Website Privacy Policy
This Website Privacy Policy explains how Neura Labs Oy ("we," "us," "our") collects, uses, and protects personal data when you visit our marketing website at neura.health (the "Website"). Your use of the Neura Health app and its connected features is covered by our separate Privacy Notice, which describes health data, AI processing, and your full GDPR rights in detail.
We are the data controller for personal data collected through the Website.
1. Data We Collect
Technical data: IP address, browser and device type, and basic analytics data, collected via cookies and similar techno
Contact data: information you submit through forms (for example name, email, and message), including waitlist or early-access sign-ups. We do not intentionally collect special-category (sensitive) data through the Website. Please do not submit health details through Website forms.
2. Purposes and Legal Bases
Purpose
Legal basis (GDPR)
Operate, maintain, and secure the Website
Legitimate interests — Art. 6(1)(f)
Respond to your enquiries
Legitimate interests — Art. 6(1)(f)
Manage waitlist / early-access requests you submit
Steps prior to entering a contract, at your request — Art. 6(1)(b)
Analytics and measuring/optimising Website performance
Consent — Art. 6(1)(a) and ePrivacy rules
Marketing emails (where you opt in)
Consent — Art. 6(1)(a)
Comply with legal obligations
Legal obligation — Art. 6(1)(c)
Analytics and other non-essential cookies run only after you consent through our cookie banner.
You can change or withdraw consent at any time (Section 5).
3. Cookies and Consent
When you first visit the Website, a cookie consent banner lets you accept, reject, or customise non-essential cookies (such as analytics). Strictly necessary cookies, which are required for the Website to function, do not require consent. You can change your preferences at any time via the cookie settings link on the Website or through your browser. If you reject non-essential cookies, some features or measurement may be limited.
The Website currently uses the following cookies and similar technologies: Category Name Provider Purpose Duration
Strictly necessary:
Cookie-preference storage (local storage)
Framer (our hosting platform)
Remembers the cookie choices you make in the banner
Until cleared / up to 12 months
Analytics (consent) _ga
Google Analytics (Google Ireland Ltd)
Distinguishes visitors for aggregate usage statistics
13 months
Analytics (consent)
_ga_ZLRTD905HX
Google Analytics (Google Ireland Ltd)
Maintains the analytics session state
13 months
Analytics (consent)
Google Tag Manager
Google Ireland Ltd Loads and manages the tags above; sets no cookies of its own
Analytics (cookieless) Framer Analytics Framer B.V. Aggregated, cookieless page-view statistics;
no cookies or persistent identifiers are stored on your device
Marketing (consent) __kla_id
Klaviyo, Inc.
Recognises you when you join our waitlist or sign up for emails, and attributes sign-ups 24 months
We update this table when the cookies used on the Website change.
4. Retention
We keep personal data only as long as necessary:
• Analytics data: up to 14 months, then aggregated or deleted.
• Contact and waitlist data: as long as needed to handle your request or manage the waitlist, and then deleted or, where you opted into marketing, until you unsubscribe.
5. Your Rights
You have the rights to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent at any time. We extend these controls to all visitors, wherever they live.
You may also lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (www.tietosuoja.fi) — or with the authority in your country of residence. To exercise your rights or withdraw marketing consent, contact support@neura.health or use the unsubscribe link in our emails.
6. Sharing of Data
We share data only with vetted service providers that process it on our behalf under data protection agreements: Framer B.V. (Netherlands — website hosting and publishing, served from EU infrastructure, including its cookieless aggregate analytics), Google Ireland Ltd (Google Analytics and Google Tag Manager, with consent), and Klaviyo, Inc. (United States — waitlist management and marketing email, with consent). We do not sell or rent your personal data.
7. International Transfers
We primarily process data within the EU/EEA (the Website is hosted and served from EU infrastructure). Where data is transferred outside the EEA (for example to Klaviyo in the United States, or Google services involving U.S. processing), we rely on appropriate safeguards under Chapter V of the GDPR — in particular Standard Contractual Clauses (Decision (EU) 2021/914), and where applicable the EU–U.S. Data Privacy Framework for certified providers. We rely on Standard Contractual Clauses as our standing safeguard so transfers remain lawful even if an adequacy mechanism changes.
8. Security and Breaches
We use technical and organisational measures appropriate to the risk to protect personal data. If a personal data breach occurs, we will assess it without undue delay and, where required, notify the competent supervisory authority within 72 hours of becoming aware of it (GDPR Art. 33). Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay (GDPR Art. 34).
9. Changes
We may update this Policy from time to time. Material changes will be posted here with an updated effective date, and where required we will seek your consent
10. Contact Us
Neura Labs Oy
Pitkäkalliontie 9, 01800 Klaukkala, Finland
Privacy contact: support@neura.health