Privacy Policy

1. Introduction

AlphaConnections Medical Limited ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, products, and services. We are registered in Ireland (Company Number: 771994) with our registered office at 77 LOWER CAMDEN STREET, DUBLIN, D02 XE80, Ireland.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, job title, organisation name.
• Contact Data: Email address, phone number, postal address.
• Technical Data: IP address, browser type and version, time zone setting, operating system, and device information.
• Usage Data: How you use our website, products, and services — including pages visited, features used, and time spent.
• Communication Data: Records of correspondence, enquiries, and feedback submitted through our contact forms or email.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide, maintain, and improve our products and services.
• To respond to your enquiries, demo requests, and support needs.
• To send you relevant information about our products, services, and industry insights (with your consent where required).
• To comply with legal obligations and regulatory requirements.
• To analyse website usage and improve user experience.
• To protect the security and integrity of our systems and data.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases: (a) your consent, which you may withdraw at any time; (b) the performance of a contract with you or to take steps at your request before entering a contract; (c) our legitimate interests, provided these do not override your rights and freedoms; and (d) compliance with legal obligations to which we are subject.

5. Data Storage and Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Our platform is ISO 27001 certified — the international gold standard for information security management. Data is encrypted at rest using AES-256 and in transit using TLS 1.3. We regularly conduct penetration testing and security audits. Access to personal data is restricted to authorised personnel on a need-to-know basis.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data; the potential risk of harm from unauthorised use or disclosure; the purposes for which we process it; and applicable legal requirements.

7. Your Rights

Under data protection law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request restriction of processing in certain circumstances.
• Right to Data Portability: Request transfer of your data to another organisation.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at the details provided below. We will respond within one month of receiving your request.

8. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and understand where our visitors come from. You can control cookie preferences through your browser settings. Essential cookies necessary for website functionality cannot be disabled. For non-essential cookies (analytics, marketing), we will obtain your consent where required by law.

9. Third-Party Services

We may use third-party service providers to help us operate our business and deliver our services (e.g., cloud hosting, analytics, email communication). These providers are contractually obligated to protect your data and process it only in accordance with our instructions. We do not sell your personal data to third parties.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission or ensuring the recipient country has an adequacy decision.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Where changes are material, we will provide a more prominent notice.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: