Registry - EQUAL CARE®

1 Data We Collect

For visitors accessing publicly available informational pages of the EQUAL CARE website without creating an account, we collect anonymous usage analytics such as pages viewed and session duration.

For registered EQUAL Evidence subscribers, we collect your name, email address, professional role, country of practice, query history, and usage analytics. Payment information is processed by Stripe and is not stored on our servers.

2 How We Use Your Data

We use personal data to deliver our services, process payments, improve Platform features, ensure security and prevent fraud, communicate important service updates, provide customer support, and comply with our legal obligations.

User interactions with the service, including submitted queries and generated responses, may be analysed in aggregated, anonymised, or pseudonymised form for the purpose of improving system functionality, enhancing AI model performance, developing new features, and conducting internal research, in accordance with applicable data protection laws.

3 Data Sharing

We share data with a limited number of third-party service providers under data processing agreements that comply with GDPR requirements. Stripe processes all payment transactions. Evidence Hunt, our clinical data provider, receives only anonymized usage analytics for licensing compliance purposes. Our cloud infrastructure providers (AWS and/or Google Cloud) host Platform data exclusively in EU and Swiss data centers.

We do not sell your personal data to third parties. We do not use your data for advertising purposes outside the Platform. We do not process individual patient health information; our database contains only aggregated research data from published studies.

4 Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to access all personal data we hold about you, correct any inaccurate information, request deletion of your data (the "right to be forgotten"), restrict certain processing activities, object to specific types of processing, and export your data in a machine-readable format. To exercise any of these rights, please contact us at info@equal-care.org. We will respond to verified requests within 30 days.

5 Data Retention

Personal data is retained for the duration of your active subscription. Upon cancellation, we delete all personal data within 30 days, including your query history and account preferences. We retain only anonymized usage analytics that contain no personally identifiable information. Financial records are retained for ten years as required by Swiss and German tax legislation.

6 Security

We implement industry-standard security measures including TLS 1.3 encryption for all data in transit and AES-256 encryption for data at rest. We maintain strict access controls with role-based permissions, offer two-factor authentication for account security, conduct regular security audits and vulnerability assessments, and maintain incident response procedures in accordance with GDPR Article 33 requirements.