Effective date: 23 August 2026
The Institute of Spiritual Learning respects the privacy of students and visitors to ISLearning.org. This Privacy Policy explains what personal information we collect, why we collect it, how we use it and the rights available to individuals under applicable data protection law, including the EU General Data Protection Regulation (GDPR) and applicable Danish data protection legislation.
The data controller responsible for personal data processed through ISLearning.org is:
ISL – The Institute of Spiritual Learning
Fynshovedvej 584
Martofte
5390 Denmark
CVR number: 26347793
The Institute is operated as a Danish sole proprietorship by Benjamin James Matthew Williamson-Westerman, who is the proprietor, course author and tutor.
For questions concerning personal data, please use the contact details published on ISLearning.org.
The Institute deliberately keeps the amount of personal information collected from students to a minimum.
For student accounts and course administration, we collect:
We may also process information generated through use of the course platform, such as:
We do not require students to provide unnecessary personal information.
The courses concern personal introspection, spiritual learning, inner peace and balance in everyday life.
Students may voluntarily include personal information in assignments or communications with the Institute.
The Institute does not require students to disclose medical or psychological information.
Students should therefore avoid including unnecessary sensitive personal information in assignments or communications.
The courses are not designed to collect or process medical or psychological records.
Where a student voluntarily provides information that may constitute a special category of personal data under the GDPR, the Institute will process that information only where there is an appropriate legal basis under applicable data protection law.
Personal data is used only where reasonably necessary for the operation of ISLearning. This includes:
We do not sell student personal information.
Depending upon the particular processing activity, the Institute may rely upon one or more of the following legal bases under the GDPR:
Processing may be necessary to provide a course that a student has purchased and to administer the student's account and course progress.
Certain information may need to be retained to comply with Danish accounting, tax or other legal requirements.
Certain limited processing may be necessary for the legitimate operation, security and administration of ISLearning, provided those interests are not overridden by the individual's rights.
Where consent is required by law, the Institute will seek it. Where processing is based on consent, the individual may withdraw that consent, although withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Payments are made through PayPal.
The Institute does not store students' full payment-card information on its own systems.
Payment information is processed through the payment services used to complete the transaction and may be subject to the relevant payment provider's own privacy terms.
The Institute retains only the information reasonably necessary for transaction administration, accounting and legal compliance.
ISLearning.org is operated using infrastructure controlled by the Institute.
The Institute does not intentionally sell or provide student personal data to external data brokers or advertising networks.
Technical information may nevertheless be processed where necessary for the operation and security of the website, such as server logs, IP addresses, timestamps and technical connection information. Such information may be used to:
ISLearning.org may use technically necessary cookies or similar technologies required for:
Where non-essential cookies are introduced, the Institute will obtain any consent required by applicable law before using them.
The Institute does not routinely share student personal data with third parties.
Personal data may be disclosed where necessary:
Payment transactions are processed through PayPal as described above.
The Institute does not intentionally transfer student personal information outside the European Economic Area except where such transfer is necessary for a service used by the Institute and permitted under applicable data protection law.
Where an international transfer occurs, the Institute will take the measures required by the GDPR to ensure that the transfer is lawful.
The Institute retains personal information only for as long as reasonably necessary for the purpose for which it was collected.
Student account information may be retained for the period necessary to administer the student's course and account.
Certain transaction, accounting and business records may need to be retained for longer periods because of Danish legal and tax requirements.
When personal information is no longer required, it will be securely deleted or otherwise disposed of in accordance with applicable law.
Assignments submitted by students may contain personal reflections or other information voluntarily provided by the student.
Assignments are used for the purpose of administering the course and conducting the concluding tutorial.
Students retain ownership of their own original assignment content.
The Institute will not publicly publish or commercially exploit a student's personal assignment submissions without separate permission.
The Institute takes reasonable technical and organisational measures to protect personal data against:
Because no internet-connected system can be guaranteed to be completely secure, absolute security cannot be guaranteed.
Subject to applicable legal conditions and limitations, individuals may have the right to:
Individuals also have the right to complain to the relevant data protection supervisory authority.
For individuals in Denmark, the relevant supervisory authority is the Danish Data Protection Agency (Datatilsynet).
To exercise a data protection right or ask a question about how your personal information is handled, contact:
ISL – The Institute of Spiritual Learning
Fynshovedvej 584
Martofte
5390 Denmark
CVR: 26347793
Please provide sufficient information for us to identify the relevant account and understand your request.
We may need to verify your identity before releasing, correcting or deleting personal information.
ISLearning courses are available only to persons aged 18 or over.
The Institute therefore does not intentionally provide course accounts to children or collect children's personal information for course participation.
If we become aware that a person under 18 has registered for a course, we will take reasonable steps to address the situation and delete information where appropriate and legally required.
This Privacy Policy may be updated from time to time to reflect changes in:
The current version will be published on ISLearning.org.
For all privacy and data protection enquiries:
ISL – The Institute of Spiritual Learning
Fynshovedvej 584
Martofte
5390 Denmark
CVR: 26347793
The Institute of Spiritual Learning is committed to collecting and retaining only the personal information reasonably necessary to provide its courses and operate the Institute.
The Institute does not sell student personal information and does not use student information for purposes unrelated to the operation of ISLearning without an appropriate legal basis.