Privacy Policy
How Epistamai Bio handles personal data on this website and in our services.
Who we are
Epistamai Bio (“we”, “us”) provides precision oncology services: gathering and re-analysing a patient’s records, genomics, imaging and blood tests, and presenting them in a single dashboard to support the decisions of the patient’s treating clinicians. For any question about this policy or your data, contact us at info@epistamaibio.com.
We are the controller of the personal data described in this policy. We handle personal data in line with the UK General Data Protection Regulation and the Data Protection Act 2018, and the EU General Data Protection Regulation where it applies.
This website
Our website is informational. It does not use advertising cookies, analytics or tracking, and it has no forms that collect personal data.
- Hosting. The site is hosted by Netlify. Like any web host, Netlify processes technical data such as your IP address, browser type and the pages requested, so that the site can be delivered and protected from abuse.
- Fonts. The site loads the DM Sans typeface from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google when a page loads.
- Browser storage. The site does not set cookies. It may keep small display preferences in your own browser; these never leave your device.
When you contact us
If you email us, we receive your name, email address and whatever you choose to tell us. We use this only to reply and, if you go on to work with us, to set up our services. Our email is provided by Google Workspace. We keep correspondence for as long as needed to deal with your enquiry and any resulting relationship, and then delete it.
Please do not send medical records or other health information by email before we have agreed with you how they should be shared. We will provide a secure route.
Patients and clients of our services
If you engage us, we will process health information, which is special category data. This can include medical reports, pathology, scans, laboratory and genomic data, treatment history and correspondence with your clinical team.
- Agreement and consent. We process this information only under a written agreement with you, or with the person or organisation acting for you, and with your explicit consent. You can withdraw consent at any time, although this will not affect work already carried out.
- Purpose. We use it to provide the services you have asked for: re-analysis, building and updating your dashboard, preparing reports for your clinicians, and answering your questions.
- Who sees it. Our team, the clinicians and people you authorise, and the specialist service providers we use to store and analyse data. These providers act on our instructions under data processing agreements.
- What we never do. We do not sell personal data or use it for advertising, and we do not use your data for research or any other purpose unless you have agreed to it separately.
- Security. Access is restricted to people who need it, data is protected in transit and at rest, and dashboards are behind access control.
Our agreement with you describes how long your information is kept and what happens to it when the service ends.
International transfers
Some of our providers, including Netlify and Google, may process data outside the UK and the European Economic Area. Where this happens, we rely on recognised safeguards such as adequacy decisions, the UK International Data Transfer Agreement or Addendum, and standard contractual clauses.
Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent. To exercise any of these, email info@epistamaibio.com. We will respond within one month.
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live.
Changes
We may update this policy from time to time. The date at the top shows when it was last changed.