Privacy Policy

This policy explains how Vizbox Ltd (“we”, “us”) processes personal data when you use our website and portal. It is intended to meet UK GDPR transparency requirements. You should still tailor it to your actual operational setup (e.g. your final contact details, sub-processors, and retention schedule).

Who we are

Controller: Vizbox Ltd. Contact: privacy@vizboxltd.co.uk.

What data we process

• Account data: email address and an encrypted (hashed) password for portal authentication.
• Session data: rehabilitation session records and metrics provided by your connected backend/API.
• Support/contact: if you use a contact form, we process the message content and contact details you submit.

Purposes and legal bases

• Provide the portal and security: to authenticate users, protect access, and prevent abuse (legitimate interests and/or performance of a contract where applicable).
• Service improvement: if enabled, analytics cookies help us understand usage (consent).

Processors and hosting

We use service providers (processors) to host and operate the portal (e.g. hosting and database providers) and to deliver optional features (e.g. email delivery and AI generation). We only share personal data with processors as needed to provide the service and under contractual protections.

Cookies

We use an essential cookie for authentication and may use optional cookies if you consent. See our Cookie Policy.

Data retention

Authentication sessions are time-limited. For other data, retention should reflect your clinical and operational requirements. Define and document retention periods before production use.

International transfers

Your hosting/provider choices may involve processing outside the UK/EU. Ensure appropriate safeguards (e.g. SCCs) are in place with your processors.

Your rights

Depending on jurisdiction (UK GDPR / EU GDPR), you may have rights including access, rectification, erasure, restriction, objection, and data portability. Contact us to exercise these rights.

Complaints

If you are not satisfied with how we handle your personal data, you can raise a concern with us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Changes

We may update this policy. We’ll update the “Last updated” date and, if changes are material, provide additional notice.