Privacy Policy

1. Overview & Data Controller

Xana Medtec Ltd (“we”, “our”, or “us”) is committed to protecting and respecting your personal privacy. This Privacy Notice describes how we collect, store, handle, and process personal data when you visit our website, submit inquiries, or utilize our clinical diagnostic referral services.

The Data Controller is Xana Medtec Ltd, registered in England and Wales, with principal offices located at Bartle House, Oxford Court, Manchester, M2 3WQ. You may contact our Data Protection Officer at info@xanamedtec.com.

2. Information We Collect

We may collect and process the following categories of information:

• Contact Information: Name, professional title, business organization, email address, and postal address.
• Clinical Inquiries: Diagnostic screening requests, device demonstration bookings, and distribution partnership proposals.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, and operating system.

3. How We Use Your Data

Your information is used strictly under lawful bases (Article 6 UK GDPR):

• To fulfill commercial contracts and respond to partnership inquiries (Contractual necessity).
• To coordinate clinical pathology appointments and sample collections (Legitimate interests).
• To comply with statutory healthcare records standards and regulatory obligations.

4. Security & Data Retention

We implement industry-standard encryption, SSL transport security, and strict access controls. Diagnostic data and patient inquiries are held in accordance with NHS Records Management Code of Practice standards and are never sold to third-party commercial marketing platforms.

5. Your Legal Rights

Under UK GDPR, you retain the right to access, rectify, erase, or restrict processing of your personal data. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.