ASHkurs.no

Privacy policy

Last updated: 2026-09-02

Vessel Plus AS is the data controller for personal data collected through ashkurs.no.

What we process

Account data. Name, email address and profile picture. If you sign in with Google or Microsoft we receive this from that service. We never receive your password.

Course data. Which chapters you have read, results from chapter tests and the final exam, and any certificate issued.

Purchase data. Order number, amount, time and status. Card details are handled by the payment provider and are never stored by us.

Technical data. Cookies strictly necessary for login and language choice. We do not use cookies for marketing or cross-site tracking.

Why we process it

PurposeLegal basis
Give you access to the course you boughtPerformance of a contract (GDPR art. 6 (1) b)
Issue and verify certificatesPerformance of a contract
Accounting for purchasesLegal obligation (Norwegian Bookkeeping Act)
Troubleshooting and securityLegitimate interest (art. 6 (1) f)

How long we keep it

  • Account and course data — for as long as the account is active, then 12 months.
  • Certificates — for the certificate's validity period, so it can be verified by a company or authority.
  • Purchase data — five years, as required by the Bookkeeping Act.

Who we share with

We never sell personal data. We use the following processors:

  • Supabase — database and authentication (EU)
  • Vercel — hosting
  • Stripe — payment processing
  • Google / Microsoft — only if you choose to sign in with them

Data processing agreements are in place with all of them.

Your rights

You have the right of access, rectification, erasure, restriction, data portability, and to object to processing. Contact us at post@ashkurs.no and we will respond within 30 days.

If you believe we process your data unlawfully you may complain to the Norwegian Data Protection Authority (datatilsynet.no).

Deleting your account

To have your account deleted, email post@ashkurs.no. We delete the account and course data. Purchase data is retained for the statutory period, and issued certificates are retained so they remain verifiable — unless you ask otherwise.

Contact

Vessel Plus AS Email: post@ashkurs.no Phone: +47 70 01 99 00