Last updated: 26 January 2026

​

ClinAITech is committed to protecting the privacy, security, integrity, and availability of data entrusted to us. We design all of our solutions with robust information governance, regulatory alignment, and enterprise-grade cyber security controls to ensure responsible and compliant use of artificial intelligence and digital technologies across regulated industries.

​

1. Commitment to Privacy

ClinAI Tech only collects, stores, processes, and transmits data that is necessary to operate our services or fulfil contractual obligations. We do not sell or license customer data to third parties, and we maintain strict controls over how information is handled throughout its lifecycle.

Our privacy principles are based on:

• Lawfulness, Fairness & Transparency

• Purpose Limitation

• Data Minimisation

• Accuracy

• Storage Limitation

• Integrity & Confidentiality

These principles align with global privacy frameworks including GDPR and other applicable regional data protection laws.

​

2. Data Security & Protection

We employ multi-layered security controls across our platforms, infrastructure, and internal operations, including:

Technical Controls

• Encryption in transit (TLS/HTTPS)

• Encryption at rest for stored data

• Firewalls & intrusion prevention systems

• Secure access controls & authentication

• System & application monitoring

• Network segmentation

• Secure audit logs and traceability

Organisational Measures

• Role-based access (least privilege)

• Staff confidentiality agreements

• Internal privacy training

• Incident response procedures

• Vendor risk management

• Continuous security monitoring

Access to sensitive information is restricted to authorised personnel who require access to fulfil operational responsibilities.

​

3. Regulatory Compliance

ClinAI Tech supports high-compliance environments such as life sciences, manufacturing, healthcare, and other regulated industries. Where applicable, we implement privacy and security measures aligned with:

• GDPR (General Data Protection Regulation)

• UK Data Protection Act

• ISO/IEC Security Standards (ISO 27001 families)

• Good Clinical Practice (GCP)

• Good Manufacturing Practice (GMP)

• Good Automated Manufacturing Practice (GAMP)

• Good Documentation Practice (GDocP)

Compliance documentation is available upon request for enterprise clients.

​

4. Data Ownership & Retention

Clients retain full ownership of their data at all times. ClinAI Tech processes data only for the purposes defined in service agreements, contracts, or end-user terms.

Data retention follows these principles:

• Data is retained only as long as necessary

• Data deletion or export is available upon request

• Secure destruction procedures apply upon termination

5. Data Processing & International Transfers

Where data needs to be processed within third-party infrastructure (e.g., secure cloud platforms), we ensure:

• Appropriate Data Processing Agreements (DPAs)

• Transfer mechanisms compliant with GDPR

• Vendor risk assessments and due diligence

ClinAI Tech does not transfer data to jurisdictions without adequate protections without proper legal safeguards in place.

​

6. Third-Party Services

Some platform components may integrate with cloud providers or secure enterprise-grade services. All third-party vendors undergo risk evaluation and must meet strict privacy and security criteria. Documentation can be provided for review.

​

7. Incident Management

ClinAI Tech maintains documented procedures for:

• Incident detection

• Containment

• Investigation

• Notification (where required by law)

• Remediation

In the event of a data breach that creates risk to individuals or clients, we will notify impacted parties within required legal timeframes.

​

8. User Rights & Requests

Where applicable under GDPR and other regulations, individuals have rights including:

• Access

• Rectification

• Erasure

• Restriction

• Data portability

• Objection

Requests can be made by contacting us at info@clinaitech.com. We may require identity verification to process certain requests.

​

9. Cookies & Tracking

ClinAI Tech may use cookies and similar technologies to improve platform performance and user experience. Cookie settings and preferences can be adjusted directly by users where supported by the platform.

A separate Cookie Policy can be provided if required.

​

10. Changes to This Policy

We may update this Privacy & Security Compliance statement periodically. Changes will be published on this page with an updated revision date.

​

11. Contact Information

If you have questions regarding privacy, security, compliance, or data protection, don't hesitate to get in touch with our compliance team:

📧 Email: info@clinaitech.com
📍 Company: ClinAITech
🌐 Website: www.clinaitech.com