Privacy policy
We take privacy seriously because our customers trust us with health data. This policy explains what we collect on this website, why, and the choices you have.
Last updated: 29 October 2026
1. Who we are
Sovica is a product of Vahue Ltd, a company registered in England and Wales. For this website we are the data controller. You can reach us at support@sovica.ai.
2. What this policy covers
This policy covers visitors to this website and people who contact us through it.
Patient and clinic data inside the Sovica product is different: there, the clinic is the controller and we act as its processor under a data processing agreement. That is described on our security page.
3. What we collect on this website
- Messages you send us through the chat, the walkthrough form or the “before you go” card: your message, and your name, email, phone and clinic details if you give them.
- Job applications through a careers page: your name, email, phone, location, LinkedIn, any website you give us, your CV, your right to work and your answers.
- Reactions on the home page boards: we store only the total count per emoji, with nothing that identifies you.
- Choices stored in your browser: your cookie choice and your chat history are kept in your browser’s local storage so the site remembers them. We can’t read them unless you send us a message.
- Server logs: our hosting keeps standard request logs (IP address, time, page) for security, for a short period.
4. Why we use it and our lawful basis
- To reply to you and arrange a walkthrough: our legitimate interest in answering enquiries, or steps before a contract.
- To consider a job application: steps you ask us to take before a contract, and our legitimate interest in hiring. Only the people deciding on the role read your CV.
- To keep the site secure and working: legitimate interest.
- We do not sell personal data, and we do not use it for advertising.
7. How long we keep it
Enquiries and chat messages: up to 24 months after our last contact with you. Job applications and CVs: deleted automatically six months after we receive them, sooner if you ask, and kept longer only with your consent. Server logs: up to 30 days.
8. Your rights
Under UK GDPR you can ask to see, correct, delete or export your data, and you can object to or restrict how we use it. Email support@sovica.ai and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).
9. Changes to this policy
When we change this policy we update the date at the top. Significant changes are announced on this site.