Privacy Policy

1. Who we are

CareVanta develops healthcare intelligence and pathway modelling technology to support organisations in understanding care delivery, evaluating change, and building clearer evidence for healthcare adoption, commercialisation, and system improvement.

We may collect and process personal information from website visitors, prospective customers, partners, suppliers, investors, healthcare professionals, industry contacts and other individuals who interact with us.

2. Personal information we collect

Information you provide to us directly may include your name, job title, organisation name, email address, telephone number, business address, information submitted through website forms, information provided when you request a demo, contact us, subscribe to updates, or engage with our team, and any other information you choose to provide in communications with us.

When you visit our website, we may collect limited technical information, including IP address, browser type and version, device type, operating system, pages visited, time and date of visit, referring website, and website usage and analytics information.

Where relevant, we may process information about your professional role, organisation, sector, areas of interest, and engagement with CareVanta.

3. Special category data

CareVanta does not intend to collect special category personal data through its general website. Special category data includes more sensitive information such as health information, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, sex life or sexual orientation.

If we ever need to process health-related or other special category data as part of a pilot, research activity, product evaluation, patient-facing service, or NHS-related project, we will provide a separate privacy notice or participant information sheet explaining how that data is handled.

4. How we use personal information

We may use personal information to respond to enquiries, provide information about CareVanta, our platform and our services, arrange meetings, demonstrations, or follow-up discussions, manage relationships with prospective customers, partners, suppliers, investors, and stakeholders, provide and improve our website, understand website usage and performance, send relevant updates where permitted, manage commercial, legal, regulatory, and administrative matters, protect our business, website, systems, and users, and comply with legal and regulatory obligations.

5. Our lawful bases for processing

Under UK GDPR, we must have a lawful basis for using personal information. Depending on the circumstances, we may rely on legitimate interests, contract, consent, or legal obligation.

We may process personal information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include responding to business enquiries, developing professional relationships, improving our website, managing communications, and promoting relevant B2B services.

We may rely on consent where you have actively opted in, for example to receive certain marketing communications. You can withdraw consent at any time.

6. Marketing communications

We may send you marketing or business development communications where permitted by law, including where you have requested information from us, engaged with us in a professional context, or opted in to receive updates.

You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails, where available, or by contacting us at hello@carevanta.ai.

We will not sell your personal information to third parties.

7. Cookies and analytics

Our website may use cookies and similar technologies to improve functionality, understand website usage, support analytics, and display embedded media.

Some cookies are necessary for the website to function. Where required, we will ask for your consent before placing non-essential cookies on your device.

You can manage or disable cookies through your browser settings. However, some parts of the website may not function properly if certain cookies are disabled.

8. Who we share personal information with

We may share personal information with trusted third parties where necessary for the purposes described in this Privacy Policy. These may include website hosting providers, IT and cloud service providers, CRM and email service providers, professional advisers, analytics providers, business partners where relevant to your enquiry or relationship with us, and regulators, public authorities, or law enforcement bodies where required by law.

Where we use third-party service providers, we take appropriate steps to ensure they handle personal information securely and only in accordance with our instructions.

9. International transfers

Some of our service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we will ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, international data transfer agreements, or other lawful transfer mechanisms.

10. How long we keep personal information

We will only keep personal information for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, reporting or business requirements.

Retention periods may vary depending on the type of information and the reason we hold it. When deciding how long to keep personal information, we consider the nature of the information, the purpose for which it was collected, whether we have an ongoing relationship with you or your organisation, legal, regulatory, or contractual requirements, and whether retention is needed to resolve disputes or protect our legal interests.

If personal information is no longer required, we will delete it, anonymise it, or securely archive it.

11. How we protect personal information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include access controls, secure systems, password protection, data minimisation, staff awareness, supplier due diligence and secure storage practices. However, no website, email system or online service can be guaranteed to be completely secure.

12. Your data protection rights

Under UK data protection law, you may have rights including the right to be informed, access, rectification, erasure, restriction, data portability, objection, rights relating to automated decision-making and profiling, and the right to withdraw consent where processing is based on consent.

The rights available may depend on the lawful basis we rely on for processing your personal information. To exercise your rights, please contact us at hello@carevanta.ai. We may need to verify your identity before responding to a request.

13. Automated decision-making

We do not use personal information collected through our general website to make solely automated decisions that produce legal or similarly significant effects on individuals.

If this changes in the future, or if automated decision-making is used in connection with a specific product, pilot, or service, we will provide clear information about this.

14. Links to other websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of those websites. You should read the privacy policy of any third-party website you visit.

15. Children's privacy

Our website and services are intended for business and professional audiences. We do not knowingly collect personal information from children through our general website.

If we become aware that we have collected personal information from a child without appropriate consent or lawful basis, we will take steps to delete it.

16. Complaints

If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the UK Information Commissioner's Office, which is the UK regulator for data protection. Website: ico.org.uk. Telephone: 0303 123 1113.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, legal obligations, or data protection practices.

The latest version will be published on this page with the updated date shown at the top.

18. Contact us

For questions about this Privacy Policy or how we handle personal information, please contact CareVanta at hello@carevanta.ai.

Address: Irish Square, Upper Denbigh Road, St Asaph, Denbighshire, UK, LL17 0RN. Company number: 17077107.