1. Introduction

Oralytics Limited (“Oralytics”, “we”, “us”, “our”) is committed to protecting your privacy and handling your personal data transparently and securely.

This Privacy Policy explains what personal data we collect, how we use it, how it is stored, and your rights under UK data protection law. This policy applies to our website, platform, and related services (the “Service”).

2. Who We Are (Data Controller)

Oralytics Limited is the data controller for personal data processed in connection with the Service.

Email: privacy@oralytics.co.uk
Company: Oralytics Limited
Jurisdiction: England and Wales

3. Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

• Name and Email address
• Organisation or practice name
• Account login credentials
• Subscription status and plan details
• Communications you send to us

3.2 Payment Information

We do not store or process card details. Payments are handled by our third-party payment processor, Stripe. We receive confirmation of payment status, subscription state, and billing identifiers only.

3.3 Technical and Usage Data

• IP address and Browser type
• Device information
• Pages visited and usage patterns
• Log files and error reports

4. Data We Do Not Collect

• We do not collect NHS patient data.
• We do not collect special category data (e.g. health data about individuals).
• We do not intentionally collect data about children.

All NHS-related data displayed on the platform is aggregated, non-personal, and sourced from public datasets.

5. How We Use Your Data

We process personal data for the following purposes:

• To create and manage user accounts and provide access to the Service.
• To manage subscriptions and billing.
• To communicate service updates, support, and account notices.
• To monitor usage, improve the Service, and prevent fraud or misuse.
• To comply with legal obligations.

6. Legal Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract: To provide the Service you subscribe to.
• Legitimate interests: To operate, secure, and improve the platform.
• Legal obligation: To comply with applicable laws.
• Consent: Where required (e.g. certain cookies or marketing).

7. Cookies and Tracking

We use cookies to enable core site functionality and understand how users interact with the platform. You can manage or disable cookies through your browser settings.

8. Data Sharing

We may share personal data with trusted third parties only where necessary, including payment processors (Stripe), hosting providers, and professional advisers. We do not sell personal data to third parties.

9. International Data Transfers

Where third-party providers process data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy decisions or standard contractual clauses.

10. Data Retention

We retain data only as long as necessary: account data is kept for the duration of your account; billing records are kept as required by law; and support communications are kept for audit purposes.

11. Data Security

We implement technical and organisational measures including access controls, secure hosting, and encryption. However, transmission over the internet is at your own risk.

12. Your Rights

Under UK GDPR, you have the right to access, correct, or request erasure of your data, as well as the right to restrict or object to processing. To exercise these rights, please contact us.

13. Complaints

If you believe your rights have been violated, you may complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We encourage you to contact us first.

14. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices.

15. Changes to This Policy

We may update this policy from time to time. Continued use of the Service after changes take effect constitutes acceptance.

16. Contact Us

If you have questions about this Privacy Policy, please contact:

Email: privacy@oralytics.co.uk