Legal
Privacy Policy
Placeholder text — to be reviewed and finalised by a qualified legal advisor before launch.
Last updated: 12 October 2026.
Who we are
Tal Zimra Coleman ("Inner Sound", "we", "us") operates the website at innersound.no and is the data controller for personal data processed through it.
Contact: healingsound@gmail.com.
What we collect, why, and on what legal basis
- Contact form data — name, email, optional subject, and message you write. We use this only to reply to you. Legal basis: your consent (you must tick a box) and our legitimate interest in answering enquiries.
- Consent preferences — a first-party cookie storing your choices on this site (essential, required to remember your decisions).
- Embed interactions — when you choose to load an embedded music player (Spotify, SoundCloud, YouTube, Bandcamp), the provider may set its own cookies and process technical data (e.g. IP, user-agent) per its own policies.
- Server logs — basic technical logs (timestamp, IP, request path) used for security and operational debugging on Vercel's infrastructure. Legal basis: legitimate interest.
We do not collect health, religious, or other special-category data through the website. If you wish to discuss therapeutic context, please do so by email or in person rather than through any web form.
Who receives your data
- Vercel Inc. — hosting and content delivery for innersound.no.
- Email / form delivery provider — when configured, the provider chosen to deliver contact-form emails.
- Embedded media providers — Spotify, SoundCloud, YouTube (Google), Bandcamp — only after you load their players.
International transfers
Some of our processors are located outside the EEA / Norway and Israel (e.g. the United States). Where this occurs, transfers rely on Standard Contractual Clauses or equivalent safeguards.
How long we keep your data
- Contact-form correspondence: retained as long as needed to handle the conversation and for up to 24 months after.
- Consent preferences cookie: up to 6 months from your last visit.
- Server logs: typically 30 days as configured by Vercel.
Your rights
Under the EU/EEA General Data Protection Regulation (GDPR) and Norwegian law, you have the right to:
- Access the personal data we hold about you;
- Have it rectified or erased;
- Restrict or object to processing;
- Withdraw consent at any time (without affecting prior processing);
- Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
If you are located in Israel, the Israeli Privacy Protection Law (including the 2024 Amendment No. 13 in force from 14 August 2025) gives you comparable rights and a right to complain to the Privacy Protection Authority (PPA). We disclose what data is collected, why, who receives it, and the consequence of declining (in the case of the contact form: we will not be able to reply).
Cookies & tracking
See our Cookie Policy. Non-essential cookies and embedded players never load until you opt in.
Changes to this policy
We may update this policy. The "last updated" date above reflects the most recent change.