Privacy Policy

1. Data Controller

Emerge Medical ("we", "us", or "our") operates as the Data Controller responsible for the personal data collected through this website (emergemedical.co.uk).

For all data protection inquiries, privacy questions, or to exercise your statutory rights, please contact our Data Protection lead at:
Email: info@emergemedical.co.uk
Jurisdiction: United Kingdom

2. Personal Data We Collect

We collect and process personal data strictly necessary to provide our services and respond to inquiries:

• Direct Inquiries & Demonstration Requests: When you complete a contact or demonstration request form on our website, we collect your name, email address, job role, organisation/trust name, and the details of your inquiry.
• Investor Inquiries: When requesting confidential investor briefing packs, we collect identification and institutional affiliation details.
• Technical & Usage Telemetry: When you visit our website, our hosting infrastructure automatically collects standard web logs, including your anonymized IP address, browser type, operating system, referral URLs, and access timestamps to ensure network resilience and security.

3. Lawful Basis for Processing

Under the UK GDPR, we process your personal information under the following lawful bases:

• Legitimate Interests: To communicate with NHS trusts, emergency service partners, prospective clients, and investors who express interest in our clinical simulation platform and services.
• Contract Preparation: To provide demonstrations, technical specifications, and procurement documentation requested by your organisation prior to entering into a formal agreement.
• Legal Obligation: Where processing is required to comply with statutory UK regulations and commercial reporting requirements.

4. How We Use Your Information

We use the data collected exclusively for legitimate professional purposes:

• To schedule and deliver customised clinical simulation platform demonstrations.
• To respond to commercial, educational, and governance inquiries.
• To transmit investor briefings and corporate updates to authorised stakeholders.
• To protect our website infrastructure against cyber threats, unauthorised access, and fraud.

We do not sell, rent, or trade your personal data with third-party marketers or advertisers under any circumstances.

5. Data Processors & Infrastructure

We may share personal data with trusted third-party service providers solely to maintain our web operations and communication pipelines:

• Hosting & Content Delivery: Cloudflare, Inc. (providing encrypted static content delivery, DDoS protection, and SSL/TLS termination).
• Enterprise Communication: Secure email and productivity providers operating with UK/EU data sovereignty safeguards.

All third-party processors are bound by strict Data Processing Agreements (DPAs) requiring adherence to UK GDPR confidentiality and security benchmarks.

6. Security & Storage Standards

Emerge Medical implements rigorous technical and organisational security controls designed to safeguard personal information. All web traffic is encrypted in transit via modern HTTPS (TLS 1.3). Access to inquiry submissions is strictly restricted to authorised executive and clinical governance personnel.

Our internal information security practices are structured to align with NHS Data Security and Protection Toolkit (DSPT) standards and Cyber Essentials guidelines.

7. Data Retention Period

We retain personal information only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, accounting, and clinical governance requirements. Contact form inquiries that do not progress to an ongoing commercial or clinical partnership are securely expunged or anonymized in regular review cycles.

8. Your Rights Under UK GDPR

As a data subject under UK data protection law, you have specific enforceable rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You may request that we delete your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: You have the right to request restriction of your data processing under certain statutory circumstances.
• Right to Object: You may object at any time to the processing of your data based on legitimate interests.

To exercise any of these rights, please email us directly at info@emergemedical.co.uk. We respond to all verified statutory requests within one calendar month without charge.

9. Regulatory Oversight & Complaints

If you have concerns regarding our data handling practices, we invite you to contact us directly so we can resolve the issue immediately. You also possess the statutory right to lodge a formal complaint with the UK data protection supervisory authority: