This notice was last updated on: 4 November 2026.
1. About This Notice
This notice explains how Hypervision Surgical Ltd (“Hypervision Surgical”, “we”, “us”) collects and uses personal information about healthcare professionals and other attendees who take part in our workshops, including the Fluorescence-Guided Surgery Master Class workshop in San Diego, California. It applies if you:
-
try or discuss our HyperSnap system and give us feedback;
-
agree to be photographed, filmed or recorded, or to give a testimonial, for our advertising and marketing; or
-
appear in general photographs or video of the workshop.
2. Who We Are
Hypervision Surgical Ltd is a company registered in England and Wales (company number 12614766) with its registered office at London Institute for Healthcare Engineering, 100 Lambeth Palace Road, London, SE1 7AR, United Kingdom. We are the “controller” of your personal information (the organization that decides how and why it is used). You can contact us about this notice or your personal information at [email protected].
3. The Information We Collect
| Type of information | Examples | Where it comes from |
|---|---|---|
| Identity and professional details | Name, job title, specialty, institution or organization | You (consent form, workshop registration, business card, conversation) |
| Contact details | Email address, phone number | You |
| Images and recordings | Photographs, video and audio recordings of you, including your image, likeness and voice | Us, or photographers and videographers working for us |
| Testimonials and feedback | Your comments, quotes and suggestions about our products, and our notes of how you used the device | You, and our staff at the workshop |
| Consent and relationship records | Your choices and signature on the consent form, any withdrawal, and any connection with us you disclose | You |
| Incidental images | Your image where you appear in the background of general photographs or video of the workshop | Us, or photographers working for us |
What we do not collect. We do not photograph patients or collect patient information, and we ask you not to give us any. We do not use images of you to create biometric identifiers such as facial recognition templates. We do not intend to collect information about your health, ethnicity, religion or other sensitive characteristics and will not use images or recordings to infer such information.
4. How We Use Your Information and Our Legal Basis
We are based in the United Kingdom, so the UK General Data Protection Regulation (UK GDPR) applies to our use of your personal information. It requires us to have a legal basis for each use:
| What we use it for | Legal basis (UK GDPR) |
|---|---|
| Featuring you, your image, voice, name and testimonial in our advertising and marketing (website, social media and marketing materials), in line with the choices on your consent form | Your consent. You can withdraw it at any time (see Section 8). |
| Keeping records of your consent, choices and any withdrawal, and disclosing your connection with us alongside your testimonial where advertising rules require it | Legal obligation (to demonstrate consent) and our legitimate interests in advertising lawfully and transparently |
| Using your feedback, without identifying you, to develop and improve our products | Our legitimate interests in improving our products |
| Recording and investigating any problem with our device that you report | Legal obligation under medical device law and our legitimate interests in product safety and quality |
| Following up with you about your feedback or the workshop | Our legitimate interests in maintaining professional relationships |
| Sending you news and updates by email | Your consent (opt-in on the consent form). You can unsubscribe at any time. |
| Using general photographs or video of the workshop in which you appear incidentally (we will not feature you prominently without your consent) | Our legitimate interests in promoting our business and our workshops |
| Establishing, exercising or defending legal claims and complying with law | Our legitimate interests and legal obligation |
Where we rely on legitimate interests, we have considered your interests and rights and concluded they are not overridden. You can object at any time (see Section 8).
5. Who We Share Your Information With
We do not sell your personal information or share it for cross-context behavioral advertising. We share it only with:
-
service providers who act on our instructions, such as website hosting, cloud storage, customer relationship management and email providers, photographers and videographers, and design and marketing agencies;
-
the public, when we publish Your Content as you have agreed. Content posted on social media is also processed by the platform under its own terms and privacy policy;
-
our professional advisers, such as lawyers and auditors;
-
regulators, courts and law enforcement where required by law, including medical device regulators where you report a problem with our device; and
-
a buyer or investor in connection with a sale, merger or reorganization of our business, subject to confidentiality.
6. International Transfers
We collect your information in the United States and transfer it to the United Kingdom, where we are based. Some of our service providers are located outside the UK, including in the United States. Where we transfer your information outside the UK, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified) or the UK International Data Transfer Agreement or Addendum. Once published, Your Content can be viewed anywhere in the world. Contact us for more information about the safeguards we use.
7. How Long We Keep Your Information
| Information | How long we keep it |
|---|---|
| Published images, recordings and testimonials | Until you withdraw your consent. We then stop using it in new materials and remove it from our website and the social media channels we control within 30 days. |
| Images and recordings we do not use | Until you withdraw your consent. |
| Consent forms, relationship disclosures and withdrawal records | For as long as we use Your Content, and for 6 years afterwards so that we can show what you agreed to. |
| Feedback | Anonymized feedback may be kept for as long as it is useful for product development. |
| Contact details for email updates | Until you unsubscribe or we stop sending updates. |
| General workshop photographs and video | For as long as we use them in our marketing, unless you object. |
8. Your Rights
Under the UK GDPR you have the right to:
-
access your personal information and receive a copy;
-
correct information that is inaccurate or incomplete;
-
delete your information in certain circumstances;
-
restrict how we use your information in certain circumstances;
-
object to our use of your information where we rely on legitimate interests;
-
receive information you have given us in a portable format, where we rely on your consent; and
-
withdraw your consent at any time, without affecting what we did before you withdrew.
To exercise any of these rights, email [email protected]. We will respond within one month. If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (www.ico.org.uk).
9. California Residents
This section gives California residents the information described in the California Consumer Privacy Act (CCPA), and describes the rights we will honor for California residents, in relation to the activities covered by this notice.
Categories of personal information we collect: identifiers (name, email address); professional or employment-related information (job title, specialty, institution); audio, electronic and visual information (photographs, video and audio recordings); and the categories listed in California Civil Code section 1798.80(e) (name, signature, employment). We do not collect sensitive personal information for the purpose of inferring characteristics about you. Sources, purposes and retention periods are described in Sections 3, 4 and 7.
Disclosures: we disclose these categories for business purposes to the service providers and contractors described in Section 5, and we make Your Content public as you have agreed. We have not sold or shared (for cross-context behavioral advertising) personal information in the past 12 months, and we do not knowingly collect personal information of anyone under 16.
Your rights: you have the right to know what personal information we have collected about you and how we use and disclose it; to delete it; to correct it; and not to be discriminated against for exercising these rights. You may also authorize an agent to make a request on your behalf.
How to make a request: email [email protected] with the subject line “California privacy request”. We will verify your identity by matching information you provide with information we hold, and we will respond within 45 days. We do not disclose personal information to third parties for their own direct marketing purposes (California Civil Code section 1798.83).
10. Residents of Other US States
Residents of other US states may have similar rights under their state’s privacy laws. Please contact us at [email protected] and we will respond in line with applicable law.
11. Changes to This Notice
We may update this notice from time to time. The “Last updated” date above shows when it was last changed. If we make a significant change that affects how we use Your Content, we will tell you.