Privacy policy
How OncoSync collects, uses and protects personal data — for visitors to this site and for clinical users of the platform.
Who we are
OncoSync is operated by OncoSync Health Technologies. This policy explains our role as a data controller for website visitors, and as a data processor acting on instructions from the healthcare organisations that use the platform.
Final wording for this section is pending legal review.
What we collect
Website: contact details you submit through the demo request form, plus aggregate analytics about how pages are used.
Platform: patient records, clinical documents and audit events entered by your organisation. These remain under your organisation's control throughout.
Final wording for this section is pending legal review.
How we use it
Demo requests are used only to arrange and follow up on your session. Clinical data is processed solely to deliver the platform to your organisation.
Final wording for this section is pending legal review.
Lawful basis and consent
Final wording for this section is pending legal review.
Sharing and sub-processors
We publish the current list of sub-processors and give notice before it changes.
Final wording for this section is pending legal review.
Retention and deletion
Final wording for this section is pending legal review.
Where data is stored
Platform data is held in the region your organisation selects at onboarding and is not moved without written instruction.
Final wording for this section is pending legal review.
Your rights
Final wording for this section is pending legal review.
Security
Encryption in transit and at rest, role-based access control, two-factor authentication with enforced password rules, and immutable audit logging.
Final wording for this section is pending legal review.
Contacting us
Requests about this policy should go to our data protection contact.
Final wording for this section is pending legal review.