Privacy notice

1. Who we are

Assurance AI is a UK-based, clinician-led clinical safety and healthcare AI assurance consultancy working with organisations that build or deploy digital health products. Assurance AI is the data controller for personal data submitted through this website. Corporate details are published on the about page.

2. What personal data we process

We process work contact information you submit through our website and product (name, work email, organisation, role), assessment responses you choose to save, and standard technical data such as IP address and browser type.

3. Lawful basis

We rely on legitimate interests for business enquiries and contract for delivering services you engage us for.

4. Special-category and patient data

Assurance AI is not intended to process patient records, clinical notes or identity documents. Do not submit such data through this website or any online tool we provide.

5. What happens to a website enquiry

When you send an enquiry through the contact page, what you type is stored in our website database, which is hosted on managed UK/EEA cloud infrastructure. A notification containing your name, organisation, the options you selected and a short extract of your message is sent to our own enquiries mailbox by our email delivery provider, so that we see it and can reply. Your reply address is used only so that we can respond to you.

6. Booking a call

Our discovery call booking page is hosted by Google (Google Calendar appointment scheduling) on a Google domain. If you book a call, the details you enter are submitted to Google and processed under Google's own terms and privacy notice, not ours. You do not have to use it: you can email us instead and we will arrange a time by email.

7. Sharing

We do not sell personal data and we do not share it for anyone else's marketing. We do use service providers to run this business — website and database hosting, email delivery, and the booking tool described above — and they process personal data on our behalf, or in Google's case under their own terms, as described in this notice. We also disclose personal data where we are legally required to.

8. How long we keep it

Enquiry records are kept while we are in contact with you and for as long as we need them for our business records and legal obligations. We have not yet fixed a single published retention period; if you would like your enquiry deleted, email us and we will delete it.

9. Your rights

You have rights of access, rectification, erasure, restriction, portability and objection under UK GDPR. Contact us to exercise these rights. If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

10. Contact

Email enquiries@assuranceai.co.uk, or use the contact page, to raise a privacy question or exercise your rights.