RulesBasedIncome

Privacy Notice

Effective 1 August 2026

This notice explains what personal data RulesBasedIncome uses, why it is used, who helps us process it and the choices available to you.

1. Controller

ROKKONES, organisation number 919 827 939, Lars Gjøvikens veg 29, 2312 Ottestad, Norway, is the controller for RulesBasedIncome. Privacy contact: [email protected].

2. Data we collect

  • Identity and contact data, such as your name and email address, when you join the free Skool community or voluntarily request the optional seven-email RBI companion series.
  • Companion-series signup and consent data, including submission time, source and unsubscribe status.
  • Purchase, invoice, refund and access status when you buy the paid course through Skool. We do not store full card details.
  • Course and community activity, support requests and feedback.
  • Technical and usage data, such as IP address, device, browser, pages, timestamps, referral/UTM data and consent choices.

Please do not submit account statements, account numbers, passwords, national identity numbers or other unnecessary sensitive financial information.

3. Why we use data

  • To operate the free Skool community and provide the free RBI Starter course.
  • To deliver the optional seven-email companion series when you request it and manage your communication choices.
  • To perform a contract, process a one-time course purchase through Skool and provide paid-course access.
  • To answer support requests, maintain security and prevent misuse.
  • To measure and improve the service using consented analytics where required.
  • To meet bookkeeping, tax, consumer and other legal obligations.

4. Legal bases

Depending on the activity, we rely on your consent, steps requested before entering a contract, performance of a contract, compliance with legal obligations, or legitimate interests in security, support and service improvement. You may withdraw consent at any time without affecting earlier lawful processing.

5. Service providers

We use providers only as necessary to operate RBI. These currently include Kourse/HighLevel (the public website, companion-series signup form, contact management, email delivery and automation), Skool (free and paid courses, community, checkout and access management), Google Workspace (business email and administration), and consented analytics or embedded-media providers. Skool and its payment service providers process payment details for paid-course purchases; RBI does not store full card details. Providers process data under their own terms and our applicable agreements.

6. International transfers

Some providers may process data outside Norway or the EEA. Where required, transfers rely on an adequacy decision, standard contractual clauses or another lawful safeguard. Contact us for information about safeguards relevant to your data.

7. Cookies and similar technology

Essential cookies support security, forms and account functionality. Optional analytics, advertising or embedded-media technology is used only where an appropriate consent mechanism or lawful basis applies. You can change or withdraw optional consent through the cookie controls shown on the site and through your browser settings.

8. Retention

We keep data only as long as needed for the stated purpose. Companion-series signup, consent and contact data is reviewed and deleted or anonymised when no longer needed. Course and community data is retained as needed to provide access and operate the service. Customer and accounting records may be retained for the period required by Norwegian law. Consent, unsubscribe and suppression records may be kept to respect your communication choices.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent and unsubscribe from marketing at any time. We may need to verify your identity before acting on a request.

You may complain to the Norwegian Data Protection Authority (Datatilsynet) or another competent supervisory authority.

10. Security and updates

We use reasonable organisational and technical measures, but no online service is risk-free. We may update this notice when services or legal requirements change. Material changes will be highlighted on this page or communicated where appropriate.