This website
This page and our company page carry no analytics, no advertising, no cookies and no third-party scripts. We do not track visitors. Standard server logs record requests for security and reliability purposes and are retained briefly.
If you contact us
When you email us we hold your message and contact details to answer it and to manage any resulting business relationship, on the basis of our legitimate interest in responding to enquiries and, where a contract follows, to perform that contract. We do not use them for marketing lists and we do not share them. Enquiry correspondence is kept while the enquiry or relationship is live and for up to two years after our last contact; contract records are kept for six years after the contract ends, as company law requires.
The platform we operate
mbrace Healthcare Ltd licenses the Theatre Operations Platform to healthcare organisations. Where an organisation uses it, that organisation is the data controller for the information held in its instance and we act as its processor, under a written agreement meeting UK GDPR Article 28. Each organisation runs a dedicated, isolated instance. We do not process that data for our own purposes, we do not use it for analytics, and we do not train models on it. Instances are hosted with a provider in the EU under the UK adequacy decision, with a UK region committed before any organisation goes live; the current list of sub-processors is available on request.
If you are a member of staff at one of those organisations and want to know what is held about you, your employer is the controller — the platform provides you with a self-service export of your own record, and your employer can answer any wider request.
Your rights
You have the right to ask for a copy of the personal data we hold about you, to have it corrected or erased, to object to processing, and to complain to the Information Commissioner’s Office (ico.org.uk). Write to us at the address below and we will respond within one month.