Skip to content

Legal and privacy

Privacy policy

This policy explains the categories of personal information Shiora may process, why it is used, when it may be shared, and the choices available to you.

Last updated December 2024

The information and rights that apply can vary by service, location, and relationship. Product notices and consent prompts provide additional context at the point of collection.

Scope

This policy applies to Shiora websites and services that link to it. A partner, clinician, employer, health plan, or other organisation may provide a separate notice for information it controls.

Information we may collect

Depending on the service, this may include account and contact information, health information you choose to provide, service interactions, device and security data, communications, and records of permissions.

We aim to collect information that is relevant to a defined purpose. Optional information should be identified as optional at collection.

How information may be used

Information may be used to deliver requested services, maintain security, support users, improve reliability, meet legal obligations, and carry out research or analysis where an appropriate legal basis and safeguards apply.

Shiora does not sell personal health information. If a materially new purpose requires a new choice, we will provide one where required.

When information may be shared

Information may be shared with authorised service providers, healthcare or research partners at your direction or under an appropriate legal basis, and public authorities when disclosure is lawfully required. Contracts, access limits, and due diligence are used where relevant.

Language editions are delivered directly by Shiora. Your language preference is stored on this device so the site can remember your choice. English remains the reference source for clinical, legal and safety content while each edition completes its review process.

Your choices and rights

Depending on applicable law, you may be able to request access, correction, export, restriction, objection, or deletion. You may also withdraw an optional consent. Some requests can be limited by identity verification, legal retention duties, clinical record rules, or the rights of others.

Contact privacy@shiora.health to make a privacy request.

Retention and international processing

Retention periods should reflect the service, purpose, legal obligation, dispute need, and security requirement. Where information is processed across borders, Shiora uses the transfer mechanism and safeguards required for the relevant relationship.

Contact

Privacy enquiries can be sent to privacy@shiora.health. Data protection enquiries can be sent to dpo@shiora.health.