← Back to site

Privacy Policy

Last updated: November 2026

1. Introduction

This privacy policy explains how Jaya Strategy Ltd trading as AloraLabs ("AloraLabs", "we", "us", "our") collects, uses, stores, and protects personal data when you use our website and enquire about our clinical technology platform. We are committed to protecting your privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

Jaya Strategy Ltd (trading as AloraLabs, Company No. 17025305) is the data controller for personal data collected through this marketing website. We are registered in England and Wales at 182–184 High Street North, East Ham, London, E6 2JA. You can contact our team at hello@aloralabs.co.uk.

3. The data we collect

Depending on how you interact with us, we may collect:

  • Enquiry and booking data, such as your name, professional role, email address, and phone number when you request a demonstration or contact us.
  • Technical data, such as IP address, browser type, device information, and usage data collected through cookies and similar technologies.
  • Platform and deployment data: When our software is deployed for a clinic, it is configured within that clinic's own dedicated hosting, database, and email provider accounts. Following initial setup and account handover, the clinic is the sole Data Controller for all patient health data, and AloraLabs retains zero access to the clinic's database or patient records.

We do not collect patient health data through this public website. Health data is processed only within a clinic's own dedicated instance under that clinic's exclusive control and for the purpose of providing clinical care.

4. How we use your data and our legal bases

  • To respond to enquiries and arrange demonstrations, on the basis of your request and our legitimate interest in running our business.
  • To operate, secure, and improve our website, on the basis of our legitimate interest in providing a reliable service.
  • To comply with legal obligations, such as record-keeping and regulatory requirements.

5. Special category health data

All special category patient health data collected through a clinic's consultation questionnaire is held exclusively within that clinic's dedicated database. The clinic acts as the sole Data Controller. AloraLabs (Jaya Strategy Ltd) does not access, hold, or process patient medical history once the software is deployed and accounts are handed over to the clinic owner.

6. Sharing your data

We do not sell personal data. We share data only where necessary, for example with:

  • Service providers who help us operate our platform, such as hosting and email providers, under appropriate contractual safeguards.
  • Professional advisers and authorities where required by law or to protect our legal rights.
  • A clinic you engage with, where you have requested or consented to a particular interaction.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to meet legal and regulatory obligations, or to resolve disputes. Where we act as a processor for a clinic, retention of patient data is governed by the clinic's own retention policies and applicable clinical records guidance.

8. Your data protection rights

Under UK data protection law you have the right to:

  • Access a copy of your personal data (a subject access request).
  • Request correction of inaccurate data.
  • Request erasure of your data in certain circumstances.
  • Restrict or object to processing.
  • Request data portability where applicable.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at hello@aloralabs.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption of data in transit and at rest, two-factor authentication for administrative access, and access controls that restrict data to authorised personnel on a need-to-know basis.

10. Cookies and similar technologies

We use essential cookies required for the website to function, and analytics cookies to understand how the site is used. Where required, we will ask for your consent before setting non-essential cookies, in line with the Privacy and Electronic Communications Regulations (PECR).

11. International transfers

Personal data is stored within the United Kingdom or the European Economic Area. Where a service provider requires a transfer outside these regions, we ensure appropriate safeguards, such as the International Data Transfer Agreement or an adequacy decision, are in place.

12. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date. Where changes are material, we will take reasonable steps to bring them to your attention.

13. Contact and complaints

If you have questions about this policy or how we handle personal data, contact us at hello@aloralabs.co.uk or write to Jaya Strategy Ltd (trading as AloraLabs), 182–184 High Street North, East Ham, London, E6 2JA. If you are not satisfied with our response, you may complain to the ICO.