Terms of Service

Version: terms-v1 Last updated: 2026-06-04 Governing law: Danish law. Venue: Copenhagen City Court.

Parties

These Terms are entered into between:

• The Clinic (you — the dental or healthcare business creating an account on app.nordicpatientgroup.dk).
• Nordic Patient Group ApS ("NPG", CVR 40713352, Fuglebækvej 2C, 1., 2770 Kastrup, Denmark) as the service provider.

NPG cooperates with VEKST Solutions LLC (EIN 98-1931362) as technical platform provider (sub-processor under the separate Data Processing Agreement).

At-a-glance summary (non-binding)

• NPG Pulse is a patient-feedback platform: NPS surveys, reputation monitoring and visibility analytics.
• The Clinic accepts these Terms + the Data Processing Agreement via click-acceptance at signup.
• Any free trial is disclosed at signup. The subscription fee follows the selected plan and the price list in effect (excl. VAT); price changes to a plan you already use are notified 60 days in advance.
• Liability cap: NPG's total liability is capped at the greater of DKK 25,000 or 12 months of fees paid by the Clinic — except for wilful misconduct, gross negligence, GDPR fines and IP infringement, which are uncapped.
• The Clinic may cancel anytime with 30 days' notice; we may terminate with a 30-day cure period for material breach.
• Patient data is governed separately under the Data Processing Agreement.

1. The Service

1.1. NPG provides the NPG Pulse platform (the "Service"), a SaaS platform for collection and analysis of patient feedback as well as monitoring of the Clinic's online reputation.

1.2. The Service includes, among others:

• Upload of patient contact lists (typically via CSV export from the Clinic's clinical system).

• Distribution of NPS surveys via email.

• Collection and storage of patient responses.

• Aggregated clinic reports, AI-generated insights, and trend comparisons over time.

• Collection and analysis of publicly available Google and Facebook reviews.

  1.3. NPG may evolve the Service at any time. Material changes in functionality are communicated to the Clinic with reasonable notice.

2. Signup and account

2.1. The Clinic signs up for the Service by creating an account on app.nordicpatientgroup.dk and accepting these Terms + the Data Processing Agreement via click-acceptance. The Clinic warrants that the person completing signup has authority to bind the Clinic.

2.2. The Clinic is responsible for keeping its login credentials confidential and for all activity under its account.

2.3. NPG may decline signup or suspend the account if the Clinic (i) is not a regulated healthcare business, (ii) misuses the Service, (iii) has outstanding debt, or (iv) is in conflict with applicable law.

3. Use of the platform — acceptable use

3.1. The Clinic shall use the Service exclusively for legitimate patient-feedback and reputation activity for its own business. In particular, the Clinic shall not:

• Upload contact lists of persons who do not have an existing or recently active patient relationship with the Clinic (consultation or treatment within the past 24 months — anti-spam rule, aligned with the retention window in DPA Annex A.6).

• Use the Service to send unrelated marketing.

• Attempt to access other clinics' data, circumvent access controls, or penetrate the Service.

• Reverse-engineer, decompile or copy the Service's source code.

• Resell or white-label the Service without a separate written agreement.

  3.2. Violation of Section 3.1 entitles NPG to immediate suspension without notice and termination of the agreement under Section 9.

4. Service fees and payment

4.1. Trial period: the Service may be offered with a free trial. The length and terms of the trial are shown at signup and in the Clinic's order confirmation. No subscription fee is payable during the trial.

4.2. Subscription fee: the subscription fee depends on the plan the Clinic selects at signup and is set out in the price list in effect at any given time at app.nordicpatientgroup.dk as well as in the Clinic's order confirmation. All prices are stated in Danish kroner and excl. VAT, unless expressly stated otherwise. If NPG introduces or changes a subscription fee for a plan the Clinic already uses, this is notified with at least 60 days' written notice, and the Clinic may terminate the agreement without fee before the change takes effect (Section 9).

4.3. Invoices are issued monthly or annually depending on the agreement. Payment due 14 days net. Late payment incurs interest under the Danish Interest Act.

5. Patient data and the Data Processing Agreement

5.1. The Clinic is the data controller for patient data uploaded to or collected via the Service. NPG is the data processor.

5.2. The terms of processing are governed by the separate Data Processing Agreement (DPA), which the Clinic accepts via click-acceptance in the signup flow. The DPA can be accessed at any time at app.nordicpatientgroup.dk/dpa.

5.3. In case of conflict between these Terms and the DPA, the DPA prevails as regards the processing of personal data.

6. NPG's responsibilities and warranties

6.1. NPG will use reasonable care to ensure that the Service:

• Is available 24/7 on a best-effort basis (no formal uptime SLA).

• Processes personal data in accordance with the DPA and GDPR.

• Protects the Clinic's data with reasonable technical and organisational measures (see DPA Annex C).

  6.2. NPG provides no warranties that the Service will be free of errors or that it will meet the Clinic's specific business objectives.

7. Limitation of liability

7.1. NPG's total liability to the Clinic is — regardless of the basis of the claim — limited to the greater of:

• DKK 25,000, or

• the fees the Clinic has paid to NPG in the 12 months preceding the event giving rise to the claim.

  7.2. Exceptions to the liability cap: the limitation in Section 7.1 does not apply to:

• Wilful misconduct or gross negligence by NPG.

• GDPR fines imposed on the Clinic as a result of NPG's defective compliance, passed through to NPG under GDPR Art. 82.

• Infringement of third-party intellectual property rights caused by NPG.

  7.3. The limitation does not affect the Clinic's rights against NPG under mandatory consumer-/data-protection legislation.

  7.4. NPG is not liable for indirect losses, including lost profits, loss of goodwill, lost business opportunity or loss of data beyond what follows from the DPA.

8. Clinic's responsibilities and warranties

8.1. The Clinic warrants that:

• The Clinic has authority to upload the patient data used in the Service.

• The Clinic has obtained any necessary patient consent under its own privacy policy before upload.

• The Clinic uses the Service in accordance with these Terms and Danish law.

  8.2. The Clinic indemnifies NPG against third-party claims arising from the Clinic's breach of Section 8.1, including claims from patients alleging they received NPS surveys without a valid relationship to the Clinic.

9. Termination

9.1. Termination for convenience: the Clinic may terminate the agreement at any time with 30 days' written notice without cause. NPG may terminate the agreement with 90 days' written notice without cause.

9.2. Termination for breach: either party may terminate the agreement with a 30-day written cure period upon the other party's material breach. If the breach is cured within the cure period, termination cannot be effected.

9.3. Suspension without notice: NPG may suspend the Clinic's access to the Service without prior notice in case of (i) breach of Section 3.1 (acceptable use), (ii) outstanding debt over 30 days, or (iii) genuine suspicion of abuse threatening the Service's stability.

9.4. Consequences of termination: at termination of the agreement, DPA Clause 10 applies regarding deletion and return of patient data. The Clinic has 30 days to request an export of patient data; thereafter data is deleted in accordance with the DPA's SLAs (90/120 days).

10. Changes to the Terms

10.1. NPG may amend these Terms by notifying the Clinic with at least 30 days' notice via email or dashboard message. The Clinic has the same right to object as for sub-processor changes (DPA Clause 6.4).

10.2. If the Clinic does not object within the 30-day period, the changes are deemed accepted.

10.3. If the Clinic objects and the parties cannot reach mutual agreement, the Clinic may terminate the agreement under Section 9.1.

11. Governing law and disputes

11.1. These Terms are governed by Danish law. The CISG and conflict-of-laws rules are excluded.

11.2. The venue is the Copenhagen City Court as court of first instance, unless mandatory Danish procedural rules dictate otherwise.

11.3. The parties shall — before initiating court proceedings — in good faith seek to resolve the dispute through direct negotiation for 30 days.

12. Miscellaneous

12.1. Entire agreement: these Terms + the DPA + any order confirmations constitute the entire agreement between the parties. Verbal agreements or earlier drafts have no validity.

12.2. Severability: the invalidity of one provision does not affect the validity of the others.

12.3. Force majeure: neither party is liable for delay or failure to perform caused by circumstances outside the party's reasonable control (war, natural disasters, DDoS attacks affecting sub-processors, etc.).

12.4. Assignment: the Clinic may not assign the agreement without NPG's consent. NPG may assign the agreement to a group-affiliated company or in connection with a business transfer, provided that the new party complies with the same obligations.

12.5. Notices: all written communications are sent to the email registered on the account or to privacy@nordicpatientgroup.dk for NPG.

13. Contact