Legal

Privacy Policy

How EaseMed collects, uses, shares and protects information when you use our website and healthcare procurement platform.

Last updated: 29 October 2026

1. Who we are

EaseMed (“easemed”, “we”, “us” or “our”) operates the website at easemed.ai and the EaseMed platform, a business-to-business procurement service that connects healthcare facilities with medical suppliers (together, the “Service”).

This Privacy Policy explains what information we collect when you visit our website, request early access, apply to work with us, or use the Service, and how we use, share and protect it. For personal information we collect about our website visitors, applicants and account holders, EaseMed is the controller.

2. Information we collect

Information you give us

  • Early access and enquiries: your name, work email address, phone number, organisation name and website, your role, the number of facilities you operate, indicative annual procurement spend, and the content of any message you send us.
  • Career applications: your name, email address, organisation, role, LinkedIn profile and the message you submit.
  • Account and organisation details: login credentials, contact details, job title, and details of your organisation such as legal name, registration numbers, tax identifiers, addresses and banking or payment details.
  • Verification documents: business registrations, licences, regulatory certificates (for example CE or ISO certificates), product documentation and similar documents you upload so that we can verify your organisation.
  • Procurement data: requests for quotation, line items, quotations, purchase orders, invoices, delivery and payment information, messages between buyers and suppliers, and any files you upload to the Service.

Information collected automatically

  • Technical information such as your browser type, device type, operating system and referring page.
  • Usage information such as the pages you visit and the features you use, collected through privacy-focused website analytics.
  • Session cookies that keep you signed in and protect your account.

Patient information

The Service is designed for procurement data, not clinical data. Please do not upload information that identifies patients. If such information is uploaded, we will handle it securely and may delete it.

3. How we use information

We use the information described above to:

  • provide, operate and maintain the Service, including creating and managing accounts;
  • verify healthcare facilities and suppliers before they can transact on the Service;
  • create, match, route and analyse requests for quotation, quotations, bundles and orders;
  • generate procurement insights, savings analysis and demand forecasts for your organisation;
  • respond to early access requests, enquiries and job applications;
  • send service, security and account messages, and, where permitted, updates about EaseMed;
  • monitor, secure and improve the Service, and prevent fraud and misuse; and
  • comply with legal obligations and enforce our Terms of Service.

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of a contract with you or your organisation; our legitimate interests in operating, securing and improving a trusted procurement marketplace; compliance with legal obligations; and your consent, for example when you submit an early access form. You can withdraw consent at any time.

4. Automated and AI-assisted processing

Some features of the Service use automated tools, including AI models, to read documents you upload, extract line items from requests for quotation, check certificates, compare offers and produce recommendations and insights. These tools run on infrastructure we operate or that is operated on our behalf.

Automated outputs support, and do not replace, decisions made by people. Verification decisions about organisations are reviewed by our team, and you can contact us to ask for a human review of any automated result that affects you.

5. How we share information

We do not sell personal information. We share information only as follows:

  • With other users, as part of the Service: for example, a request for quotation is shared with the suppliers it is sent to, and a quotation is shared with the buyer that requested it, together with the business contact details needed to complete the transaction.
  • With service providers that process information on our behalf, including Supabase (database, authentication and file storage), Vercel (hosting and website analytics) and Resend (email delivery). They may only use it to provide services to us.
  • For legal reasons: where required by law, regulation or legal process, or to protect the rights, safety and property of EaseMed, our users or others.
  • In a business transfer: as part of a merger, acquisition, financing or sale of assets, subject to this Privacy Policy.

6. Cookies and analytics

We use strictly necessary cookies to keep you signed in and to secure your session. We also use Vercel Web Analytics to understand how our website is used. It does not use third-party advertising cookies. You can block cookies in your browser settings, but parts of the Service, such as signing in, will not work without them.

7. How long we keep information

We keep personal information for as long as your account is active or as needed to provide the Service. After that we keep it only as long as necessary for the purposes described in this policy, such as resolving disputes, meeting legal, tax and accounting requirements, and enforcing our agreements. Early access and job application details are kept for as long as they remain relevant, and you can ask us to delete them at any time.

8. Security

We use technical and organisational measures designed to protect information, including encryption in transit, access controls, role-based permissions and restricted access to uploaded documents. No system is completely secure, so we cannot guarantee absolute security. Please keep your login details confidential and tell us promptly if you suspect unauthorised access to your account.

9. International transfers

We and our service providers may process information in countries other than the one where you are located. Where we transfer personal information out of the European Economic Area, the United Kingdom or other regions with transfer rules, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy of it;
  • correct information that is inaccurate or incomplete;
  • ask us to delete your information;
  • object to or restrict certain processing, including processing based on legitimate interests;
  • receive your information in a portable format; and
  • withdraw consent where we rely on it, without affecting earlier processing.

To exercise any of these rights, email us at info@easemed.ai. We may need to verify your identity first. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

Where we process information on behalf of a healthcare facility or supplier that uses the Service, we may refer your request to that organisation.

11. Children

The Service is intended for businesses and is not directed at anyone under 18. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above, and if the changes are significant we will notify account holders by email or through the Service.

13. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at info@easemed.ai.