Privacy Policy

CancerPath is a research-led digital health platform operated by CancerPath (the "Organisation", "we", "us", "our"). Our website is located at cancerpath.co.uk.

For the purposes of UK data protection law, CancerPath is the data controller in respect of personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: [email protected]

We collect the following categories of personal data:

Contact form submissions: When you submit an enquiry through our contact form, we collect your name, organisation, job role, email address, enquiry type, and the content of your message.

Usage data: We may collect anonymised information about how visitors use our website, including pages visited, time spent on pages, and browser type. This data does not identify you personally.

We do not collect any special category data (such as health data, ethnicity, or biometric data) through this website.

We use the personal data you provide to:

• Respond to your enquiry or partnership request • Follow up on pilot project or research collaboration discussions • Send you information you have requested about CancerPath

We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to third parties.

Our lawful basis for processing contact form data is legitimate interests (Article 6(1)(f) UK GDPR) — specifically, our legitimate interest in responding to enquiries from NHS organisations, researchers and partners.

We retain contact form submissions for up to 24 months from the date of receipt, unless a longer retention period is required to fulfil a partnership or contractual relationship.

Where no further engagement results from an initial enquiry, we will delete your personal data within 12 months.

We do not sell, rent or trade your personal data. We may share your data with:

• Our email service provider, solely for the purpose of delivering your enquiry to us • Professional advisers (legal, financial) where necessary and under confidentiality obligations

We do not transfer your personal data outside the United Kingdom or European Economic Area.

Our website uses cookies. A cookie is a small text file placed on your device when you visit a website.

We use the following types of cookies:

Strictly necessary cookies: Required for the website to function. These cannot be disabled.

Analytics cookies: We may use anonymised analytics to understand how visitors use our website. These are only placed with your consent.

You can manage your cookie preferences at any time using the cookie settings banner on our website, or by adjusting your browser settings.

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you • Right to rectification — to request correction of inaccurate personal data • Right to erasure — to request deletion of your personal data in certain circumstances • Right to restrict processing — to request that we limit how we use your data • Right to data portability — to receive your data in a structured, machine-readable format • Right to object — to object to our processing of your personal data

To exercise any of these rights, please contact us at: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data in transit.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.

Our website contains links to third-party websites, including the NHS website, Cancer Research UK, and our platform at cancer-path.base44.app. This Privacy Policy applies only to cancerpath.co.uk. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.