Privacy Notice – RadAssist AI

Introduction

RadAssist AI Ltd provides workflow automation for radiology follow-ups. This notice explains how we handle personal data.

Scope Today

Our public demo uses synthetic data only; we do not process NHS patient data outside approved pilots. In any pilot, the NHS Trust is Data Controller and RadAssist AI is Data Processor under a Data Processing Agreement (DPA).

Who We Are

RadAssist AI Ltd
54 Gill Street
Manchester, M9 4FZ
United Kingdom

Contact: privacy@radassistai.com

Company No: 16769710 (Companies House, UK). ICO Registration: ZC024151. ODS Code: G3A4H.

What We Collect

• Contact details submitted through our website forms
• Essential cookies and limited analytics (see our Cookies Policy)

Legal Bases

We process personal data based on legitimate interests and/or consent. For pilots, processing is conducted under contract and Trust instructions.

Storage & Location

Data is stored on Microsoft Azure UK with encryption in transit and at rest.

Retention

Enquiry data is retained for up to 24 months unless law or contract requires longer retention.

Sharing

We share data only with vetted sub-processors for hosting, email, logging, and security purposes. A full list is available on our Security & Compliance page.

Your Rights

You have rights to access, rectification, erasure, restriction, and objection. Contact us at privacy@radassistai.com. You can also contact the ICO at ico.org.uk.

National Data Opt-Out

Not applicable at this stage; we will publish National Data Opt-Out controls before live use with NHS patient data.

Updates

We may update this notice and will show the "Last updated" date when changes are made.