Legal

Privacy Policy

Website & Company Privacy Notice · Last updated: 11 July 2026 · Replaces the version dated 29 December 2023

This policy is governed by UK GDPR and the Data Protection Act 2018 and explains how we handle personal data collected through this website. Our ICO registration reference is ZC195380.

Who we are

DeepInfinity ("we", "us") is a clinical AI company headquartered in London, with additional teams in Hyderabad and Vijayawada, India. We build AI agents used by hospitals, diagnostic centres and radiology networks to support clinical documentation, registration and reporting workflows.

This policy is governed by UK GDPR and the Data Protection Act 2018. Our ICO registration reference is ZC195380.

What this policy covers — and what it doesn't

This policy explains how we handle personal data collected through this website — for example when you fill in a contact form, book a demo, sign up to our newsletter, or apply for a role with us.

This policy does not cover patient data processed by our clinical AI agents (DeepScribe, DeepConverse, DeepSpeed Rad Agent and others) when deployed inside a hospital or NHS Trust. That processing is governed by the hospital's own privacy notice and by our separate Patient Privacy Notice, available from your care provider or on request.

If you are a DeepInfinity employee, contractor or worker, your data is covered by our internal Employee Privacy Notice, provided to you separately.

What we collect

  • Enquiry & demo requests: name, work email, phone, organisation, role, and the content of your message
  • WhatsApp / contact channel: your phone number and message content, if you contact us that way
  • Newsletter sign-up: email address, and engagement data (opens/clicks) if you subscribe
  • Recruitment: CV, application details, interview notes, references, if you apply for a role
  • Website analytics & cookies: see the Cookies section below for what's used and how to control it

We do not collect special category health data through this website. If you are a patient, we do not process your data here — see "What this policy covers" above.

PurposeLegal basis
Responding to enquiries and demo requestsLegitimate interests (operating our business) / steps taken at your request prior to a contract
Sending you marketing/newsletter contentConsent (or legitimate interests for existing business contacts, where permitted)
Recruitment and hiringSteps taken at your request prior to a contract / legitimate interests
Website security and fraud preventionLegitimate interests
Analytics cookiesConsent, via our cookie banner (except where exempt under current PECR rules)

Who we share it with

  • Hosting and infrastructure providers (cloud hosting, email delivery, CRM)
  • Analytics providers, limited to what your cookie preferences allow
  • Recruitment tooling providers, if you apply for a role
  • We do not sell your personal data, and we do not share it with third parties for their own marketing purposes

International transfers

Where our Hyderabad or Vijayawada teams access data collected via this website (for example, to respond to an enquiry or process an application), this is protected by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

  • Enquiry/demo data: duration of the relationship plus 3 years
  • Newsletter data: until you unsubscribe, reviewed periodically for inactivity
  • Recruitment data (unsuccessful applicants): 12 months
  • Full detail is in our internal Data Retention Policy, available on request

Cookies

We use essential, performance and functional cookies. You can accept all, reject non-essential cookies, or manage your preferences at any time via Cookie Settings in the site footer.

Your rights

You have the right to:

  • Access, correct, or ask us to delete your personal data
  • Restrict or object to certain processing
  • Ask for your data in a portable format
  • Withdraw consent at any time, where consent is our basis (e.g. unsubscribing from our newsletter)

To make a complaint about how we've handled your data, please use our Data Protection Complaints form — we'll acknowledge it within 30 days. If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ico.org.uk).

To make a data subject rights request (access, erasure, etc.), please use our Data Subject Rights Request form or email [email protected].

Children

This website is not directed at children, and we do not knowingly collect personal data from children through it.

Changes to this policy

We'll update this page when our processing changes, and update the "last updated" date above. Material changes will be highlighted on this page for 30 days.

Contact us

Data protection queries: [email protected]

Registered office: 1 Benton Road, Ilford, IG1 4AT, United Kingdom.