Privacy policy
How Northbeat collects, uses and protects personal information, and your rights under the GDPR.
Last updated: 25 October 2026
Who we are
Northbeat is a free hub for Nordic health innovation. The Northbeat team is responsible for the personal information collected through this website. You can browse without an account.
What we collect
- Email addresses you give us. When you sign up for the newsletter or the Systole first-to-know list, we store your email. That is all we ask for.
- Submissions. When you use Add to the hub or Suggest a guest, we store your name, your email and the details of what you suggest.
- Browser storage. Saved items and recent searches are stored in your browser to provide those features.
- Technical information. Hosting and external services may process your IP address, browser details and request information when delivering the website or its images.
We have no visitor accounts and we do not run user profiles.
Why we use it
- To send the newsletter you signed up for, about once a week.
- To tell you when Systole opens, if you joined that list.
- To review your submission and, if it checks out, add it to the hub.
- To reply when you write to us.
Legal bases for processing
We rely on your consent for email subscriptions. You can withdraw it at any time. We process suggestions and correspondence to review entries and respond to you, based on our legitimate interest in running the hub. Where required, we also process information to meet legal obligations.
What we don't do
We do not run ads. We do not sell email addresses. We do not track you across other websites. No one pays to be listed or featured.
Services we use
- The site runs on Lovable's cloud hosting.
- Organisation logos load from Brandfetch, a brand asset service.
- The company search on the submission form sends what you type to Brandfetch, so it can suggest names and logos. This happens as you type.
- Calendar, map and other external links take you to services with their own privacy policies.
- YouTube or Vimeo can receive information when you choose to load a video.
External services may process information outside the European Economic Area. Applicable data protection law requires appropriate safeguards for such transfers.
Cookies and local storage
The site uses browser storage for saved items and recent searches. Administrator sign-in uses authentication storage. You can remove stored information through your browser settings. Removing it may reset saved items or sign you out.
How long we keep it
- Newsletter: until you unsubscribe.
- Systole list: for updates you requested, until you withdraw consent or the list is no longer needed.
- Submissions and correspondence: for as long as needed to review, respond and maintain relevant records.
Information may need to be kept longer where required by law or to resolve a dispute.
How we protect information
Access to subscription and submission records is restricted to authorised administrators. We use access controls to protect personal information. No website or transmission method can guarantee complete security.
Your rights under the GDPR
Subject to applicable conditions, you can request access to your personal information, correction, deletion, restriction of processing or a portable copy. You can object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing.
Contact us to make a request. We may need to confirm your identity. GDPR requests are normally answered within one month. If an extension is permitted and needed, we will explain why.
You may complain to your local data protection authority. In Finland, contact the Office of the Data Protection Ombudsman.
You can unsubscribe from email updates or ask us to remove you from a list. To remove saved items and recent searches, clear this site's browser storage.
Changes
If we change this policy, we update this page.