Privacy Policy

The data controller is Ahmed Al-Ashtari, operating as a registered sole proprietorship (enkeltpersonforetak) in Norway, who runs this site and the Comprehensive Metabolic Analysis. For any question about your data, or to exercise any right below, contact studiotss21@gmail.com.

From the quiz: your email address, the answers you give, and the metabolic pattern your answers produce.

From the application: your name, your email address, and the health information you choose to share, such as symptoms, what you have already tried, conditions, and medications.

Automatically: standard technical data needed to run and protect the site, such as your IP address, used only for security and to verify you are a real person rather than a bot.

I only collect what you choose to enter. I do not sell your data, and I do not run advertising trackers.

The quiz answers and the information in your application can reveal details about your health. Under the GDPR this is a special category of data that receives extra protection. I process it only with your explicit consent, which you give by submitting the form, and only to do the work you have asked for. You can withdraw that consent at any time by emailing me, and I will stop processing and delete the information unless I am legally required to keep it.

To send you your quiz result, to read your case and tell you honestly whether the analysis is a good fit, to deliver the analysis if you proceed, to contact you about it, and to follow up with related guidance. I also use limited technical data to keep the site secure and to prevent abuse of the forms.

I rely on your consent for the information you submit, and your explicit consent for any health-related information. I rely on my legitimate interest in keeping the site secure for the limited technical data used to prevent spam and abuse. Where you go on to commission the analysis, I also process the necessary information to perform that contract with you.

Your submission is emailed to me. Email delivery is handled by Resend. The site is hosted and protected by Cloudflare, which may set a one-time token to confirm you are a real person. Site usage analytics are provided by Microsoft Clarity. These providers act as processors and handle your data only to deliver the service, under their own data-protection commitments.

Some of these providers operate outside Norway and the European Economic Area, including in the United States. Where your data is transferred outside the EEA, it is protected by appropriate safeguards such as the providers' standard contractual clauses. By submitting a form you understand your information may be processed in these locations.

I keep your information only as long as needed for the purpose above, and for as long as we are working together. Quiz and application data for people who do not proceed is removed once it is no longer useful. You can ask me to delete your information at any time and I will, unless the law requires me to keep it.

This site does not use advertising cookies, and I do not sell your data. The bot-protection tool (Cloudflare Turnstile) may store a short-lived token in your browser to confirm you are human when you submit a form.

I use Microsoft Clarity to understand how visitors use the site, through aggregated analytics and masked session replay. Clarity masks the text you type, including anything you enter into the forms, so your answers themselves are not captured. It may set cookies for this purpose, and you can read more in Microsoft's privacy statement.

This site and the analysis are intended for adults. It is not directed at children, and you should not submit any information if you are under 16.

Under the GDPR you have the right to access your data, to correct it, to delete it, to restrict or object to its use, to receive a copy in a portable form, and to withdraw consent at any time. To exercise any of these, email me and I will respond within the time the law requires. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

I take reasonable technical and organisational measures to protect your information, including limiting what is collected, restricting who can access it, and serving the site over an encrypted connection. No method of transmission or storage is completely secure, but I work to keep your data safe.

The quiz, the site, and the analysis are educational and are not medical advice. How your information is used in that context, and the limits of what is provided, are set out in the Terms & Disclaimer.

I may update this policy. The date at the top shows when it last changed.