Privacy Notice
OnionAI Ltd
Last updated
Please do not send us health information
This notice explains how OnionAI Ltd uses personal information collected through our public website at onionai.app. It covers joining the waitlist, contacting us, the emails we send, and optional website analytics.
The OnionAI platform is not open yet. Before it opens, we will publish a separate privacy notice covering the platform and any health information you choose to record in it.
Who we are
OnionAI Ltd is the controller of the personal information described in this notice. We are registered in England and Wales, company number 15378280, at 35 Sandyhurst Lane, Ashford, Kent, TN25 4NS.
You can contact us at info@onionai.app.
What we collect
- Waitlist information
- Your first and last name, email address, optional phone number, role and, where relevant, your organisation, patient context, job title, clinician group, investor stage, partner type or press deadline.
- Your choices
- Whether you separately agree to receive OnionAI marketing or to be contacted about early testing, together with when you made those choices and the wording version shown to you.
- Contact information
- Your first and last name, email address, optional phone number and organisation, what your message is about, the message itself, and its contact reference.
- Source information
- If you follow a campaign link, we may save its source with your waitlist entry or contact message so we can understand which outreach led to the enquiry.
- Technical and security information
- Limited device, browser, page and interaction information, submission timestamps, and transient anti-abuse signals used to protect our forms and website.
- Analytics information
- If you consent, we collect page views, entry pages, selected calls to action, form progress and outcomes, a random device identifier, a per-tab session identifier, and limited device context. We do not put names, contact details, message text, health information or form answers into analytics events.
Health information sent by mistake
Please do not include information about your health in a message to us. If you do, access will be limited to staff responsible for handling your enquiry. We will use it only as necessary to manage your message, promptly redact or delete the health information, and retain only the remaining non-health information under our normal retention period.
We do not use information accidentally submitted through the public website to provide medical advice, build a health profile, train artificial intelligence, conduct research or personalise a service.
Why we use your information and our legal basis
| What we do | Information used | Legal basis |
|---|---|---|
| Manage the waitlist, acknowledge your request and tell you when access becomes available | Waitlist and contact information | Legitimate interests: preparing our public launch and responding to your request |
| Understand who is interested in OnionAI and the source of an enquiry | Role, organisation, context and source information | Legitimate interests: planning our launch and evaluating outreach |
| Send OnionAI news or marketing where you opted in | Name, email address and marketing choice | Consent |
| Contact you about early testing where you opted in | Name, contact details, context and early-tester choice | Consent |
| Route, answer and acknowledge an enquiry | Contact information and message | Legitimate interests: responding to the person who contacted us |
| Protect and troubleshoot the website and forms | Technical, security and submission information | Legitimate interests: keeping our website and users secure |
| Understand and improve website use | Analytics information | Consent |
| Handle privacy requests and legal requirements | Information needed for the request or requirement | Legal obligation |
Where we rely on legitimate interests, we consider the effect on you and do not use your information where your rights and interests outweigh ours.
Marketing and early-testing choices
Marketing and early-testing invitations are separate, optional choices and are not selected in advance. You can withdraw either choice using the unsubscribe link in an email or by emailing info@onionai.app. Withdrawal does not affect processing that took place before it.
We do not sell your information or share it with anyone for their own marketing.
How long we keep it
| Information | Retention |
|---|---|
| Waitlist details | Up to 24 months from your most recent waitlist submission or update |
| Contact messages | Up to 24 months after the message is received |
| Website analytics | Up to 14 months |
| Marketing and early-testing preferences | Until you withdraw your choice, subject to the retention periods above |
| Unsubscribe link codes | Up to 24 months after the code is created |
| Suppression record | A minimal record is kept indefinitely after you unsubscribe so we can continue to respect your choice |
We may keep information longer where the law requires it or where needed for legal claims. Health information accidentally included in a message is deleted as described above rather than kept for the normal message-retention period.
Keeping your information safe
We use appropriate technical and organisational safeguards, including encryption in transit and at rest and access limited to people who need the information for their work. OnionAI Ltd currently holds Cyber Essentials Plus certification, which includes independent technical verification.
Your rights
Depending on the circumstances, you may have rights to:
- access the personal information we hold about you;
- correct information that is incomplete or inaccurate;
- ask us to delete information or restrict how we use it;
- object to uses based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent at any time.
Some rights have legal limits and may not apply in every situation.
There is normally no charge. We usually respond within one month, although the law allows more time for certain complex or multiple requests. Email info@onionai.app or use the contact form and choose Privacy or data request.
Children and other websites
The website is not directed at children and we do not knowingly collect information about anyone under 18.
Our website links to external sites, including social media pages. We do not control how those sites use information. Please read their privacy notices when you leave OnionAI.
Questions, complaints and changes
If you have a question or are unhappy with how we handled your information, contact info@onionai.app. You can also complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk.
We keep this notice under review. Before the OnionAI platform opens, we will publish a separate notice covering it and bring that notice to the attention of people joining the platform.