Effective Date: 13th September, 2026

1. About this policy

aQili Healthcare respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and disclose personal data when you:

• visit our website www.aqilihealth.com;
• contact us or request information;
• subscribe to our updates;
• express interest in a demonstration, partnership or pilot;
• participate in a survey, communication, event or user-research activity; or
• otherwise communicate with us.

This policy also explains your rights and how you may contact us about the use of your personal data.

Our website is primarily intended for healthcare professionals, healthcare organisations, partners, researchers and other adults interested in aQili Healthcare.

2. Who we are

aQili Healthcare is a healthcare knowledge platform for healthcare organisations.

In this policy, “aQili”, “aQili Healthcare”, “we”, “us” and “our” refer to the entity identified above.

3. Scope of this policy

This policy applies to personal data collected through the public aQili Healthcare website and related business communications.

Where a separate privacy notice applies, we will make that notice available at the point the personal data is collected.

The public website is not intended for submitting patient-identifiable information, medical records or requests for urgent medical assistance. Please do not include such information in a general website enquiry.

4. Personal data we may collect

The personal data we collect depends on how you interact with us.

Information you provide directly

You may provide us with:

• your name;
• email address;
• telephone number;
• job title and profession;
• employer, healthcare organisation or institution;
• country, county or location;
• information included in an enquiry or message;
• areas of professional or commercial interest;
• pilot, partnership or demonstration requirements;
• survey and user-research responses;
• event-registration information;
• communication and marketing preferences;
• correspondence between you and aQili; and
• any other information you choose to provide.

Technical and usage information

When you visit the website, we or our service providers may collect:

• Internet Protocol address;
• browser type and version;
• device type and operating system;
• approximate location derived from an IP address;
• referring website;
• pages viewed;
• links selected;
• date, time and duration of visits;
• error, security and performance logs; and
• cookie or similar-technology identifiers.

Information received from other sources

We may receive professional contact information from:

• your employer or organisation;
• a referral or introduction;
• an event or programme organiser;
• a research or implementation partner;
• publicly available professional sources;
• professional networking platforms; or
• a service provider acting on our behalf.

Where required, we will tell you the source of the information and provide any additional privacy information required by law.

5. Special-category and health data

The public website is not designed to collect patient-identifiable health information or medical records.

Please do not submit:

• patient names;
• hospital or medical-record numbers;
• identifiable clinical photographs;
• prescriptions;
• test results;
• consultation notes; or
• other identifiable health information

through the website’s general contact, demonstration or partnership forms.

If you voluntarily include sensitive or health-related personal data in a communication, we will only process it where there is an appropriate lawful basis. We may delete or securely restrict the information if it is not needed for the purpose of your enquiry.

6. How and why we use personal data

We may process personal data for the following purposes:

Purpose	Typical information
Responding to an enquiry or request	Identity, contact details and message content
Arranging a demonstration, meeting or pilot discussion	Identity, professional and organisational information
Managing prospective and existing partnerships	Contact, professional and correspondence information
Operating and securing the website	Technical, device, security and log information
Improving the website and understanding its use	Usage, device and analytics information
Conducting surveys, interviews and user research	Professional information and responses
Sending news and marketing communications	Name, email address and preferences
Managing events and programmes	Registration, attendance and contact information
Maintaining business and regulatory records	Contact, transaction and correspondence information
Establishing or defending legal claims	Relevant records and communications
Preventing fraud, misuse and security incidents	Technical, identity and security information

Where we rely on legitimate interests, we consider whether the processing is necessary, proportionate and compatible with your rights.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing that took place before consent was withdrawn.

7. Cookies and analytics

Our website may use cookies and similar technologies to:

• enable essential website functions;
• remember preferences;
• maintain website security;
• measure website performance;
• understand how visitors use the website; and
• assess the effectiveness of communications or campaigns.

Strictly necessary cookies may operate without consent where permitted by law. We will request consent before placing non-essential analytics, advertising or personalisation cookies where consent is legally required.

You can manage non-essential cookies through our cookie-preference tool and through your browser settings. Disabling certain cookies may affect some website functions.

8. Marketing communications

We may send you information about aQili’s development, services, events, pilots or partnership opportunities where:

• you have asked to receive it;
• you have provided consent; or
• applicable law permits us to rely on legitimate interests.

You may unsubscribe at any time by:

• selecting the unsubscribe link in an email;
• changing your communication preferences, where available; or
• contacting us at admin@aqilihealth.com.

Opting out of marketing will not prevent us from sending essential communications relating to an enquiry, meeting, agreement, security matter or service you have requested.

We will not sell or rent your personal data to third parties for their own marketing.

9. When we share personal data

We may share personal data only where reasonably necessary with:

• authorised aQili personnel;
• website-hosting and cloud-service providers;
• information-technology and cybersecurity providers;
• contact-form, email and customer-relationship-management providers;
• professional advisers, including lawyers, accountants and insurers;
• research, implementation or event partners;
• prospective healthcare partners, where appropriate and lawful;
• regulators, courts, law-enforcement agencies or public authorities where legally required; and
• parties involved in a proposed investment, restructuring, merger, acquisition or transfer of the business.

Service providers processing personal data on our behalf will be required to protect it, maintain confidentiality and act only in accordance with our instructions and applicable law.

We will not authorise a service provider to use website personal data for an unrelated purpose.

10. International transfers

aQili may use suppliers or work with international partners outside the country where you live.

Where personal data is transferred internationally, we will take reasonable and legally required steps to ensure that it remains protected. Depending on the circumstances, these safeguards may include:

• determining whether the destination provides adequate protection;
• entering into approved contractual safeguards;
• conducting an assessment of the transfer and its risks;
• applying encryption, access controls or data minimisation;
• obtaining consent where legally appropriate; or
• relying on another transfer mechanism permitted by applicable law.

Information about the safeguards used for a particular transfer may be requested using the contact details below.

11. Data security

We use appropriate organisational and technical measures designed to protect personal data against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure; and
• destruction.

Measures may include role-based access, secure authentication, encryption, system monitoring, staff confidentiality obligations, backups and incident-response procedures.

Access to personal data is limited to people and service providers who require it for an authorised purpose.

Although we take reasonable measures to protect personal data, no website, electronic communication or Internet transmission can be guaranteed to be completely secure.

12. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including legal, regulatory, contractual, security and dispute-resolution requirements.

Indicative retention periods are:

• General enquiries: up to 24 months after the last meaningful communication;
• Pilot, partnership and commercial discussions: for the duration of the relationship and up to seven years afterwards where required for contractual or legal records;
• Marketing records: until you unsubscribe or we determine that the information is no longer current, subject to retaining a minimal suppression record;
• Research information: for the period explained in the relevant participant information.

We may retain information for longer where required by law or where it is necessary to establish, exercise or defend a legal claim.

At the end of the applicable retention period, personal data will be securely deleted, anonymised or placed beyond operational use.

13. Your rights

Depending on the applicable law and circumstances, you may have the right to:

• be informed about the collection and use of your personal data;
• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• object to certain processing;
• request restriction of processing;
• request the transfer of eligible personal data in a structured, commonly used and machine-readable format;
• withdraw consent at any time where processing is based on consent;
• object to direct marketing;
• seek review of a decision based solely on automated processing, where applicable; and
• lodge a complaint with an appropriate data-protection authority.

These rights may be subject to legal limitations. For example, we may need to retain certain records to comply with a legal obligation or defend a legal claim.

To exercise a right, contact admin@aqilihealth.com. We may ask for information needed to verify your identity and protect personal data from unauthorised disclosure.

We will respond within the period required by applicable law.

14. Artificial intelligence

We will not use identifiable website data for artificial-intelligence unless:

• there is a clear and lawful purpose;
• the intended use has been communicated;
• an appropriate lawful basis has been established;
• required safeguards and approvals are in place; and
• consent has been obtained where legally required.

15. Children

The aQili website is intended for adults and professional users. We do not knowingly collect personal data directly from children through the public website.

If you believe a child has provided personal data to us without appropriate authorisation, contact us at admin@aqilihealth.com. We will investigate and take appropriate steps, which may include deleting the information.

16. External websites

Our website may contain links to websites operated by ministries, regulators, healthcare organisations, partners or other third parties.

We do not control those websites or their privacy practices. This policy does not apply to personal data collected independently by a third party. You should review the relevant third party’s privacy policy before providing personal data.

17. Data breaches

We maintain procedures for identifying, assessing and responding to personal-data breaches.

Where legally required, we will notify the appropriate regulator and affected individuals within the applicable time limits. Notifications will describe the nature of the incident, the likely consequences and the measures taken or proposed to address it.

18. Complaints

Please contact us at admin@aqilihealth.com first if you have a concern about how we use personal data. We will investigate and attempt to resolve the matter.

You may also contact the data-protection authority in the country where you live or work, where applicable.

19. Changes to this policy

We may update this Privacy Policy to reflect:

• changes to our website or services;
• new technologies or suppliers;
• changes in our data-processing activities;
• regulatory or legal developments; or
• feedback from users and partners.

The revised policy will be published on this page with an updated “Last updated” date.

Where a change materially affects how we use personal data, we will provide additional notice where reasonably practicable or legally required.

20. Contact us

Questions, requests or concerns about this policy or our use of personal data should be sent to:

aQili Healthcare
Email: admin@aqilihealth.com