LEGAL

Privacy Notice

How we collect, use, and protect personal data across TrustPoint Digital Health's websites.
LAST UPDATED 10 OCTOBER 2026

Who we are

This notice covers www.trustpointdigitalhealth.com, published by TrustPoint Digital Health Ltd (Companies House no. 17257186). We are the data controller for any personal data processed through this site. You can reach us at hello@trustpointdigitalhealth.com for anything relating to your data.

What this site collects

This site does not use cookies, analytics, or any tracking scripts. We only receive personal data if you choose to contact us:

  • Enquiry form: if you use the enquiry form on our homepage, we receive your name, email address, organisation (if given), the type of organisation you represent, and your message. The form is run by Formspree, Inc., which receives and stores your submission on our behalf and forwards it to us by email. Formspree is based in the United States, so your submission is processed outside the UK. See Formspree's privacy policy.
  • Email: if you email hello@trustpointdigitalhealth.com, we process whatever you send us (your name, email address, and message content) to respond to your enquiry.
  • Calendly bookings: the "Book a Call" links on this site take you to Calendly, a third-party scheduling service. Any details you enter there (name, email, booking notes) are submitted directly to Calendly and are covered by Calendly's own privacy policy, not this one.
  • Hosting logs: our hosting provider, Vercel Inc., processes standard web request data (such as IP address and browser type) as part of running the infrastructure that serves this site, for security and reliability purposes.
  • Fonts: this site loads its typefaces from Google Fonts. Your browser requests them directly from Google, which receives your IP address as part of that request. Google does not set cookies for this. See Google's privacy policy.

Cookies

This site does not set any cookies. When you dismiss the cookies and privacy notice, we store one small setting in your browser's local storage so the notice does not appear again. It contains no personal data, is never sent to us, and you can clear it at any time through your browser settings.

Why we process it, and our lawful basis

We process enquiries, whether sent by email or through the enquiry form, on the basis of our legitimate interest in responding to people who contact us (UK GDPR Art. 6(1)(f)), and, where you're asking about a specific engagement, to take steps toward a possible contract (Art. 6(1)(b)). Hosting logs are processed under our legitimate interest in keeping the site secure and operational.

Who else sees it

We don't sell or share your data with third parties for their own purposes. The only other organisations involved are the ones named above: Vercel (hosting) and, if you use the enquiry form, Formspree (form handling), each acting on our behalf; Google, which serves our fonts; and, if you use it, Calendly (scheduling), as an independent controller of the data you give them directly.

How long we keep it

We keep enquiry emails and form submissions for as long as reasonably needed to handle the conversation and any resulting engagement, and for up to 24 months afterwards for our own records, unless we're required to keep them longer for legal or contractual reasons.

Your rights

Under UK GDPR you have the right to:

  • Access the data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted ("right to be forgotten")
  • Restrict or object to how we use it
  • Receive your data in a portable format

To exercise any of these, email hello@trustpointdigitalhealth.com. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Our other projects

The Healthcare AI Futures Lab, linked from our Resources menu, is a separate site we also publish. It asks visitors to sign up with their name and email before playing, with an optional opt-in for updates - that processing is covered by its own privacy notice, shown on the sign-up screen before you submit anything.

vikela.app is the website for Vikela, a clinical safety platform that TrustPoint Digital Health is building. We are the data controller for it. If you unlock the video tour or ask to join the pilot there, we receive your name, work email, organisation and role, plus any answers you give about your organisation type, your part in a decision, when you might start, the products you want to assure and what prompted your interest. Like our enquiry form, these forms are run by Formspree, Inc., which is based in the United States. We use your answers only to follow up about Vikela and to decide how quickly to do so, on the basis of our legitimate interest in responding to people who ask about it (UK GDPR Art. 6(1)(f)). If you tick the box for occasional Vikela updates, we email you on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time by emailing hello@trustpointdigitalhealth.com. We keep these details on the same basis as the enquiries described above.

vikela.app also uses Vercel Web Analytics, which counts visits without cookies, and stores one setting in your browser's local storage to remember that you have unlocked the tour. Its video tour plays through YouTube's privacy-enhanced mode. When the page opens, your browser loads YouTube's player from Google, which receives your IP address, and YouTube may set cookies or similar storage once you press play. See Google's privacy policy.