Privacy notice

Who is responsible

The data controller is TEST. DON’T GUESS. (company name and organisation number to be added). Contact: [contact name], hei@mynutritiontest.com.

What we collect

• Contact details you give us: name, email, phone number, country and preferred language.
• Your answers to the nutrition check. The check asks about habits, not symptoms or health conditions.
• Your answers to the full assessment, if you take it.
• Consents you give, with version and time.
• Where you came from (campaign and referral parameters, landing page), stored in a first-party cookie.
• Booking requests and messages you send us.
• Analytics, only if you accept analytics cookies.

We never ask you to upload test results to this website. Test results are handled in the client system, under its own consent.

Why, and on what legal basis

• To answer your request and contact you: consent / steps prior to a contract (GDPR Art. 6(1)(a) and (b)).
• To deliver a coaching program: contract (Art. 6(1)(b)).
• To send newsletters and nurture emails: consent (Art. 6(1)(a)), which you can withdraw at any time.
• To keep the site secure and prevent abuse: legitimate interest (Art. 6(1)(f)).
• Health data inside coaching programs: explicit consent (Art. 9(2)(a)).

Processors

We use the following processors. Data processing agreements are in place or must be in place before launch:

• Supabase: database and authentication (EU region).
• Netlify: website hosting.
• Mailgun (EU): email delivery.
• Zara (our client system), with Twilio and Meta (WhatsApp): client communication.
• Anthropic: AI-assisted drafting and replies, using pseudonymised data and only with consent where required.
• Plausible: privacy-friendly analytics (EU), only with consent.
• ManyChat: Instagram direct messages.
• Calendly: booking calls.
• Cloudflare (Turnstile): bot protection on forms.

Some providers may transfer data outside the EU/EEA. Where they do, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

How long we keep data

Leads who don’t become clients: until 30 days after you withdraw consent or 24 months of inactivity, whichever comes first (to be confirmed). Client data: as long as needed for the program and as required by accounting law.

Your rights

You can ask for access, correction, deletion, restriction, data portability, and object to processing. You can withdraw consent at any time. Write to hei@mynutritiontest.com. You can also complain to Datatilsynet (the Norwegian Data Protection Authority).

Cookies

See our cookie notice.