Privacy Policy
Last updated:
Draft for legal review. This text is a provisional template prepared during product development. It must be reviewed and approved by qualified legal counsel before the site is used in production.
1. Data controller
The data controller for this website is Druggx.ai ("we", "us"). [Insert legal entity name, registered address and, where applicable, company registration number.] You can contact us at hello@druggx.ai.
2. What data we collect
We only collect the information you choose to provide through the early-access form:
- name, organization, work email address and role;
- your area of interest and the message you write to us;
- the date and time of your submission.
We do not request and do not want to receive clinical data, patient data, health data or scientific files through this website. Please do not include such information in the form.
Our hosting provider may process technical data (such as IP address, browser type and request logs) that is necessary to deliver the website securely. Optional analytics cookies are used only with your consent (see the Cookie Policy).
3. Why we process your data and on what legal basis
- Responding to your request (early-access, partnership or general enquiries): processing is necessary to take steps at your request before entering into an agreement (Art. 6(1)(b) GDPR) and/or based on our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
- Website security and operation: our legitimate interest in keeping the site secure and available (Art. 6(1)(f) GDPR).
- Analytics: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. How long we keep your data
Enquiry data is kept for as long as necessary to handle your request and, where a collaboration follows, for the duration of that relationship. [Insert concrete retention period, e.g. 24 months from the last contact.] Technical logs are retained by our hosting provider for a limited period for security purposes.
5. Who receives your data
Your data may be processed by service providers acting on our behalf, such as our cloud hosting provider (Google Cloud), email provider and, if configured, a customer-relationship tool. [List the actual processors used in production.] Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. Your rights
Subject to applicable law, you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability and to withdraw consent at any time. You can exercise these rights by writing to hello@druggx.ai. You also have the right to lodge a complaint with your supervisory authority (in Italy, the Garante per la protezione dei dati personali).
7. Changes to this policy
We may update this policy as the product and the website evolve. The date at the top of this page indicates the latest revision.