offers and other marketing emails. You can withdraw your consent at any time using the unsubscribe link in our marketing emails.

Legal basis: your consent, Article 6(1)(a).

Workshops

We use registration details to administer workshops you sign up for, send joining instructions and provide the workshop and related materials. Signing up for a workshop does not, by itself, subscribe you to marketing emails.

Legal basis: performance of a contract to provide the workshop you requested, Article 6(1)(b). Where you separately agree to receive marketing emails, we rely on your consent, Article 6(1)(a).

Quizzes

We use the answers you submit to generate and deliver the quiz results you request.

Legal basis: your consent, Article 6(1)(a). Any subscription to newsletters or marketing emails requires a separate choice.

Custom Airtable services

We use your contact details, project information and any necessary access to your Airtable workspace to discuss your requirements, prepare proposals and deliver the services you request.

Legal basis: taking steps at your request before entering into a contract and performance of that contract, Article 6(1)(b).

Where we process personal data on your behalf as part of your Airtable project, we do so under your instructions and the applicable data-processing agreement.

Bookkeeping, tax and accounting

We use and retain transaction information to maintain accounting records and meet our tax and bookkeeping obligations.

Legal basis: compliance with a legal obligation, Article 6(1)(c).

Fraud prevention and website security

We use relevant technical and transaction information to help detect fraud, prevent misuse and protect our website, customers and business against unauthorised access.

Legal basis: our legitimate interest in maintaining a secure website and protecting our customers and business, Article 6(1)(f).

Website analytics

With your consent, we use Google Analytics to understand how visitors use our website and identify improvements. You can change or withdraw your analytics consent through the cookie settings button on the website.

Legal basis: your consent, Article 6(1)(a).

4. Who we share data with

We share personal data with providers who help us operate our website, fulfil orders and deliver our services. We use data-processing agreements where required.

  • Website hosting and business email: HostArmada.
  • Website security and delivery: Cloudflare.
  • Shop, customer accounts and checkout: SureCart.
  • Payments and payment security: Stripe.
  • Newsletters and marketing emails: Systeme.io.
  • Custom Airtable services: Airtable, where we use it to process personal data when providing the services you request.
  • Website analytics: Google Analytics, only with your consent.
  • Cookie preferences and consent management: CookieYes.

We handle our bookkeeping and tax filing ourselves and do not currently use an external accountant. We disclose information to public authorities, such as the Norwegian Tax Administration, where legally required.

We do not sell your personal data.

5. Transfers outside the EU/EEA

Some providers are based in or process data in the United States or other countries outside the EU/EEA. Where this happens, we rely on safeguards such as the EU–US Data Privacy Framework (where the provider is certified) or the European Commission’s Standard Contractual Clauses.

6. How long we keep your data

  • Order and accounting records: 5 years after the end of the accounting year, as required by the Norwegian Bookkeeping Act (bokføringsloven).
  • Newsletter data: until you unsubscribe, then only as long as needed to document your consent and unsubscribe.
  • Support emails: 12 months after the matter is resolved.
  • Custom client work: for the duration of the engagement and 12 months after, unless you ask us to delete it sooner and the law allows it.
  • Analytics data: user- and event-level data: retained for 14 months, according to our Google Analytics settings. This retention setting does not apply to standard aggregated reports. Cookie lifetimes are listed in section 7.

7. Cookies

Cookies are small files stored on your device when you visit a website. The list below describes the cookies and similar storage identified on our website. You can also view cookie details through the cookie settings on our website. We use the following types:

  • Strictly necessary cookies: these remember your cookie choices and enable essential features you request, such as signing in to your customer dashboard, using the shopping cart and completing checkout. These cookies do not require your consent.
  • Analytics cookies: these are used by Google Analytics to help us understand how visitors use the website so we can improve it. We use these cookies only with your consent.

Your cookie choices

When you first visit the website, our cookie banner lets you accept analytics cookies, reject them or customize your preferences. Analytics cookies are not placed on your device unless you consent. Rejecting analytics cookies is as easy as accepting them.

You can change or withdraw your consent at any time using the cookie settings button on the website. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

You can also delete or block cookies through your browser settings. Blocking strictly necessary cookies may prevent features such as login, the shopping cart or checkout from working properly.

Google Analytics

We use Google Analytics, provided by Google, to understand how visitors use the website. This may involve processing personal data outside the EU/EEA. See section 5 for more information about international data transfers.

We do not currently use advertising cookies. If this changes, we will update this policy and request your consent before using them.

Cookies and similar storage used on this website

cookieyes-consent

  • Provider/service: CookieYes
  • Purpose: Remembers your cookie choices.
  • Duration: 1 year

_ga

  • Provider/service: Google Analytics
  • Purpose: Distinguishes visitors to measure website usage. Used only with your consent.
  • Duration: 1 year, 1 month, 4 days

_ga_*

  • Provider/service: Google Analytics
  • Purpose: Maintains session information for website analytics. Used only with your consent.
  • Duration: 1 year, 1 month, 4 days

m

  • Provider/service: Stripe
  • Purpose: Supports fraud prevention and payment security.
  • Duration: 1 year, 1 month, 4 days

__stripe_mid

  • Provider/service: Stripe
  • Purpose: Supports fraud prevention by recognising a browser across sessions.
  • Duration: 1 year

__stripe_sid

  • Provider/service: Stripe
  • Purpose: Supports fraud prevention during a session.
  • Duration: 1 hour

wpEmojiSettingsSupports

  • Provider/service: WordPress
  • Purpose: Stores the result of a check of the browser’s emoji-display capabilities. This uses session storage rather than a cookie.
  • Duration: Browser session

8. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data deleted, where there is no legal reason for us to keep it.
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time, without affecting earlier processing. Every marketing email contains an unsubscribe link.

To use these rights, email [email protected]. We respond to requests to exercise your data-protection rights without undue delay and normally within one month. If an extension is permitted because a request is complex or we have received numerous requests, we will explain the reason and notify you within the first month. If you are unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the authority in your country.

9. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), restricted access, and reputable service providers. No online service is completely secure, so please use strong passwords and protect your own accounts.

10. Children

The Shop is intended for adults running or starting a business. We do not knowingly collect data from children under 18.

11. Changes to this policy

We may update this policy to reflect changes to our services, practices or legal obligations. The latest version will be available on this page, with the date of the most recent update shown above. Please read this policy before engaging with the website and shop, every time you visit.

12. Contact

Abundantly Productive
Skogfaret 43
4900 Tvedestrand
Norway

[email protected]
https://theairtabletoolbox.com