We respect your right to privacy. This privacy policy (the “Privacy Policy”) describes in detail how we collect, use, and disclose your personal data, and what choices you have with respect to your personal data. Please read this Privacy Policy carefully. If, after reading the Privacy Policy, you still have any questions, please contact us so that we can address your concerns.
This Privacy Policy governs the processing of personal data collected from individual users and organizations through the mobile and extended reality applications “Understanding Heart Attack,” “XR Heart Anatomy,” “XR Anatomy,” “3D Heart Anatomy,” and “3D Osteology” (the “Application”) and the related websites https://xranatomy.com and https://xrheartattack.com (the “Website”) (collectively, “XR Anatomy”). This Privacy Policy does not apply to any third-party applications or software that integrate with XR Anatomy (the “Third Party Services”), or any other third-party products, services, or businesses.
The Application, an Extended Reality (XR), and 3D mobile application, is designed to assist medical students, other individuals in the study of anatomy and other medical topics, and the general population. It may also be employed by professionals for educational purposes.
The entity that is responsible for processing personal data through XR Anatomy is XR Anatomy LTD, having a registered business address at 71-75 Shelton Street, London, England, WC2H 9JQ (“we,” “us,” and “our”).
In this Privacy Policy, you will encounter recurrent terms. For your convenience, we would like to explain what such terms mean:
We process personal data in accordance with the applicable data protection laws, including, but not limited to, the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR).
This Privacy Policy enters into force on the effective date indicated at the top of the Privacy Policy and remains valid until terminated or updated by us.
Your use of XR Anatomy is subject to this Privacy Policy. Before you start using the Application, we will ask you to review this Privacy Policy. We also encourage you to review the Privacy Policy before browsing the Website and submitting any personal data to XR Anatomy.
In some cases (where required by the applicable law), we may seek to obtain your consent for the processing of your personal data. For example, we may seek your prior consent for the following purposes:
The basic functionality of the Application can be used without submitting any personal data to us. We comply with data minimization principles and we collect only a minimal amount of personal data that is necessary for ensuring your use of XR Anatomy:
We may receive certain additional data when submitting XR Anatomy if you participate in a focus group, contest, activity, or event, request support, interact with our social media accounts, or otherwise communicate with us. Please note that the provision of such data is optional and you may choose what personal data you would like to share with us.
We DO NOT collect, under any circumstances, any special categories of personal data (“sensitive data”) from you, such as your health information, opinion about your religious and political beliefs, racial origins, membership of a professional or trade association, or information about your sexual orientation.
If you fail to provide us with the personal data when requested, we may not be able to perform the requested operation and you may not be able to use the full functionality of XR Anatomy (e.g., you will not be able to participate in surveys, and get our special offers), receive the services provided through XR Anatomy, or get our response.
We respect strictest data protection principles. Thus, we process your personal data only for specified and legitimate purposes explicitly mentioned in this Privacy Policy. In short, we will use personal data only for the purposes of allowing you to use the full functionality of XR Anatomy, maintaining XR Anatomy, conducting research about our business activities, administrative purposes, sending you newsletters and marketing communication, and replying to your enquiries. The detailed description of the purposes and legal basis for processing of your personal data is provided below (the mandatory personal data is marked with *).
When you browse XR Anatomy, we may automatically collect certain technical non-personal data about your use of XR Anatomy. Such non-personal data does not allow us to identify you in any manner. The non-personal data collected by us includes information about:
Please note that de-identified personal data is also considered to be non-personal data.
We will use non-personal data in furtherance of our legitimate interests in operating XR Anatomy, conducting our business activities, and developing new products. More specifically, we collect the non-personal data for the following purposes:
In case your non-personal data is combined with certain elements of your personal data in a way that allows us to identify you, we will handle such aggregated data as personal data. If your personal data is aggregated or de-identified in a way that it can no longer be associated with an identified or identifiable natural person, it will not be considered personal data and we may use it for any business purpose.
From time to time, if you sign up on the Website, we will send you messages, such as newsletters, brochures, promotions and advertisements informing you about our new services or requests to participate in surveys. Please note that you will receive such marketing messages and requests to participate in surveys only if:
You can opt-out from receiving marketing messages and requests for surveys at any time free of charge by clicking on the “unsubscribe” link contained in any of the messages sent to you or contacting us directly.
From time to time, we may send you informational notices, such as service-related, technical or administrative emails, information about XR Anatomy, your privacy and security, and other important matters. Please note that we will send such notices on an “if-needed” basis and they do not fall within the scope of direct marketing communication that requires your prior consent.
We will store your personal data in our systems only for as long as such personal data is required for the purposes described in this Privacy Policy, you opt out from receiving marketing communication and surveys, or until your user account is deleted - whichever comes first. After your personal data is no longer necessary for its purposes and there is no other legal basis for storing it (e.g., we are not obliged by law to store your personal data), we will immediately delete your personal data from our systems.
We may retain non-personal data pertaining to you for as long as necessary for the purposes described in this Privacy Policy. This may include keeping non-personal data after you have deactivated your account for the period of time needed for us to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes and enforce our agreements.
Please note that, in some cases, we may be obliged by law to store your personal data for a certain period of time. In such cases, we will store your personal data for the time period stipulated by the applicable law and delete the personal data as soon as the required retention period expires.
In some circumstances, we disclose your personal data to third party service providers (data processors) and other third parties. For example, we may share your personal and non-personal data with entities that provide certain technical support services to us, such as web analytics, data processing, advertising, email distribution, and developing services, or if you explicitly request us to disclose the personal data. The disclosure of your personal data is limited to the situations when such data is required for the following purposes:
We will share your personal data only with the third parties that agree to ensure an adequate level of protection of personal data that is consistent with this Privacy Policy and the applicable data protection laws. The third parties (data processors) that may have access to your personal data include, but are not limited, to:
We may disclose or use non-personal data and de-identified data for any purpose. For example, we may share it with prospects or partners for business or research purposes, for improving XR Anatomy, or developing new products and services.
If necessary, we will respond to lawful requests from public authorities to disclose information about the users of XR Anatomy to the extent necessary for pursuing a public interest objective, such as national security or law enforcement.
In case our business is sold partly or fully, we will provide your personal data to a purchaser or successor entity and request the successor to handle your personal data in line with this Privacy Policy.
Some of the third parties listed in Section 7 of this Privacy Policy are located outside the European Union (EU) and, if you reside in the EU, we may need to transfer your personal data to jurisdictions outside the EU. In case it is necessary to make such a transfer, we will make sure that the jurisdiction in which the recipient third party is located guarantees an adequate level of protection for your personal data (e.g., the country in which the recipient is located is white-listed by the European Commission or the recipient is a Privacy-Shield certified entity) or we conclude an agreement with the respective third party that ensures such protection (e.g., a data processing agreement based on the Standard Contractual Clauses provided by the European Commission).
We put our best efforts to keep your personal data safe and secure. We implement organizational and technical information security measures to protect your personal data from loss, misuse, unauthorized access, and disclosure. The security measures taken by us include secured networks, limited access to your personal data by our staff, and anonymization of personal data (when possible). In order to ensure the security of your personal data, we kindly ask you to use XR Anatomy through a secure network only.
Although we put our best efforts to protect your personal data, given the nature of communications and information processing technology and the Internet, we cannot be liable for any unlawful destruction, loss, use, copying, modification, leakage, or falsification of your personal data caused by circumstances that are beyond our reasonable control. In case a personal data breach occurs, we will inform the UK Information Commissioner’s Office (ICO) without undue delay and immediately take reasonable measures to mitigate the breach, as required by the applicable law. Our liability for any security breaches will be limited to the highest extent permitted by the applicable law.
To the extent prohibited by applicable law, we do not allow anyone younger than 18 years old to use XR Anatomy. Thus, we do not knowingly collect personal data of persons below the age of 18. If you learn that anyone younger than 18 has unlawfully provided us with personal data and you are a parent or legal guardian of that person, please contact us and we will take immediate steps to delete such personal data.
Individuals located in certain countries, including the EU, have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may ask us to:
If you would like to exercise your rights listed above, please contact us by email at [email protected] and explain in detail your request. In order verify the legitimacy of your request, we may ask you to provide us with an identifying piece of information, so that we would be able to identify you in our system. We will answer your request within a reasonable timeframe but no later than 2 weeks. Your requests can be submitted free of charge once per calendar year. If you submit your requests more than once per year, we reserve the right to charge a small administrative fee for providing the requested information.
If you would like to launch a complaint about the way in which we handle your personal data, we kindly ask you to contact us first and express your concerns. After you contact us, we will investigate your complaint and provide you with our response as soon as possible. If you are a resident of the EU and you are not satisfied with the outcome of your complaint, you have the right to lodge a complaint with your local data protection authority.
XR Anatomy uses cookies. In this section, you can find information about the types of cookies that we use and the purposes for which the cookies are used. If you do not agree with our use of cookies, please disable your cookies as described in the section “How to disable cookies?”. Please note that the full functionality of XR Anatomy may not be available without cookies.
A cookie is a small piece of data, typically consisting of letters and numbers. When you visit a website, the website may send a cookie to your browser. Subsequently, the browser may store the cookie on your computer or mobile device. Cookies are designed to allow the recognition of user’s device and collection of certain information about the use of a website. Thus, over time, cookies allow websites to “remember” your actions and preferences. There are two types of cookies, namely, (i) persistent cookies, which remain valid until their expiration date, unless deleted by the user before that date, and (ii) session cookies that are stored on a web browser and remain valid until the moment the browser is closed. Cookies may also be (i) first-party cookies (set by the website itself) and (ii) third-party cookies (placed by third-party websites).
The table below provides an overview of the cookies used by us, including their purposes and expiration time.
We use cookies for the following purposes:
When you visit XR Anatomy for the first time, we will ask you to provide us with your consent to our use of all cookies. If you do not provide your consent, we will use the strictly necessary cookies only
If you would like to refuse our use of cookies on the Website, you can do it at any time by declining cookies in your browser or device (please check your browser’s or device’s “help” functionality for more information) or visiting https://www.aboutcookies.org for further information. Please be aware that some parts of the Website may not function properly without cookies. If you would like to disable cookies in the Application, please consult the “settings” section of your device.
The Privacy Policy may be changed from time to time to address the changes in laws, regulations, and industry standards. The amended version of the Privacy Policy will be posted on this page and, if we have your email address, we will send you a notice about all the changes implemented by us. We encourage you to review our Privacy Policy to stay informed. For significant material changes in the Privacy Policy or, where required by the applicable law, we may seek your consent. If you disagree with the changes to the Privacy Policy, you should cease using XR Anatomy.
The Privacy Policy was last amended on 18th of November 2024.
Please feel free to contact us if you have any questions about the Privacy Policy, our privacy and security practices, or would like to exercise your rights listed in Section 11 of the Privacy Policy. You may contact us by using the following contact details:
Email: [email protected]