Privacy Notice
1. Who we are
Diagnovis Technologies Limited ("we", "us") is a company incorporated in Uganda, registration number 80034588614594, with its registered office in Kampala. We build DiagnovisAI, an assistive artificial-intelligence platform that supports radiologists in reporting medical imaging.
We are registered with the Personal Data Protection Office and handle personal data under the Data Protection and Privacy Act, Cap. 97 and the Data Protection and Privacy Regulations, 2021. For personal data collected through this website, we are the data controller.
2. What this notice covers
This notice covers personal data collected through diagnovisai.com: what you give us through the enquiry form, and what our web server records when you visit.
It does not cover medical imaging or patient records.
Where DiagnovisAI is used in a hospital, the hospital is the controller of that patient data and holds it in trust for the patient. We act as processor or joint controller under a written agreement with the hospital. If you are a patient and wish to know how your imaging or report was handled, or to exercise a right over it, contact the hospital that provided your care — it holds the primary clinical record and is the correct first point of contact. We assist hospitals with such requests but cannot act on them directly.
Employees and job applicants receive separate notices. This website is intended for healthcare institutions and professionals; it is not directed at children and we do not knowingly collect their data through it.
3. What we collect
From the form: your name, email address, the institution you represent, and the content of your message.
Automatically: standard web server logs — IP address, browser and device type, pages requested, date and time.
No cookies. This site sets no cookies and makes no requests to any third party. There is no analytics, no advertising or tracking technology, no social media plug-in, no embedded third-party content and no externally hosted font. Every resource is served from our own domain, so no third party learns that you have visited. Our Cookie Notice sets this out in full.
Do not send us health information. The form is not a clinical channel. Do not include details of your own health, and do not include anything identifying a patient — no names, identification numbers, dates of birth, clinical details or images. If you do, we will delete it and direct you to an appropriate clinical channel.
4. Why we use it, and on what legal basis
We use what you submit for one purpose: to respond to your enquiry and, where relevant, to arrange and follow up a demonstration of DiagnovisAI. We use server logs to operate and secure the site and to diagnose faults.
Our legal basis is your consent, given when you tick the box on the form. You may withdraw it at any time using the contact details in section 9. Withdrawal does not affect anything we lawfully did beforehand.
We do not send you marketing unrelated to your enquiry. We do not sell your information or share it for anyone else's marketing. We do not use it to develop or train any artificial-intelligence model, and it never enters our clinical systems or any dataset used for model development.
5. Who receives it, and where it goes
We share personal data only with the providers who host this website and deliver our email. Each processes it on our instructions, under a written agreement, and not for its own purposes. We may also disclose data where the law requires it, or in response to a lawful request from a court, regulator or law-enforcement authority — and no more than is required. We share it with no one else.
This website is hosted outside Uganda, by Hostinger International Ltd, on servers located in the United Kingdom. Information you submit is therefore transferred out of the country. Cross-border transfers are restricted under section 19 of the Act and regulation 30 of the Regulations, and Uganda publishes no adequacy list.
We rely on your consent for this transfer, and we are telling you about it here so that your consent is informed. If you would rather your information were not transferred outside Uganda, please contact us by email or telephone using the details in section 9 instead of using the form.
This concerns website enquiries only. Patient imaging data is not processed through this website, is held within Uganda, and is governed by our arrangements with the relevant hospital.
6. How long we keep it
Enquiries: twelve months from our last contact with you about the matter. After that we delete the correspondence, or anonymise it so it can no longer be linked to you. If your enquiry becomes a commercial relationship, the records of that relationship are kept under the terms of the agreement between us instead.
Server logs are kept in accordance with our hosting provider's standard practice, and used only for security, fault diagnosis and service operation.
7. How we protect it
The site is served entirely over an encrypted connection (HTTPS). Enquiries are delivered to a monitored company mailbox — they are not written to a database or stored on the web server — and access is limited to the people who need it to respond. No transmission over the internet is completely secure, so please do not send us sensitive information through this website.
8. Your rights, and how to complain
Under Part IV of the Act you may: ask what personal data we hold about you and receive a copy; have it corrected; ask us to delete it; object to or restrict our processing; receive it in a portable form where technically possible; withdraw consent at any time; and complain to the Personal Data Protection Office. Exercising these rights is free and we will not treat you differently for it.
To exercise a right, contact us using the details in section 9. We will acknowledge within seven (7) days and respond substantively within thirty (30) days; if your request is complex we will tell you before that period expires and explain why. We may need to verify your identity first. For patient data, see section 2 — the hospital handles the request and we assist.
If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You may also complain to the Personal Data Protection Office at any time, without coming to us first:
Personal Data Protection Office NITA-U Offices, Palm Courts, Plot 6 Lumumba Avenue, Kampala, Uganda info@pdpo.go.ug · www.pdpo.go.ug
9. Contact us, and changes to this notice
The Data Protection Officer Diagnovis Technologies Limited Kampala, Uganda Email: hello@diagnovisai.com Telephone: +256 200 917 813
Our Data Protection Officer oversees how we handle personal data and answers questions about it.
We review this notice at least annually and whenever our handling of personal data materially changes. The date at the top shows when it was last updated; we will make any significant change clear on this page.