This privacy policy explains how Outcomes Analytica AS collects and uses your personal data when you visit outcomes-analytica.no or subscribe to our newsletter. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and Norwegian data protection law.

Last updated: June 2026

1. Who we are

Outcomes Analytica AS is an independent HEOR and market access advisory practice registered in Norway.

  • Data controller: Carl Haakon Samuelsen
  • Organisation: Outcomes Analytica AS
  • Address: Tønsberg, Norway
  • Email: carl@outcomes-analytica.no

2. What data we collect

We collect the following personal data:

  • Email address — when you subscribe to the AI Access Brief newsletter or podcast updates
  • First name — optionally provided at the time of subscription, used to personalise emails
  • Usage data — anonymised website analytics collected via Plausible Analytics (no cookies, no personal identifiers)

We do not collect payment information, sensitive personal data, or data from minors.

3. How we use your data

We use your personal data for the following purposes:

  • To send you the AI Access Brief newsletter and daily podcast episode updates
  • To send you a welcome email when you subscribe
  • To notify us internally when a new subscriber joins (operational alert only)
  • To analyse anonymised website traffic and improve the site

We will never sell your data, share it with third parties for marketing purposes, or use it for any purpose other than those listed above.

4. Legal basis for processing

We process your personal data on the following legal bases under GDPR:

  • Consent (Article 6(1)(a)): You provide your email address voluntarily by subscribing. You can withdraw consent at any time by unsubscribing.
  • Legitimate interests (Article 6(1)(f)): Anonymised analytics to understand how the site is used and improve its content.

5. Third-party processors

We use the following third-party services to operate the site and newsletter. Each acts as a data processor under GDPR:

  • Mailchimp (Intuit Inc.) — email marketing and newsletter delivery. Your email address and name are stored on Mailchimp servers. Mailchimp is certified under the EU-US Data Privacy Framework. See Mailchimp's privacy policy.
  • Plausible Analytics — privacy-friendly website analytics. No cookies are used. No personal data is collected. Data is processed in the EU. See Plausible's privacy policy.
  • Hostinger — website hosting provider based in Lithuania (EU). See Hostinger's privacy policy.
  • Zapier — automation platform used to send internal subscriber notifications. Only your email address is passed through. See Zapier's privacy policy.
  • Buzzsprout — podcast hosting and distribution. No personal data from this site is shared with Buzzsprout. See Buzzsprout's privacy policy.

6. Cookies

This website does not use tracking cookies. Plausible Analytics, our website analytics tool, is cookieless and does not collect any personally identifiable information. No consent banner is required.

7. Data retention

We retain your email address and name for as long as you remain subscribed to the newsletter. If you unsubscribe, your data will be deleted from our mailing list within 30 days. Anonymised analytics data is retained indefinitely as it contains no personal information.

8. Your rights under GDPR

As a data subject under GDPR, you have the following rights:

  • Right of access — you can request a copy of the personal data we hold about you
  • Right to rectification — you can ask us to correct inaccurate data
  • Right to erasure — you can ask us to delete your personal data
  • Right to restrict processing — you can ask us to limit how we use your data
  • Right to data portability — you can request your data in a portable format
  • Right to withdraw consent — you can unsubscribe at any time using the unsubscribe link in any email we send
  • Right to lodge a complaint — you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no

To exercise any of these rights, contact us at carl@outcomes-analytica.no. We will respond within 30 days.

9. Data security

We take reasonable technical and organisational measures to protect your personal data. All data transmitted to and from this website is encrypted via HTTPS. Access to subscriber data in Mailchimp is restricted to authorised personnel only.

10. International data transfers

Mailchimp and Zapier are US-based services. Data transfers to the US are covered by the EU-US Data Privacy Framework and appropriate Standard Contractual Clauses (SCCs) where required.

11. Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of the site or newsletter after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this privacy policy or how we handle your data, contact: