Privacy Policy for Youwell AS

Last updated: 06-FEB-2026

This Privacy Policy describes how Youwell AS processes personal data when Youwell acts as a data controller. The policy applies to the use of our website, sales and support interactions, and to users with accounts in the Youwell platform (such as clinicians, administrators, and content managers).

For the processing of personal data related to patients using services delivered by Youwell’s customers, Youwell normally acts as a data processor. Such processing is governed by the customer’s own privacy notice and by a data processing agreement between Youwell and the customer.

1. Data Controller

Youwell AS
Organisation number: 916 293 739
Address: C. Sundts gate 17, 5004 Bergen
Email: post@youwell.no

Youwell AS is the data controller for the personal data processing activities described in this Privacy Policy.

2. When does this Privacy Policy apply?

This Privacy Policy applies when you:

visit the website www.youwell.no
contact Youwell in connection with sales, marketing, or customer support
participate in events, webinars, or newsletters organised by Youwell
are a registered user of the Youwell platform as a clinician, administrator, or content manager

This Privacy Policy does not apply to patients’ use of healthcare services delivered by Youwell’s customers through the Youwell platform.

3. Categories of personal data

Depending on your relationship with Youwell, we may process the following categories of personal data:

3.1 Website and marketing

Name
Email address
Telephone number
Employer / organisation
IP address and technical browser data (aggregated or pseudonymised)

3.2 Sales and customer dialogue

Contact details
Role and organisational affiliation
Communication and correspondence

3.3 Users of the Youwell platform (clinicians / administrators)

Name and contact information
User ID and authentication information
Role and access level
Activity logs related to use of the platform
Support requests and case history

Youwell does not process patient medical records or health data as a data controller.

4. Purposes of processing

Youwell processes personal data for the following purposes:

to operate and manage our website
to respond to enquiries and provide customer support
to conduct sales and marketing activities
to administer user accounts and access to the Youwell platform
to ensure information security, logging, and prevention of misuse
to comply with legal obligations

5. Legal basis for processing

Personal data is processed based on one or more of the following legal grounds:

Consent, where such consent has been obtained (e.g. newsletters)
Contract, where processing is necessary to perform a contract or take steps prior to entering into a contract
Legitimate interests, such as responding to enquiries, improving services, and securing the platform
Legal obligation, where processing is required by applicable law

6. Cookies

Youwell uses cookies on its website to:

ensure technical functionality
collect anonymised statistics about website usage
improve the user experience

Detailed information about the cookies used and how you can manage your consent is available through our cookie information on the website.

7. Disclosure of data and use of processors

Youwell does not share personal data with third parties unless:

it is necessary to provide our services
required by law or legal order
you have given your consent

We use data processors (such as providers of IT operations, cloud services, and customer support tools). Such processors act on our behalf and under data processing agreements.

8. Storage and deletion

Personal data is not stored longer than necessary for the purposes for which it was collected, or as required by law or contractual obligations.

Retention periods are assessed based on the type of data, purpose of processing, and applicable legal requirements.

9. Information security

Youwell has implemented technical and organisational measures to protect personal data against unauthorised access, alteration, loss, or misuse. These measures include access control, logging, encryption, and continuous risk assessment in accordance with ISO/IEC 27001.

10. Your rights

You have the right to:

request access to your personal data
request rectification of inaccurate data
request erasure or restriction of processing
object to processing based on legitimate interests
withdraw consent where processing is based on consent
lodge a complaint with the relevant data protection authority

Requests regarding your rights may be directed to the contact details listed in section 1.

11. Changes to this Privacy Policy

This Privacy Policy may be updated in response to changes in legislation, services, or processing activities. The current version will always be available on our website.

12. Contact

If you have questions about this Privacy Policy or Youwell’s processing of personal data, please contact us at:

Email: post@youwell.no
Address: C. Sundts gate 17, 5004 Bergen