Privacy Policy
Last updated: 4 August 2026
This policy explains what personal data Eligible 4 collects, why we collect it, and the rights you have over it. Eligible 4 is a platform for clinical trial recruitment and management used by healthcare professionals and institutions.
Data we collect
Account data: your name, email address, professional details such as specialty and role, and the institution you belong to. This is provided by you or by the institution that invited you.
Usage data: records of the actions you take in the platform, such as the studies you create and the referrals you manage. These are stored so the platform can function and so institutions can maintain audit trails.
Health information
As part of features such as Medical Record Digitisation, you may upload documents containing health information. This is processed by our secure AI pipeline for the sole purpose of digitising the records and extracting the data you asked for.
The application performs a sanitisation step on your device before any document is uploaded, redacting certain sensitive fields so they never leave your browser.
We do not store uploaded documents or extracted information unless you explicitly choose to save it within the application.
Clinical Record Anonymizer
The Clinical Record Anonymizer is a fully on-device tool. Your patient text and images are processed entirely inside your browser tab — they are never transmitted to our servers and we have no way of accessing them.
On first use it makes outbound requests to public third-party CDNs to download the model and OCR engine. These never include your patient data: huggingface.co and cdn-lfs.huggingface.co for the open-source Llama 3.2 model weights, and tessdata.projectnaptha.com for the Tesseract OCR language files.
Analytics is disabled entirely on this route. No analytics script is loaded there and the page's Content-Security-Policy does not permit any request to Google, so the guarantee is enforced by your browser rather than only promised by us.
Cookies and analytics
We use Google Analytics 4 to understand how the platform is used — but only if you accept it. Until you accept, no Google script is loaded and no request is made to Google at all.
When enabled, analytics records the page path you visit, which AI tools are run, whether a run succeeded or failed, and a coarse duration band. Paths are stripped of query strings and document identifiers before being sent.
We never send patient data, free text you typed, error messages, file names, your user ID, your role, or your institution to Google. Advertising signals remain disabled at all times.
See the Cookie Policy for the full list of cookies and how to change your choice at any time.
Legal bases
We process account and usage data to perform our contract with you or your institution (GDPR Article 6(1)(b)) and to pursue our legitimate interest in operating and securing the platform (Article 6(1)(f)).
Analytics cookies are processed solely on the basis of your consent (Article 6(1)(a)). You may withdraw that consent at any time without affecting the lawfulness of prior processing.
Health-related data is processed under Article 9(2)(h)-(j) as applicable, and always under the instructions of the healthcare institution responsible for the patient record.
Your rights
You have the right to access, rectify, or erase your personal data, to restrict or object to processing, and to data portability.
Where processing is based on consent, you have the right to withdraw it at any time. For analytics, this is available on the Cookie Policy page and in your account settings.
You also have the right to lodge a complaint with your national supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD).
Retention and international transfers
Account and clinical records are retained for as long as your institution requires them and in line with applicable medical record-keeping obligations.
Analytics data is retained for the minimum period configured on the Google Analytics property. Google acts as our processor for analytics and may process data outside the European Economic Area under the European Commission's Standard Contractual Clauses.
Contact
For any question about this policy or to exercise your rights, contact us at info@reconqueringmed.com.