Privacy Policy

Last Updated: February 18, 2026

1 — Introduction & Controller Identity

This Privacy Policy explains how Vybe ApS (“Vybe ApS,” “we,” or “us”) collects, uses, discloses, and protects personal data when you visit our website and when you interact with our educational programs, workshops, consultations, and related services in Canada. This Policy applies to the site pages available at this domain and to contact made through our forms, email, and phone channels.

Data Controller: Vybe ApS, Milebuen 27, Capital Region of Denmark, 2620 Albertslund, Denmark. Contact email: [email protected]. For Canadian visitors and participants, this Policy is intended to meet applicable obligations under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial laws (including Alberta PIPA, British Columbia PIPA, and Quebec Law 25) where applicable. For visitors from the EEA/UK, our legal bases are outlined in Section 3.

We do not designate a Data Protection Officer at this time. Questions or requests regarding this Policy or your rights can be sent to the email listed above.

2 — Personal Data We Collect

We collect only the information necessary to operate our website, respond to inquiries, and deliver educational services. Categories include:

• Identity and contact data: name, email address, phone number, organization, role, and location (where provided by you).
• Form content: messages, course preferences, scheduling details, program objectives, and any information you voluntarily include in free‑text fields.
• Technical data: IP address, browser type, device type, operating system, language settings, and basic diagnostics required to deliver pages securely and reliably.
• Usage data: page views, time on page, referring pages, clicks, and navigation paths, captured in aggregate to help improve site content (see Cookies & Tracking).
• Cookies and identifiers: essential cookies for basic site functionality, and optional analytics and marketing cookies subject to consent (Section 4).
• Conversion events: submission timestamps, consent confirmations, and program selections recorded for follow‑up and internal accountability.

We do not intentionally collect special‑category data (such as health, religion, or political opinions), government ID numbers, or financial account numbers through our website forms.

3 — Why We Process Data & Legal Basis (GDPR/UK GDPR)

• Responding to inquiries and providing requested information: contract performance (Art. 6(1)(b)) and consent (Art. 6(1)(a)) where applicable.
• Enrollment coordination, scheduling, and delivery of programs: contract performance (Art. 6(1)(b)).
• Analytics (optional): consent (Art. 6(1)(a)).
• Marketing/remarketing (optional): consent (Art. 6(1)(a)).
• Security, fraud prevention, and service integrity: legitimate interests (Art. 6(1)(f)).
• Compliance with legal and tax obligations: legal obligation (Art. 6(1)(c)).

Automated decision-making: We do not engage in automated decision‑making or profiling that produces legal or similarly significant effects.

4 — Cookies & Tracking

We use three categories of cookies and similar technologies. Details on retention and management can also be found in our Cookie Policy.

• Essential cookies: required for core site functionality (e.g., session continuity, cookie preference storage). Always active; do not require consent.
• Analytics cookies (consent‑based): used to understand site usage in aggregate, such as Google Analytics 4 (GA4) with IP anonymization. Example lifetimes: _ga (2 years), _ga_XXXXXXXXXX (2 years).
• Marketing cookies (consent‑based): used for advertising relevance and attribution (e.g., Google Ads, Meta Pixel). Example lifetimes: _gcl_au (90 days), _fbp (90 days), _fbc (90 days).

Beyond cookies, our advertising and analytics partners may rely on pixel tags or server‑side integrations implemented only after consent. You can manage preferences via the “Manage cookie preferences” link in the footer or your browser settings.

5 — Consent (EEA/UK) and Canadian Opt‑In/Opt‑Out

Users in the EEA and UK receive a consent notice for analytics and marketing technologies. These activate only after explicit, informed, freely given consent. Your selection is stored in a browser cookie (12 months). You may withdraw consent at any time through the footer link or by clearing cookies; withdrawal does not affect the lawfulness of prior processing.

For Canada, we align with PIPEDA principles of accountability, limiting collection, limiting use/disclosure, accuracy, safeguards, openness, individual access, and challenging compliance. Where required, we obtain meaningful consent for optional analytics and marketing technologies and provide accessible ways to opt out.

6 — Sharing With Advertising & Service Partners

We share limited data with service providers that help us operate our site and measure interest in our services. Providers process data only on our instructions and may not use it for their own commercial purposes.

• Google LLC (Google Analytics 4, Google Ads): cookie IDs, usage data, conversions, and remarketing lists.
• Meta Platforms, Inc. (Meta Pixel/Custom Audiences): page views, conversions, and hashed identifiers where applicable.
• Cloudflare, Inc. (CDN/security): IP‑based threat detection and performance optimization.

We do not sell personal data. We also do not permit providers to use site data for their independent commercial purposes.

7 — International Transfers

When personal data is transferred internationally (including to the United States), we use appropriate safeguards, such as the EU‑US Data Privacy Framework (and UK Extension), and Standard Contractual Clauses where applicable. Under PIPEDA, cross‑border service providers may access personal information for support and processing; contractual and technical measures help ensure comparable protection.

8 — Retention

• Contact submissions and correspondence: up to 2 years from last interaction.
• Analytics data: up to 14 months (aggregate/annonymised reports may persist longer).
• Marketing cookies and identifiers: per cookie lifetime or until consent is withdrawn.
• Enrollment and tax records: per applicable legal requirements (typically 6–10 years).
• Server and security logs: approximately 90 days, unless extended for investigation.
• Cookie consent record: up to 3 years for audit purposes.

9 — Your Rights

EEA/UK individuals have rights under GDPR/UK GDPR, including access, rectification, erasure, restriction, portability, and objection, as well as the right to withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority.

Canadian individuals have the right to request access to, and correction of, their personal information, subject to limited exceptions under PIPEDA and applicable provincial laws. We will respond within a reasonable timeframe and provide reasons where we cannot fulfill a request, subject to legal constraints.

To exercise any rights, email [email protected]. We may take steps to verify your identity before responding.

10 — Children

This website and our programs are not directed to individuals under 16. We do not knowingly collect personal data from minors through our site. If we learn that we have collected data from a child under 16 without verifiable parental consent, we will delete it promptly.

11 — Do Not Track

Our website does not respond to browser “Do Not Track” signals. Third‑party providers may handle DNT independently according to their own policies.

12 — Account & Data Deletion

You may request deletion of personal data we hold about you by emailing [email protected] with the subject line “Data Deletion Request.” After verifying identity, we will complete the request within 30 days unless an extension is lawful and necessary. Certain records may be retained to comply with legal obligations.

13 — Business Transfers

If we are involved in a merger, acquisition, asset sale, financing, or insolvency, personal data may be transferred to a successor entity subject to this Policy. If uses materially change, we will notify users through a site notice and, where required, request consent.

14 — California (CCPA/CPRA)

For California residents, we disclose the following categories over the past 12 months: Identifiers (e.g., name, email, IP), Internet/network activity (usage data), and inferences (interests/preferences) for targeted advertising. We do not “sell” personal information as defined by CCPA/CPRA, but we may “share” it for cross‑context behavioral advertising. You may exercise rights to know, delete, correct, and opt‑out of sale/sharing by emailing us with the subject “California Privacy Request.” We do not discriminate for exercising these rights.

15 — Virginia (VCDPA)

Virginia residents may exercise rights of access, correction, deletion, portability, and opt‑out of targeted advertising. Submit requests by email with the subject “Virginia Privacy Request.” If we deny a request, you may appeal by replying with “Appeal of Refusal — Privacy Request.” If unresolved, you may contact the Virginia Attorney General.

16 — Nevada

Nevada residents may submit a verified request to opt out of the sale of covered information by emailing us with the subject “Nevada Do Not Sell Request.” We do not currently sell personal information under Nevada law.

17 — Changes to This Policy

We may modify this Policy to reflect changes in technology, law, or our practices. Material changes will be announced on the homepage at least 14 days before they take effect. The “Last Updated” date at the top of this page reflects the latest revision.

18 — Contact

For questions, requests, or complaints about this Policy or our handling of personal data, contact:

Vybe ApS
Milebuen 27, Capital Region of Denmark, 2620 Albertslund, Denmark
Email: [email protected]

Cookie Categories Summary

Essential: _site_session (session continuity), cookie_consent (stores your choice). Analytics (consent): _ga (2 years), _ga_XXXXXXXXXX (2 years). Marketing (consent): _gcl_au (90 days), _fbp (90 days), _fbc (90 days). Manage your choices anytime via the footer link or see the Cookie Policy for more details.

For information about our terms, please visit our Terms of Service.