Privacy Policy

Docomed Ltd (“Docomed”, “we”, “us” or “our”) is a UK-based medical device company. This Privacy Policy explains how we collect, use, disclose and safeguard information from visitors to our website and from users of our devices and services. We are committed to protecting your personal data and handling it in accordance with the UK GDPR and the Data Protection Act 2018.

We may collect the following categories of information:

Personal data

• Contact details, such as your name, email address, telephone number and organisation.
• Professional information, such as your role, specialty and place of work.
• Device usage data and identifiers relating to our products and services.
• Health data, where relevant and with your consent where required by law.
• Payment information where you purchase products or services.

Non-personal data

• Browser type, access times, pages visited and similar technical information.
• Aggregated, non-identifying demographic information.

We use the information we collect to:

• Provide, operate and improve our devices and services.
• Process transactions and respond to your enquiries.
• Analyse how our website and services are used.
• Meet our legal and regulatory obligations.
• Send you marketing communications where you have agreed to receive them.
• Monitor patient safety and the performance of our medical devices.

Our legal bases for processing include the performance of a contract, our legitimate interests, compliance with legal obligations, and your consent.

We may share your information with:

• Service providers who support our business, such as payment processors, analytics, email, hosting and customer-service providers.
• Authorities, regulators or other parties where we are required to do so by law.
• Other parties in connection with a business transfer, such as a merger or acquisition.
• Healthcare providers and regulators for medical and adverse-event reporting purposes.

Your information may be transferred to, and processed in, countries outside the United Kingdom and the European Economic Area. Where this happens, we put appropriate safeguards in place, such as transfers to countries covered by an adequacy decision or the use of data-transfer agreements approved under UK law.

We use appropriate technical and organisational measures to protect your information, including encryption, security testing, access controls and staff training. We maintain procedures to deal with any suspected personal-data breach and will notify affected individuals and the relevant regulators where we are legally required to do so.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data (rectification).
• Request erasure of your data.
• Restrict or object to our processing of your data.
• Request portability of your data.
• Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details in the “Contact Us” section below.

We retain your information only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory requirements. Information relating to medical devices may be retained for longer periods where required by medical device regulations and product-liability laws.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last Updated” date and will take effect when posted. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer:

• Email: info@docomed.ai
• Post: 36 Keswick Road, Bookham, Surrey, KT23 4BH, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. We would, however, appreciate the chance to address your concerns before you approach the ICO, so please contact us first.