Privacy Policy

Aksh Health Ltd is the data controller for personal data processed through the Aksh Health platform and this website. For privacy enquiries, contact us at legal@akshhealth.com.

Depending on how you use Aksh Health, we may process:

• Account details such as name, email address, role, and organisation
• Authentication and session data required to secure your account
• Clinical workflow data you submit or review within the platform
• Health data classified as special category data under UK GDPR Article 9
• Technical logs, audit records, and security events
• Organisation enquiry details submitted via our access request form

Production deployments process patient data under organisation agreements, with role-based access, audit logging, and UK GDPR Article 9 safeguards for special category health data.

We process personal data where necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests in operating a secure clinical platform, or with your consent where required.

Health data is special category data under UK GDPR Article 9. We process it only where a valid condition applies, which may include explicit consent, provision of health or social care, or other lawful bases agreed for your deployment. We apply purpose limitation, data minimisation, and access controls so only authorised users can view data required for their role.

• Provide, secure, and maintain your account and authenticated sessions
• Deliver clinical workflow features with human review before outputs are finalised
• Record audit trails of AI recommendations and clinician decisions
• Respond to organisation enquiries and support requests
• Improve reliability, safety, and performance of the platform
• Meet regulatory, security, and clinical safety obligations

Aksh Health is a clinical decision support tool. It does not provide medical advice and does not replace professional clinical judgement.

We use essential cookies to keep you signed in and to protect the platform. We do not currently use analytics cookies. Optional analytics, if enabled in future, will only run with your consent. You can manage preferences using the banner on this site.

For a full list of cookies and storage we use, see our Cookie Policy.

We use infrastructure and service providers that process data on our instructions, including hosting, database, and email delivery providers. We require appropriate contractual safeguards and do not sell personal data.

Where your organisation connects Aksh Health to clinical systems, data sharing is governed by your organisation's agreements and deployment configuration.

We design for UK and EU data residency appropriate to NHS workloads. Where data is transferred outside the UK, we use appropriate safeguards such as standard contractual clauses or equivalent protections.

We retain personal data only for as long as needed for the purposes described in this policy, including legal, audit, and clinical safety requirements. We apply encryption in transit, access controls, role-based permissions, and monitoring to protect data.

Under UK GDPR you may have rights to:

• Access your personal data
• Rectify inaccurate data
• Erase data in certain circumstances
• Restrict or object to processing in certain circumstances
• Data portability where applicable
• Withdraw consent where processing is based on consent

To exercise your rights, contact legal@akshhealth.com. You may also complain to the Information Commissioner's Office (ICO).

We may update this policy from time to time. Material changes will be reflected on this page with an updated date. Continued use of the platform after changes take effect constitutes acceptance of the revised policy where permitted by law.