Legal
Privacy policy
This policy explains how Doctran.ai Ltd (“Doctran”, “we”) collects and uses personal information when you visit doctran.ai or contact us. We are the data controller for this information.
What we collect
- Enquiry information you choose to give us through our contact form or by email: your name, email, optional phone number and business name, where you're based, and details about your project.
- Technical information needed to run and secure the website, such as your IP address, which is processed briefly to prevent spam and abuse.
We do not use advertising or tracking cookies. If we introduce analytics in future, we will use privacy-friendly tools and update this policy, asking for consent where required.
How and why we use it
- To reply to your enquiry and discuss a possible project (legitimate interests, or steps prior to entering a contract).
- To deliver services under a contract with you (contract).
- To protect our website from spam and abuse (legitimate interests).
- To meet legal and accounting obligations (legal obligation).
We never sell your information, and we do not use it for unrelated marketing.
Who we share it with
Only service providers that help us operate, under appropriate data protection terms — for example our email delivery provider (Resend), our hosting provider and, if enabled, Cloudflare Turnstile for spam protection. Some providers may process data outside the UK or EEA; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.
How long we keep it
Enquiries that don't lead to a project are deleted within 24 months. Client records are kept for as long as needed to provide services and meet legal obligations (typically six years for financial records).
Your rights
Under UK GDPR and EU GDPR you can ask to access, correct, delete or restrict use of your personal information, object to processing, and request a copy in a portable format. Email info@doctran.ai and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority in the EU.
If you are in the United States, including California, you have similar rights to know about and delete your personal information. We do not sell or share personal information for cross-context behavioural advertising.
Security
We use encrypted connections (HTTPS), strict security headers, limited access and reputable providers to protect your information.
Changes
We'll update this page if our practices change. Last updated: October 2026.