CareStrand website privacy notice
Last updated: 9 August 2026
This notice explains how OriginAI Ltd uses personal information submitted through the CareStrand website and demonstration-enquiry forms. CareStrand is currently a synthetic product prototype. This website must not be used to submit patient-identifiable information or confidential clinical records.
Who is responsible for your information?
OriginAI Ltd is responsible for the personal information collected through this website. You can contact us through the CareStrand contact page.
Information we may collect
- Your name, work email address, optional telephone number, organisation, role, enquiry type and the message you choose to submit.
- The page and form through which you contacted us, and any referral or campaign tag associated with the enquiry.
- Technical and security information needed to operate the website, prevent misuse and diagnose faults, such as timestamps and privacy-preserving security logs.
- Information you provide later when discussing a demonstration, partnership or pilot.
Please do not submit patient information, production credentials, confidential clinical documents or special-category information through the public website.
How we use the information
- To respond to your enquiry and arrange a demonstration or discussion.
- To understand interest in CareStrand and improve our product, website and communications.
- To protect the website, prevent spam and investigate security or operational issues.
- To maintain appropriate business, legal and audit records.
Legal basis
We ordinarily process enquiry information because it is necessary for our legitimate interests in responding to prospective users and partners, developing CareStrand and operating a secure website. Where a different basis is required, we will explain it at the relevant time.
Sharing and service providers
We may use carefully selected hosting, security, communications, analytics, automation and professional-service providers. They may process information only for the services they provide to us and under appropriate contractual controls. We do not sell personal information.
International processing
Where a service provider processes information outside the United Kingdom, we will use an appropriate lawful transfer mechanism and safeguards where required.
Stakeholder demonstration accounts
When you request or receive access to the controlled CareStrand demonstration, we also process your name, work email, organisation, job title, selected demonstration perspective, verification and approval status, access expiry, relevant login timestamps and a limited audit record of account administration. We use this information to verify the request, decide whether to grant access, tailor the demonstration, protect the service and communicate about the account.
Stakeholder accounts are created only for the synthetic demonstration. They do not provide WordPress administration access or access to production clinical systems. Access may be refused, revoked or allowed to expire. Account and approval records are ordinarily retained for up to 24 months after the last request or access, unless a shorter period is appropriate or a legal, security or active business reason requires longer retention.
Retention
General enquiry records are ordinarily retained for up to 24 months, unless an active business relationship, legal obligation, dispute or security need justifies a longer period. We review retention and delete information when it is no longer required.
Your rights
Depending on the applicable law, you may have rights to request access, correction, deletion, restriction, objection or portability, and to complain to the relevant data-protection authority. Use the CareStrand contact page to make a request.
Cookies and local storage
The website may use essential WordPress, security and form functionality. We will update this notice and any cookie controls before adding non-essential tracking or advertising technologies.
Changes to this notice
We may update this notice as the website, product and processing arrangements develop. The current version and date will remain available on this page.
The CareStrand clinical workspace uses fictional demonstration data. A separate, organisation-specific privacy framework will be required before any live healthcare deployment.