Índice
SANNO Ltd. ("SANNO", "we", "us", or "our") is a company registered in the United Kingdom. We operate the SANNO Health platform, a software-as-a-service product for healthcare practitioners, clinics, and researchers.
For the purposes of the General Data Protection Regulation (GDPR) and UK GDPR, SANNO Ltd. is the data controller in respect of personal data processed through this website and Platform, except where we act as a data processor on behalf of practitioner users.
You can contact our data protection team at: hello@sanno.health
We collect and process the following categories of personal data:
Name, email address, professional title, country, phone number, and clinic or institution name, collected when you register for the Platform or sign up for our newsletter.
IP address, browser type, device identifiers, pages visited, time spent on the Platform, and similar technical data collected automatically when you access our services.
Records of communications you have with us, including support requests and emails.
Where practitioners upload patient health data to the Platform, SANNO processes this data as a data processor. The practitioner remains the data controller and is responsible for ensuring they have a lawful basis to share patient data with SANNO.
We use your personal data for the following purposes:
We process your personal data on the following legal bases:
We do not sell your personal data. We may share your data with:
The Platform is hosted within the European Union. Where we transfer personal data to third-party service providers located outside the EEA or UK, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Account data is retained for the duration of your subscription and for a period of up to 3 years thereafter, unless a longer retention period is required by law. Patient data is retained in accordance with the data processing agreement with the relevant practitioner.
Under GDPR and UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact us at hello@sanno.health. We will respond within one month.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and Cyber Essentials certification.
While we take security seriously, no method of transmission over the internet is completely secure. You should take steps to protect your own account credentials.
We use cookies and similar tracking technologies on our website. For full details of the cookies we use and how to manage them, please see our Cookie Policy.
The Platform is intended for use by healthcare professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Platform. The date at the top of this page indicates when this Policy was last updated. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.
If you have any questions, concerns, or complaints about how we handle your personal data, please contact us at:
SANNO Ltd.
Correo electrónico: hello@sanno.health
You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk.