Legal

Privacy Policy

Last updated: 11 July 2026

1. Who we are

Short Lives Analytics™ (“we”, “us”) is a project developing a data analytics platform for paediatric palliative care, led by Dr David Graham with the support of the NHS Clinical Entrepreneur Programme. This policy explains how we handle personal data submitted through this website, shortlivesanalytics.com.

For any question about this policy or your data, contact us at privacy@shortlivesanalytics.com.

2. What data we collect

This website is a public information site with a single contact (“Make a Connection”) form. Through it we collect only:

  • Your email address, so we can reply to your enquiry.
  • Any message you choose to write, so we understand how you would like to connect.

Our hosting and email providers automatically process limited technical data (such as your IP address) to deliver the site securely and to prevent abuse of the contact form. We do not use advertising or analytics cookies, and we do not track you across other websites.

3. Demonstration data only

The interactive dashboard on this website uses synthetic, demonstration data only. It contains no real patient information and is not connected to any live clinical system. No NHS or patient data is processed by this website.

4. How we use your data

We use the information you submit solely to respond to your enquiry and to correspond with you about Short Lives Analytics. We do not sell your data, and we do not share it except with the service providers described below who help us operate the site.

5. Legal basis (UK GDPR)

Where you submit the contact form, our lawful basis for processing your data is your consent and our legitimate interest in responding to enquiries and developing the project. You can withdraw consent at any time by contacting us.

6. Service providers

We rely on a small number of trusted providers to run this site:

  • Vercel — website hosting and delivery.
  • Resend — delivery of the notification email generated by the contact form.

These providers process data on our behalf under their own terms and data-protection commitments. Some processing may take place outside the UK; where it does, appropriate safeguards are relied upon as required by UK GDPR.

7. How long we keep it

We keep contact-form correspondence only for as long as needed to handle your enquiry and any follow-up, and then delete it when it is no longer required.

8. Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to erase your data;
  • object to or restrict our processing;
  • request a copy of your data in a portable format.

To exercise any of these rights, email privacy@shortlivesanalytics.com.

9. Complaints

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first, so please do contact us.

10. Changes to this policy

We may update this policy as the project develops — for example, when the live platform begins processing clinical data under separate NHS data-governance arrangements. Any changes will be posted on this page with a revised “last updated” date.

Short Lives Analytics™ is not a medical device. All clinical decisions remain the responsibility of the treating clinician.