Privacy Policy

Updated 22 September 2026

Who is responsible

Rubén Javier López, operating JAVIER LOPEZ TAILOREDOMICS (Tailoredomics), is responsible for the personal data described here. We are a Norwegian sole proprietorship, organisation number 937 502 222, at Ibsens gate 58, 5053 Bergen, Norway. Contact: info@tailoredomics.com.

What we use personal data for

Enquiries and client relationships. We use the contact details, organisation information and messages you provide to answer questions, prepare quotations and manage projects. When you contract with us personally, the legal basis is taking steps at your request before a contract or performing that contract. When you represent an organisation, it is our legitimate interest in responding to enquiries and managing business relationships. Accounting and invoicing records are processed to meet legal obligations.

Providing enquiry information is voluntary, but we need sufficient contact and project details to respond. Please do not send identifiable patient or participant data through the general contact form. Research datasets and any processing on a client’s behalf are covered by separate project arrangements.

Blog comments. Where comments are enabled, we process your submitted name, email address, comment and technical information such as IP address and browser details to publish and moderate the discussion and prevent abuse. This relies on our legitimate interest in maintaining a useful, secure discussion space. Your chosen display name and comment are public; your email address is not displayed with the comment.

Website operation and analytics. Technical connection information supports delivery and security of the website, based on our legitimate interest in operating it securely. CookieYes records cookie choices so that we can manage and demonstrate consent. Optional Google Analytics measurement relies on your consent and uses browser identifiers, device information and website interactions to help us understand visits. See our Cookies Policy for the technologies and controls.

Service providers and international processing

We use Raiola Networks for website hosting and email, CookieYes for cookie-consent management and Google Analytics for optional website measurement. These providers process information needed for their services. Information may also be disclosed where required by law.

External services can involve processing outside the European Economic Area. Google describes its transfer mechanisms in its international data-transfer information; CookieYes describes safeguards for restricted transfers in its Data Processing Agreement. These include standard contractual clauses where applicable. You can contact us for information about the arrangements and safeguards relevant to your data.

How long we keep information

Enquiries that do not become projects: up to 12 months after the last substantive contact, unless the correspondence is needed for an ongoing dispute or legal obligation.

Client records: for the project and its agreed follow-up, with records needed for accounting or specific legal claims retained separately. Norwegian primary accounting documentation is generally retained for five years after the end of the financial year; secondary documentation is generally retained for three and a half years. Relevant correspondence can form part of those records.

Comments: while the associated article and discussion remain published, unless removed earlier following moderation or an applicable deletion request. Project dataset retention is agreed for each project. Cookie durations are listed in the Cookies Policy; browser-cookie expiry is separate from information retained by the associated service.

Your rights

You can contact info@tailoredomics.com to request access, correction, deletion or restriction of your personal data. Where the legal conditions apply, you can also request data portability. You may object to processing based on legitimate interests. These rights have exceptions, including where records must be kept by law.

You can withdraw consent for optional analytics through cookie preferences at any time. Withdrawal does not affect the lawfulness of earlier processing. We normally respond to GDPR rights requests within one month; if a permitted extension is necessary, we will explain it within that first month.

You can complain to Datatilsynet, the Norwegian data protection authority, or another competent supervisory authority. You do not have to contact us first.

Changes

We update this notice when our practices change and will communicate material changes as required. The revision date appears above.