Privacy Policy
This policy explains what personal data DeepBrain Limited collects through this website, why we collect it, how long we keep it and the rights you have. We have written it in plain language and kept it specific to what this website actually does.
01Who we are
DeepBrain Limited (company number SC864097) is a company incorporated in Scotland, United Kingdom. We are developing a non-invasive focused ultrasound headset and companion app for the management of depression and anxiety. All clinical performance figures referenced across this site are design targets pending clinical confirmation.
This website, deep-brain.net, is an informational and waitlist site. We do not collect clinical or health data through it, and there is no patient portal. For the purposes of UK data protection law, DeepBrain Limited is the data controller for the personal data described below. You can reach us at om@deep-brain.net.
02What personal data we collect, and why
Waitlist signups
Our waitlist form collects one piece of personal data: your email address. We do not ask for your name, phone number or any health information at this step. When you submit the form, your email address is stored in a file on our server and a copy is forwarded to our team inbox so we can manage the list. Our lawful bases are our legitimate interests in building a waitlist for a pre-launch device and, where you have actively submitted your address to hear from us, your consent.
Website analytics
We do not currently use analytics tracking. This site does not load Google Analytics, Plausible, Fathom or any comparable analytics or advertising script, and we do not build behavioural profiles of visitors. If we introduce analytics in future, we will update this policy first and, where the law requires it, ask for your consent.
Server logs
Like any website, our hosting provider records standard web server logs in the ordinary course of running the server. These may include your IP address, browser type, the pages you request and a timestamp. Our hosting provider is Bluehost. These logs are retained for up to 30 days in the ordinary course of operating the server and are used to keep the site secure and running, not for profiling or marketing.
Contact enquiries
If you email us, for example at om@deep-brain.net, we keep your message and contact details so we can respond and, where relevant, follow up on your enquiry. Our lawful basis is our legitimate interest in responding to people who contact us.
03How we use your data
We use the data described above only for the following purposes:
- To add you to our waitlist and let you know about development progress, pilot opportunities and early access when relevant.
- To respond to enquiries you send us and keep a record of that correspondence.
- To keep the website secure, available and working correctly.
We do not sell your personal data. We do not use it for automated decision-making or profiling, and we do not share it with third parties for their own marketing.
04How long we keep your data
- Waitlist email addresses: kept until you ask us to remove you, or until the product launches and the waitlist is no longer needed, whichever comes sooner. You can ask to be removed at any time.
- Server logs: retained by our hosting provider for up to 30 days in the ordinary course, then overwritten.
- Contact enquiries: kept for as long as needed to deal with your enquiry and for a reasonable period afterwards in case you follow up, then deleted.
05Your rights under UK GDPR
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data erased (erasure);
- restrict how we process your data;
- data portability, where it applies;
- object to processing carried out on the basis of our legitimate interests; and
- withdraw your consent at any time, where consent is the lawful basis, without affecting processing already carried out.
To exercise any of these rights, email om@deep-brain.net and we will respond within the time limits the law sets. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
06Cookies
This site does not set tracking or analytics cookies. WordPress, which the site runs on, may set a small number of strictly necessary cookies, for example if an administrator logs in to manage the site. Ordinary visitors browsing the site and joining the waitlist are not tracked with cookies, and there is no cross-site or advertising cookie use to consent to. If this changes, we will update this policy and provide a cookie notice where the law requires one.
07Data security
The site is served over HTTPS, and the waitlist list is stored in a directory that is blocked from direct web access. We apply standard hosting security and access controls and limit who can reach stored data. No method of transmission or storage is completely secure, so while we take reasonable steps to protect your data we cannot guarantee absolute security. We do not claim any certification or compliance framework that we do not hold.
08Changes to this policy
We will update this page when our practices change. The date at the top and bottom of this page shows when it was last revised. We do not make any commitment beyond keeping this page accurate and current.
09Contact
For any question about this policy or your personal data, contact us at om@deep-brain.net.