Privacy and data use

Who we are

Orbixa Technologies Ltd is the proposed data controller for reviewer information collected through this site. Andrew Hardman is the interim internal owner for reviewer data handling and administration.

This is an implementation assumption. A concluded lawful basis and a completed data protection impact assessment are required before this platform is used at scale, and neither is yet in place. We would rather say so than imply an assurance we do not hold.

What we collect

• Name, organisation and role category, as supplied when your invitation was created.
• Email address, only where you agreed to give one. The review works without it.
• Questionnaire answers, including free text you choose to write.
• Which demonstrator steps you viewed, and how long the review took.
• Your four permission choices, each recorded separately with the version of the text you were shown.

What we do not do

• We do not send your free text, name or email to any third-party analytics service.
• We do not write invitation tokens, session credentials or free text into application logs.
• We do not treat your feedback as evidence that the product works.
• We do not quote you, name you or name your organisation without the specific permission for that.
• We collect no patient data of any kind. The demonstrator uses synthetic records only.

Retention and deletion

Reviewer records are retained for twenty-four months from submission, or until you ask for removal. On withdrawal your identifying details are cleared and any quotation permission is revoked; anonymous counts remain so that published sample sizes stay accurate.

Your rights and how to reach us

To access, correct, withdraw or delete your information, email the contact form. You may also complain to the Information Commissioner’s Office.