Privacy Policy

1. Who we are

MedTechAI is a product of HexaTech (“we”, “us”, “our”). For personal data collected through this website, HexaTech is the data controller. You can reach us at info@hexa-tech.uk or by post at 25 Cabot Square, Canary Wharf, London, E14 4QZ, United Kingdom.

2. What this policy covers

This policy covers personal data we collect when you visit this website or contact us — for example, to request a demo or ask a question. It does not cover how patient or customer data is processed inside the MedTechAI platform on behalf of a clinic; that is governed by the agreement (including a data processing agreement) between HexaTech and the clinic (see section 12).

3. Personal data we collect

Information you give us. When you book a demo, message us on WhatsApp, email us, or otherwise get in touch, we may collect your name, email address, phone number, the clinic or organisation you represent, and the content of your message.

Information collected automatically. Like most websites, we may collect basic technical and usage information — such as your device type, browser, approximate location (from your IP address), the pages you view and how you arrived — through cookies and similar technologies.

4. How we use your data and our lawful bases

We use personal data to:

• respond to your enquiries and arrange demos — on the basis of taking steps at your request before entering a contract, or our legitimate interests in responding to you;
• provide, secure and improve this website — on the basis of our legitimate interests in running a safe, effective website;
• send you information you have asked for or agreed to receive — on the basis of your consent, which you can withdraw at any time; and
• comply with legal obligations — on the basis of legal obligation.

5. Cookies and analytics

We may use cookies and similar technologies to make the site work, remember your preferences and understand how the site is used. You can control cookies through your browser settings. Where required, we will ask for your consent before setting non-essential cookies.

6. Who we share your data with

We do not sell your personal data. We may share it with trusted service providers who help us operate our website and communications (for example, hosting and email providers), who act on our instructions under appropriate contracts. We may also disclose data where required by law or to protect our rights.

7. International transfers

Some of our providers may process data outside the United Kingdom. Where they do, we take steps to ensure your data is protected by appropriate safeguards recognised under UK data protection law.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy, to meet legal or accounting requirements, or to resolve disputes. When it is no longer needed, we securely delete or anonymise it.

9. Your rights

Under UK GDPR you have the right to access your personal data; to have it corrected or erased; to restrict or object to its processing; to data portability; and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at info@hexa-tech.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

10. How we protect your data

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, but we work to keep our safeguards under review.

11. Children’s privacy

This website is intended for clinic owners, managers and professionals. It is not directed at children, and we do not knowingly collect personal data from children.

12. Patient data and our clinic customers

When a clinic uses the MedTechAI platform, the clinic is the data controller for its patients’ personal data and HexaTech acts as a data processor, processing that data only on the clinic’s documented instructions under a data processing agreement. MedTechAI supports clinic administration and patient communication only; it does not provide diagnosis, clinical triage or medical advice, and a human always reviews AI-handled conversations. Patients should contact their clinic directly to exercise data rights relating to their care.

13. Changes to this policy

We may update this policy from time to time. When we do, we will change the “last updated” date above, and where changes are significant we will take reasonable steps to let you know.

14. How to contact us

If you have any questions about this policy or how we handle your personal data, please contact us at info@hexa-tech.uk.