Do you need help - TODAY!

Effective date: 1 November 2025
Last revised: 1 November 2025

Who we are.
Jon Bjarnason t/a Speed Reading Simplified (“Company”, “I”, “me”, “my”) operates https://www.speedreadingsimplified.com (the “Site”) and provides courses, downloads, newsletters, and related services (the “Services”). This Privacy Policy explains what personal data I collect, how I use it, and your rights under the EU/EEA General Data Protection Regulation (GDPR).

If anything here is unclear, email [email protected].

Please also read the Terms of Use
and Cookie Policy.

1) What I collect

I may collect and process:

Identity & Contact Data: name, email address, postal address (if provided), country.

Account & Course Data: account credentials (hashed by platform), course enrolments, lesson progress, quiz results, certificates.

Transaction Data: purchases, amounts, currency, timestamps (payment card details are processed by payment providers, not stored by me).

Marketing Preferences: newsletter opt-in status, unsubscribes, email interaction (opens/clicks).

Support Data: messages you send me, notes I make to resolve your request.

Technical & Usage Data: IP address, device/browser type, pages viewed, events (collected via cookies or similar—see Cookie Policy).

I do not collect special category data (e.g., health, beliefs) and I do not conduct automated decision-making that has legal or similarly significant effects.

2) How I collect it

Directly from you: forms, checkout, email, or when you create an account or enrol in a course.

Automatically: via cookies, pixels, and similar technologies when you use the Site (analytics, performance, preference and marketing cookies). See Cookie Policy.

From service providers: e.g., payment processors confirming a successful charge, email platforms recording subscription status.

3) Why I use your data (lawful bases)

I only use your personal data when I have a lawful basis:

Contract (Art. 6(1)(b)): to register your account, deliver courses/downloads, process and deliver orders, provide support.

Consent (Art. 6(1)(a)): to send marketing emails where required; to drop non-essential cookies; for certain surveys or testimonials. You can withdraw consent at any time.

Legitimate Interests (Art. 6(1)(f)): to improve courses and Site, protect security, prevent abuse or fraud, understand what content is most helpful for learners, and grow the business (balanced against your rights).

Legal Obligation (Art. 6(1)(c)): to keep tax and transactional records, to respond to valid requests from authorities.

4) What I use it for

Provide the Services: account creation, course access, downloads, certificates, support.

Process payments and invoices: via third-party processors.

Communicate with you: service messages (receipts, access instructions, policy changes) and—if opted in—newsletters, product updates, offers.

Improve the Site and courses: analytics, troubleshooting, A/B tests, content quality.

Security and abuse prevention: monitoring, access controls, incident response.

Compliance: tax, accounting, and legal record-keeping.

I do not sell or rent your personal data.

5) Marketing

I send marketing emails only if you’ve opted in or if it’s otherwise permitted by law (e.g., existing-customer soft opt-in where available).

You can unsubscribe anytime using the link in any email or by writing to [email protected].

I do not share your details with third parties for their independent marketing.

6) Children

This Site and Services are not directed to children under 13. I do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, email [email protected]
and I will delete it.

7) Cookies & similar technologies

I use cookies/pixels to keep the Site secure and functional, remember preferences, measure usage (analytics), and—if you consent—deliver relevant ads. Details, providers, and retention periods are listed in the Cookie Policy, where you can also manage your consent choices.

8) Disclosures (who sees your data)

I share data only as needed with trusted processors who help me run the Site and Services, for example:

Platform & Hosting: Kajabi LLC (course/site platform & emailing), secure hosting/CDN.

Payments: Revolut, Rapyd, PayPal (payment processing, fraud prevention).

Analytics & Performance: Google Analytics 4; server logs; error monitoring.

Communications & CRM: Kajabi email, ManyChat (if you use the chat/opt-in feature).

Advertising (where consented): Meta Pixel, Google Ads.

Professional Services: accountants, legal counsel, auditors (under confidentiality).

Authorities: where required by law or to defend legal claims.

I require processors to handle data securely, only under my instructions, and not for their own purposes.

If I sell or restructure the business, your customer record may transfer as part of the legitimate transaction. You will be notified and may exercise your rights.

9) International transfers

I am based in Iceland (EEA). Some processors are outside the EEA/UK (e.g., US). When data is transferred internationally, I rely on appropriate safeguards such as:

EU Standard Contractual Clauses (SCCs) and supplementary measures; and/or

the EU–US Data Privacy Framework (DPF) where the recipient is certified; and/or

an adequacy decision by the European Commission.

You can request more information at [email protected].

10) Data retention

I keep personal data only as long as needed for the purposes stated, including:

Accounts & Course Records: while your account is active and for up to 24 months of inactivity, unless you ask me to delete sooner (subject to legal holds).

Transactions: typically 7 years to meet tax/accounting duties.

Marketing: until you unsubscribe or withdraw consent, or your email repeatedly bounces.

Support/Enquiries: typically 24 months from last contact.

Where possible I anonymise or aggregate data for analytics so it is no longer personal.

11) Security

I use reasonable technical and organisational measures to protect personal data (TLS encryption, access controls, role-based permissions, least-privilege, backups). No method is 100% secure over the Internet, but I work to prevent unauthorised access, use, alteration, or disclosure and to detect and respond to incidents promptly.

12) Your GDPR rights

You have the right to:

Access your personal data and obtain a copy.

Rectify inaccurate or incomplete data.

Erase data (“right to be forgotten”) where applicable.

Restrict processing in certain cases.

Object to processing based on legitimate interests or to direct marketing.

Portability of data you provided, in a structured, commonly used, machine-readable format.

Withdraw consent at any time where processing is based on consent (this won’t affect prior lawful processing).

Complain to a supervisory authority.

How to exercise your rights:
Email [email protected] from the email address associated with your account, and clearly state your request. I may need to verify your identity.

Supervisory authority (Iceland): Persónuvernd – The Icelandic Data Protection Authority. You can contact them if you are not satisfied with my response. (I encourage you to contact me first so I can resolve the matter quickly.)

13) AI & profiling

I may use analytics to understand how content is used and to improve learning paths. I do not conduct automated decision-making that produces legal or similarly significant effects on you. Where any feature uses AI assistance, it’s for educational support only and not a substitute for professional advice.

14) Third-party links

The Site may link to external sites. Their privacy practices are their own. Please review those policies before providing your data.

15) Changes to this policy

I may update this Privacy Policy from time to time. The “Last revised” date shows the most recent version. Significant changes will be highlighted on the Site or via email where appropriate. Your continued use of the Site after an update means you accept the changes.

16) Contact

Data protection contact:
Email: [email protected]

Address: Speed Reading Simplified, P.O. Box 352, 262 Reykjanesbær, Iceland