privacy_tipPrivacy Policy
How RADiA collects, uses, and protects your personal and health data under the General Data Protection Regulation (GDPR).
Last updated: 2026-09-10
1. Who We Are
RADiA ('we', 'us', 'our') is the data controller for the personal data processed through this platform, which lets patients receive radiology results (such as MRI, CT, and X-ray reports) from participating institutions. For any question about this policy or your data, contact us at info@radia-ai.com.
2. What Data We Process
- Account data: name, email address, and login credentials.
- Radiology results and related medical reports uploaded by an institution to your profile — this is 'data concerning health' under Article 9(1) GDPR.
- Usage data: sign-in activity and access logs, used to keep your account secure and to show who has viewed or downloaded a result.
3. Our Legal Basis for Processing
GDPR requires a valid legal basis for every use of personal data. Because RADiA handles both ordinary account data and health data, two articles apply:
Consent — general account data
We process your account data (name, email, login activity) on the basis of your consent, given when you register for a RADiA account. You may withdraw this consent at any time by closing your account or contacting us; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Explicit consent — health data
Radiology results are a special category of personal data under Article 9(1) GDPR. We only make a result available to you, and only allow it to be viewed, downloaded, or shared from your profile, after you have given explicit, separate consent to that specific processing. You choose how long each result stays accessible, and you may withdraw your consent for a given result at any time, which stops any further processing of it going forward.
4. How Long We Keep Your Data
Radiology results are retained for the access period you choose at the time of consent, plus any minimum retention period required by applicable health-records law. Account data is retained for as long as your account is active, and deleted or anonymised within a reasonable period after closure.
5. Sharing Your Data
We do not sell your data. Radiology results are shared only with recipients you explicitly choose to share them with (for example, another doctor or a family member), and with the institution that uploaded them. We may use data processors (such as hosting providers) who act only on our instructions and are bound by data processing agreements.
6. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you (Article 15)
- Request correction of inaccurate data (Article 16)
- Request erasure of your data (Article 17)
- Restrict or object to certain processing (Articles 18 and 21)
- Receive your data in a portable format (Article 20)
- Withdraw consent at any time, as described above (Article 7(3))
- Lodge a complaint with your national data protection supervisory authority (Article 77)
To exercise any of these rights, contact us at info@radia-ai.com.
7. Security
We use access controls, encryption, and authenticated accounts to protect your data, and limit access to health data to what is necessary to provide the service.