Privacy Policy

1. Who we are

THRESIO is a governed healthcare interaction platform operated by Kinanen & Co Limited, registered in England and Wales (Company No. 15929850). Registered office: 85 Great Portland Street, First Floor, London, W1W 7LT.

Contact: hello@thresio.com

2. What data we collect

When you register as a clinician:

• Full name and professional title
• Email address
• GMC number (or other professional registration number)
• Specialty and professional background
• Profile information you choose to provide

When you use the platform:

• Content you contribute (insights, responses, clinical data publications)
• Content you engage with (saved items, likes, recommendations)
• CPD activity logs you create
• Comments and discussion thread contributions
• Clinical tool usage (note: no patient data is ever stored from clinical tools)

Technical data:

• Device type and operating system
• Browser or app version
• IP address (anonymised after 30 days)
• Session and authentication tokens

3. What we do not collect

• Patient identifiable information of any kind
• Financial information beyond what is required for payment processing
• Location data beyond country level

4. How we use your data

To operate the platform:

• Verifying your professional registration
• Providing access to For Clinicians and platform features
• Displaying your contributions to verified peers
• Sending platform notifications you have opted into

To improve the platform:

• Understanding how features are used (aggregated, anonymised)
• Identifying technical issues

For industry engagement (only with your explicit consent):

• Aggregated, anonymised clinical insight reports shared with life sciences partners
• Individual engagement only when you have explicitly opted in and agreed terms
• All engagements documented and fair-market-value compensated

We never sell your personal data. We never share identifiable data with industry partners without your explicit consent.

5. Legal basis for processing (GDPR)

• Contract: processing necessary to provide the platform services you have signed up for
• Legitimate interests: platform security, fraud prevention, service improvement
• Consent: industry engagement, marketing communications
• Legal obligation: compliance with applicable law

6. Data residency and transfers

All personal data is stored and processed within the European Economic Area:

• Database: Supabase (EU West, London region)
• Authentication: Auth0 (EU tenant)
• Email: Resend (EU infrastructure)
• Hosting: Vercel (London region, lhr1)

No personal data is transferred outside the EEA.

7. Data retention

• Account data: retained for the duration of your account plus 2 years
• Contribution content: retained for the duration of your account
• CPD records: retained until you delete them or close your account
• Technical logs: anonymised after 30 days, deleted after 12 months
• Deleted accounts: all personal data deleted within 30 days of account closure request

8. Your rights (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (right to erasure)
• Restrict processing
• Data portability, allowing you to export your data in a machine-readable format
• Object to processing
• Withdraw consent at any time

To exercise any of these rights, contact us at hello@thresio.com. We will respond within 30 days.

9. Cookies

THRESIO uses essential cookies only:

• Authentication session cookies (required for login)
• Security cookies (CSRF protection)

We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

10. Children

THRESIO is a professional platform for verified healthcare professionals. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We will notify registered users of any material changes to this policy by email at least 30 days before changes take effect. The current version is always available at thresio.com/privacy.

12. Complaints

If you have concerns about how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

13. Contact