Legal
Privacy Policy
What we collect when you visit or contact us, how we use it, and how to make a privacy request.
Last updated
Who this policy covers
This policy explains how Tensorgical handles personal information when you visit tensorgical.com, submit an enquiry through our contact form, or correspond with us about an enquiry.
Tensorgical determines why and how the personal information described in this policy is used. You can contact us about your information at contact@tensorgical.com.
This policy covers the public website and its enquiry workflow. It does not govern patient data, clinical deployments, or research datasets processed under a separate agreement.
Information we collect
When you contact us
Our contact form collects your name, email address, organisation, enquiry topic, and message. You may also provide your role. If you email us directly or continue a conversation, we receive the information included in that correspondence.
The form identifies required fields. Without those details, we may be unable to understand or respond to your request. Providing your role is optional.
When you visit the website
Our hosting infrastructure processes technical information needed to deliver and protect the website, such as your IP address, requested page, browser information, timestamps, and request or error logs.
We use Vercel Web Analytics to understand which pages are visited and how visitors reach the website. It provides aggregate statistics about page views, referrers, approximate location, browser, operating system, and device type. We remove query strings and URL fragments from the page addresses sent to analytics. We do not send names, email addresses, or message contents from the contact form to analytics.
The enquiry endpoint also uses a hashed IP address for a temporary rate-limit counter to reduce repeated submissions. A hash is a transformed identifier; it is not treated as anonymous information.
How and why we use it
- Responding to enquiries. We use your contact details and message to answer questions, discuss collaborations, and arrange requested demonstrations.
- Operating and protecting the website. Technical information helps us deliver pages, investigate errors, and limit misuse.
- Understanding website use. Aggregate traffic statistics help us assess which pages are useful and improve the website.
- Meeting legal requirements. We may retain or disclose information where required by law or reasonably necessary to establish, exercise, or defend a legal claim.
Where EU or UK data protection law applies, our legal bases are our legitimate interests in responding to relevant enquiries, understanding website use, and operating a secure website; taking steps at your request before entering into a contract, where applicable; and compliance with legal obligations.
Submitting a form does not subscribe you to a newsletter. We do not sell enquiry information, use it for targeted advertising, or use website enquiries to train our medical models. We do not make decisions with legal or similarly significant effects about you solely through automated processing.
Service providers and sharing
We use the following services to operate this website and handle enquiries:
- Vercel hosts the website, processes requests including form submissions, and provides Web Analytics. See Vercel’s privacy notice and its Web Analytics privacy information.
- Resend delivers form submissions as email to our contact inbox. It processes the contact details and message you submit, together with delivery information. See Resend’s privacy policy.
- Our email service provider stores incoming enquiries and replies in our correspondence mailbox.
People handling your enquiry may access the information needed to respond. We may also share information with professional advisers or public authorities where necessary for legal advice, a legal obligation, or a legal claim.
We do not publish form submissions or provide them to advertising networks.
International processing
Our service providers operate internationally. Website and enquiry information may be processed outside your country, including in the United States.
Transfer protections depend on the provider, the countries involved, and applicable law. Our providers describe their transfer arrangements in their privacy notices and data protection terms. You can ask us for information about the arrangements relevant to your enquiry by emailing contact@tensorgical.com.
How long information is kept
Enquiries are delivered to our email inbox rather than saved in a separate website database. We keep correspondence for the time needed to handle the enquiry and related follow-up. The appropriate retention period depends on whether the conversation is ongoing, whether it leads to a business or research relationship, and any applicable record-keeping requirements or legal claims.
Resend currently retains email and delivery-log data for 30 days on the plan we use. Copies delivered to our mailbox are separate from Resend’s delivery records. See Resend’s retention information.
Vercel discards its analytics visitor-session identifier after 24 hours. Aggregate analytics reports have a one-month reporting window on our current plan; this window is not a promise that all underlying data is deleted at that point. See Vercel’s reporting-window information.
The website’s rate-limit counters expire after 15 minutes. Hosting logs and service-provider records follow their applicable retention settings and legal requirements. You can request deletion of information we hold; some records may need to be retained for legal reasons.
Your rights and choices
Depending on the law that applies to you, you may have rights to access your personal information, correct inaccuracies, request deletion, restrict processing, and receive certain information in a portable format. These rights can be subject to legal conditions and exceptions.
Your right to object. Where processing relies on legitimate interests, you may object for reasons connected with your particular situation. Contact us to explain your objection.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of earlier processing.
To exercise a right, email contact@tensorgical.com. We may need information proportionate to the request to verify your identity. We will respond within the period required by applicable law.
You may also complain to the data protection authority responsible for your location. Where the GDPR applies, this can be the authority in the EU or EEA country where you live or work, or where you believe an infringement occurred. You do not have to contact us first to make a complaint.
Security and sensitive information
The website uses HTTPS, server-side form validation, and measures to limit abusive submissions. No online system can guarantee absolute security.
The public contact form is not intended for patient information, medical records, or other sensitive personal information. Please do not send that material through the website. Clinical or research data sharing must be arranged separately through an appropriate agreement and channel.
The website is intended for professional and research audiences and is not directed at children. If you believe a child has provided personal information through it, please contact us so we can address it.
Updates and contact
We will update this policy when our website practices or applicable requirements change. The date at the top identifies the current version. Where the law requires additional notice or consent for a change, we will provide it.
For questions about this policy or a request concerning your personal information:
Tensorgical
contact@tensorgical.com