Privacy policy

1. Introduction
2. Data which we collect
3. How we collect your data
4. Why we collect your data
5. Lawful basis for processing of data
6. Who we share your data with
7. Data storage and security
8. Use of cookies
9. Your rights under UK GDPR
10. Data retention
11. Changes to our privacy policy
12. Contact

1. Introduction

Openpatho Ltd provides digital clinical histopathology and research services supported by artificial intelligence. We are based in the United Kingdom and committed to protecting your personal data and privacy in accordance with the UK General Data Protection Regulation (UK GDPR).

2. Data which we collect

We may collect the following types of personal data:

  • Full name
  • Email address
  • Phone number
  • IP address
  • Uploaded documents (including histopathology slides and reports which may contain relevant personal demographic data)
  • Medical information submitted by you or your referring clinician or any relevant third party such as hospital laboratory).

3. How we collect your data

We collect data directly from you when you:

  • Register for or log into your account and when you or a third party acting on our behalf and in your interests
  • Submit textual data and digital images through our website
  • Communicate with us via text or email or directly via our portal

Some data may also be collected automatically (e.g., IP address) via server logs or analytics tools, if applicable.

4. Why we collect your data

We use your personal data for the following purposes:

  • To deliver our clinical histopathology and diagnostic services which at times may employ AI technology
  • To communicate with you or a relevant third party (eg your hospital laboratory) about your case or results
  • To manage and maintain user accounts
  • To support research activities (with appropriate safeguards eg compliance with LREC where applicable)
  • To comply with legal and regulatory obligations (eg compliance with Caldicott principles (https://www.gov.uk/government/publications/the-caldicott-principles).

5. Lawful basis for processing of data

We process your personal and medical data on the basis of:

  • Consent
  • Contractual necessity
  • Legal obligation
  • Legitimate interests
  • Provision of healthcare

6. Who we share your data with

We may share your data with trusted third parties where necessary to deliver our services. These may include:

  • Pathologists and clinical consultants and other healthcare personnel involved in your case
  • Secure cloud storage and document handling providers
  • Research collaborators subject to consent in line with LREC procedures and where appropriate in anonymised or pseudonymised form).

7. Data storage and security

We implement appropriate technical and organisational measures to safeguard your personal and medical data. All data is stored securely, and access is restricted to authorised personnel only.

Where you have been given a username and password which enables you to access certain parts of our website you are responsible for keeping this information confidential. We ask you not to share your username and password with anyone.

8. Use of cookies

We may use cookies or similar technologies to enhance your experience, manage sessions, or analyse usage. A full Cookies Policy will be provided if cookies are enabled.

9. Your rights under UK GDPR

We retain personal data only as long as necessary for the purpose for which it was collected and we meet fully our legal and regulatory requirements in respect of medical data.

10. Data retention

We may use cookies or similar technologies to enhance your experience, manage sessions, or analyse usage. A full Cookies Policy will be provided if cookies are enabled.

11. Changes to our privacy policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date.

12. Contact

For privacy-related queries or to exercise your data rights, contact us at: