Privacy Policy

MediBridge Health ("MediBridge", "we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, protect and share personal information when you visit our website, join our waitlist, contact us, request information, or use MediBridge services.

MediBridge is built around a simple principle: Your health information belongs to you. Where our services process health information, we apply appropriate safeguards because health information is considered a special category of personal data under applicable data protection laws, including the EU General Data Protection Regulation ("GDPR").

1. Who We Are

MediBridge Health is responsible for operating the MediBridge website and services.

Legal entity: MEDIBRIDGE TECH LTD
Registered address: 124-128 City Road London, UK EC1V 2NX
CRN: 17352032
Email: info@medibridge.tech
Website: https://medibridge.tech/

If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us at info@medibridge.tech.

Where required by applicable law, MediBridge will appoint or identify an appropriate Data Protection Officer or privacy contact.

2. Information We Collect

The information we collect depends on how you interact with MediBridge.

Information You Provide

When you join our waitlist, contact us, request a demonstration, submit an enquiry, or communicate with us, we may collect:

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

Non-essential cookies and similar technologies will be used in accordance with applicable law and your privacy choices.

We Collect Through the Mobile Application

When you use the MediBridge mobile application, we also collect:

  • Family profile details: for each person whose records you store, their name and relationship to you, and optionally their date of birth, gender, blood type and national health identifier. National health identifiers are encrypted with a key held in a hardware-backed key vault and are not readable by MediBridge staff.
  • Device notification token: if you enable push notifications, a token issued by Apple or Google, used solely to deliver notifications to your device. It is not used for advertising or analytics.
  • Subscription status: MediBridge Premium is billed through the Apple App Store, or through our payment processor on other platforms. We receive confirmation of whether your subscription is active. We never receive or store your card details.
  • Account contact details: your name, email address and, where you provide one, your telephone number. Your password is stored only as a cryptographic hash and is never retrievable by us.
  • 3. Health Information

    MediBridge is designed to help individuals keep their health information connected, organised and accessible. Depending on the services you use, this may include:

    Health information is considered special category personal data under the GDPR and is subject to additional protection.

    We do not collect health information simply because you visit our website. Where you choose to provide health information through a MediBridge service, that information will be processed in accordance with the applicable service terms, privacy notices and applicable law.

    Where applicable law requires explicit consent or another specific legal basis for processing health information, we will rely on the appropriate legal basis.

    4. How We Use Your Information

    We may use personal information to:

    We will process personal information only for legitimate and specified purposes and in accordance with applicable data protection laws.

    5. Legal Basis for Processing

    Where GDPR applies, we process personal information only where we have an appropriate legal basis. Depending on the circumstances, this may include:

    Where processing is based on your consent, you may withdraw your consent at any time.

    For health information and other special categories of personal data, we will also rely on an applicable condition permitted under applicable data protection law.

    6. Marketing Communications

    If you choose to receive communications from MediBridge, we may contact you about:

    You can unsubscribe from marketing communications at any time by using the unsubscribe option included in our communications or by contacting info@medibridge.tech.

    Where consent is required, we will obtain it in accordance with applicable law.

    7. Cookies and Similar Technologies

    Our website may use cookies and similar technologies for:

    Essential functionality

    These technologies are necessary for the website to operate properly.

    Analytics

    These technologies help us understand how visitors use our website and improve its performance.

    Marketing and advertising

    Where permitted and where you have provided the required consent, these technologies may help us measure advertising performance and understand the effectiveness of our marketing.

    Where required by law, we will obtain consent before using non-essential cookies or similar technologies.

    You can manage your preferences through our cookie settings.

    8. Advertising and Third-Party Tracking

    We may use third-party services such as Meta, LinkedIn, Google and other analytics or advertising providers to understand website activity and measure the effectiveness of our marketing.

    Where applicable, these technologies will be implemented in accordance with applicable privacy and cookie requirements.

    MediBridge does not intentionally provide health information to advertising platforms for advertising purposes.

    We do not use health information to create advertising audiences or personalise advertising based on an individual's medical condition or health status.

    Our website tracking and advertising integrations are designed to minimise the risk of sensitive information being transmitted through advertising technologies.

    9. How We Share Information

    We do not sell your personal information.

    We may share personal information with trusted service providers that help us operate our website and services, including:

    Where third parties process personal information on our behalf, we will take appropriate steps to ensure that suitable data protection and confidentiality obligations are in place.

    We may also disclose information where necessary to comply with applicable law, respond to lawful requests, protect our rights, or prevent fraud or security threats.

    10. Your Health Data Is Not Our Product

    MediBridge is designed to help individuals manage and control access to their own health information.

    We do not sell your health information.

    We do not use your health information to sell advertising.

    We do not provide your health information to third parties simply because you use MediBridge.

    Where MediBridge allows you to share information with a doctor, healthcare provider, family member, insurer or another recipient, you control what information is shared and with whom, subject to the functionality and terms of the relevant service.

    11. AI and Automated Technologies

    Certain MediBridge features may use artificial intelligence or automated technologies to assist with functions such as organising, extracting, translating or structuring information.

    Where such functionality is available, we will provide appropriate information about how the relevant feature processes data.

    MediBridge does not replace medical professionals and does not provide medical diagnosis or medical advice.

    Where you choose to use an AI-enabled feature, additional information may be provided within the relevant product or service.

    12. International Data Transfers

    MediBridge may use service providers located in countries outside the country in which you live.

    Where personal information is transferred outside the European Economic Area, we will take appropriate measures to ensure that the transfer complies with applicable data protection law.

    Depending on the circumstances, these measures may include:

    Additional information about relevant international transfers may be provided where required by law.

    13. Data Retention

    We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

    Retention periods may vary depending on the type of information and the purpose for which it is processed.

    When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

    14. Security

    We use appropriate technical and organisational measures designed to protect personal information against:

    These measures may include access controls, authentication, encryption, security monitoring and other safeguards appropriate to the information being processed.

    However, no method of transmission or storage over the internet can be guaranteed to be completely secure.

    15. Your Privacy Rights

    Depending on your location and applicable law, you may have the right to:

    Access

    Request a copy of the personal information we hold about you.

    Correction

    Ask us to correct inaccurate or incomplete information.

    Deletion

    Request deletion of your personal information in certain circumstances.

    Restriction

    Request that we restrict processing of your information in certain circumstances.

    Objection

    Object to certain types of processing.

    Data portability

    Request your personal information in a structured, commonly used and machine-readable format where applicable.

    Withdraw consent

    Withdraw consent where processing is based on consent.

    These rights are subject to applicable legal limitations and exceptions.

    To exercise your rights, contact: info@medibridge.tech

    We may need to verify your identity before processing your request.

    16. Children

    MediBridge does not knowingly collect personal information from children where such collection is prohibited by applicable law.

    If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at info@medibridge.tech.

    17. Third-Party Websites

    Our website may contain links to websites or services operated by third parties.

    We are not responsible for the privacy practices, content or security of third-party websites.

    We encourage you to review the privacy policy of any third-party website you visit.

    18. Privacy by Design

    Privacy and user control are central to how MediBridge is designed.

    Our approach is intended to support:

    Your data. Your control.

    Where our services allow you to manage or share health information, we aim to provide appropriate controls over access and sharing.

    We continually review our technical and organisational measures as our services develop.

    19. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes to:

    When we make changes, we will update the Last Updated date at the top of this page.

    Where required by applicable law, we will provide additional notice or obtain consent before making material changes.

    20. Contact Us

    If you have questions about this Privacy Policy, our data practices, or your privacy rights, please contact us:

    MediBridge Health
    Legal entity: MEDIBRIDGE TECH LTD
    Registered address: 124-128 City Road London, UK EC1V 2NX
    CRN: 17352032
    Email: info@medibridge.tech
    Website: https://medibridge.tech/

    21. Complaints

    If you are located in the European Economic Area and believe that your data protection rights have not been respected, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement.