Privacy Policy

1. Important information and who we are

This privacy policy gives you information about how Evex Digital Health Limited collects and uses your personal data through your use of this website, including any data you may provide when you contact us via the website or purchase a service from us.

This website is not intended for children and we do not knowingly collect data relating to children.

Evex Digital Health Limited is the controller and responsible for your personal data (collectively referred to as "Evex", "we", "us" or "our" in this privacy policy).

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights (paragraph 9), please contact us using the information set out in the contact details section (paragraph 10).

2. The types of personal data we collect about you

Personal data means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes first name, last name, any previous names, username or similar identifier, marital status, title, date of birth and gender.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Usage Data includes information about how you interact with and use our website, products and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

How is your personal data collected?

We use different methods to collect data from and about you including through:

• Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you apply for our products or services, subscribe to our service or publications, request marketing to be sent to you, or give us feedback or contact us.
• Automated technologies or interactions. When you use our website, certain Technical Data may be collected automatically through server logs and similar technologies necessary to operate, secure and maintain the website. We do not currently use cookies or similar technologies to track your browsing activity for analytics, advertising or marketing purposes.
• Third parties or publicly available sources. We may receive personal data about you from third parties or publicly available sources where relevant to our business activities, including service providers that support our website, publicly available sources such as Companies House, and social media platforms where you interact with us through those services.

3. How we use your personal data

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

• Performance of a contract with you: where we need to perform a contract we are about to enter into or have entered into with you.
• Legitimate interests: where it is necessary to conduct our business and pursue our legitimate interests, balanced against your rights.
• Legal obligation: where it is necessary for compliance with a legal obligation that we are subject to.
• Consent: where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

How we use your data in practice

We use your personal data to register you and manage our relationship with you, to process and deliver any orders, to administer and protect our business and this website, to deliver relevant content and understand how our website is used, to improve our website and services through data analytics, and — with your consent — to send you relevant marketing communications.

We may also carry out market research through your voluntary participation in surveys.

Direct marketing

You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving the marketing.

We will get your express consent before we share your personal data with any third party for their own direct marketing purposes.

You can ask to stop receiving marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us. If you opt out, you will still receive service-related communications that are essential for administrative or customer service purposes.

Cookies

We do not currently use cookies or similar technologies for analytics, advertising or marketing purposes on our website. If this changes in the future, we will update this privacy policy and provide appropriate information and controls where required.

4. Disclosures of your personal data

We may share your personal data where necessary with:

• Professional advisers, including our legal advisers, accountants, HR advisers and other professional consultants.
• Product development and research partners, where they support us with product development, user research, testing or related activities.
• Technology and service providers, including providers that support our website hosting, IT systems, communications and other business operations. If you join our mailing list, we send your email address to Beehiiv, our email platform, so we can send the updates you requested.
• Directors, non-executive directors and other advisers.
• Investors and prospective investors, where appropriate in connection with fundraising, due diligence or shareholder administration.
• Regulators, public authorities or other third parties, where required by law or necessary to protect our legal rights.
• Third parties in connection with a sale, transfer or merger of parts of our business or our assets.

5. International transfers

Some of our external third-party service providers may process or store personal data outside the UK, including providers that support our website hosting, cloud storage, communications and research activities.

Where we transfer personal data outside the UK, we take steps to ensure an appropriate level of protection is in place in accordance with applicable data protection law, including relying on UK adequacy regulations or approved contractual protections.

6. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

By law we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers, for tax purposes.

In some circumstances we will anonymise your personal data so that it can no longer be associated with you, in which case we may use this information indefinitely without further notice to you.

8. Your legal rights

You have a number of rights under data protection laws in relation to your personal data. You have the right to:

• Request access to your personal data (a "subject access request").
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data in certain circumstances.
• Object to processing of your personal data where we are relying on a legitimate interest.
• Object at any time to the processing of your personal data for direct marketing purposes.
• Request the transfer of your personal data to you or to a third party.
• Withdraw consent at any time where we are relying on consent to process your personal data.
• Request restriction of processing of your personal data.

Exercising your rights

If you wish to exercise any of the rights set out above, please contact us. You will not usually have to pay a fee, though we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data. We try to respond to all legitimate requests within one month.

9. Contact details

If you have any questions about this privacy policy or about the use of your personal data, or you want to exercise your privacy rights, please contact us at:

• Email address: hello@evexdigitalhealth.co.uk

10. Complaints

You have the right to make a complaint to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). Before doing so, please make sure you have first made your complaint to us or asked us for clarification if there is something you do not understand.

11. Changes to the privacy policy

We keep our privacy policy under regular review. This version was last updated on 14/09/2026.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.

12. Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.