1. Who we are

This privacy policy applies to the following websites operated by Klinikk Hausken AS: www.klinikkhausken.co.uk, www.klinikkhausken.no, and info.klinikkhausken.no. Klinikk Hausken AS is a fertility clinic with locations in Oslo, Bergen, Stavanger, and Haugesund, Norway. We are the data controller for any personal information collected through these websites.

Contact for privacy matters: Camilla Vågen Dibley, camilla@klinikkhausken.no, Klinikk Hausken, Postboks 4113, 5531 Haugesund, Norway.

2. What information we collect

When you use our contact forms, booking forms, or consultation request forms, we may collect:

Your name and contact details (email address, phone number)
Your country of residence and general location
Medical background information you choose to share through our forms
Technical identifiers such as advertising click IDs (e.g., GCLID) that may be captured when you arrive at our website via an advertisement

3. How we use your information

We use the information you provide for the following purposes:

To respond to your enquiry and provide care: When you submit a contact or booking form, we use your details to respond, schedule consultations, and coordinate your care.

To communicate with you: We may contact you by email or phone regarding your enquiry, appointment, or treatment, including through our patient portal.

To measure and improve our advertising: We use hashed (pseudonymised) versions of your contact details, such as your email address, to measure whether our online advertisements are reaching people who go on to become patients. This data is shared with our advertising platforms (such as Google Ads) in encrypted form so it cannot be read by third parties. It is used solely to measure advertising effectiveness and is not used to build marketing profiles, send you additional advertising, or target you with remarketing. You can opt out of this at any time by contacting us.

To improve our website: We use anonymised and aggregated analytics data to understand how visitors use our site so we can improve the experience.

4. Legal basis for processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following bases:

Consent: When you submit a form on our website, you actively consent to us collecting and using your information for the stated purposes. You can withdraw consent at any time by contacting us.

Legitimate interest: We have a legitimate interest in measuring the effectiveness of our advertising to ensure we reach people who may benefit from our services. We do this using pseudonymised data and have assessed that this does not override your rights or freedoms.

Contract performance: When you book a consultation or begin treatment, processing your personal data is necessary to fulfil our agreement with you.

5. Who we share your information with

We do not sell your personal data. We share information only with the following categories of service providers, and only to the extent necessary:

Healthcare and booking platforms: HIPAA-compliant form providers and scheduling systems that process your bookings and enquiries securely.

Website and communication tools: Our website hosting platform, live chat service, and analytics tools, which help us operate the site and respond to enquiries.

Advertising platforms: Hashed (encrypted) contact data is shared with advertising platforms such as Google for the sole purpose of measuring ad performance, as described in section 3. These platforms cannot use this data to contact you or build profiles about you.

Server-side tracking services: We use a server-side tracking service to securely process and relay conversion data to our advertising platforms. This service may receive hashed contact details and technical identifiers for the sole purpose of delivering this data to the ad platforms described above. It does not use your data for its own purposes and is GDPR-compliant and ISO27001/SOC2 certified.

All service providers are contractually bound to process data only on our instructions and in accordance with applicable data protection law.

6. International data transfers

Some of our service providers are based outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or the service provider’s participation in a recognised data protection framework.

7. Cookies and tracking technologies

Our websites use cookies and similar technologies to ensure the website functions correctly, understand how visitors use our site, measure the effectiveness of our advertising, and power our live chat feature for users who consent to it. For visitors in regions where cookie consent is required by law (such as the EEA and UK), we use a cookie consent banner to collect your preferences before non-essential cookies are activated. For visitors in other regions, non-essential cookies may be activated automatically in accordance with local regulations. You can manage your cookie preferences at any time through the cookie consent banner (where available) or through your browser settings.

8. How long we keep your data

We keep your personal data only as long as necessary for the purposes described in this policy:

Enquiry and contact form data: Deleted within 12 months if no treatment relationship is established.

Patient records: Retained in accordance with Norwegian healthcare regulations.

Advertising measurement data: Hashed data shared with advertising platforms is retained by those platforms in accordance with their own data retention policies. We delete our internal records of this data within 12 months.

9. Your rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to processing based on legitimate interest (including advertising measurement)
Withdraw consent at any time
Request a portable copy of your data
Lodge a complaint with a supervisory authority (Datatilsynet in Norway, or your local authority)

To exercise any of these rights, please contact Camilla Vågen Dibley at camilla@klinikkhausken.no. We will respond within 30 days.

10. Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. All sensitive information submitted through our websites is encrypted in transit and at rest. Our form and booking providers comply with strict healthcare data security standards, including HIPAA.

11. Links to other websites

Our websites may contain links to external websites. We are not responsible for the privacy practices of other sites and encourage you to read their privacy policies when you visit them.

12. Social media

Klinikk Hausken has profiles on Facebook and Instagram. We encourage you not to share sensitive personal or medical information via social media platforms. Please use our contact form, patient portal, or phone for sensitive communications.