Privacy Policy

Contact Details

Personal Data We Process

NeuroAlign processes your personal data when you use our services or when you provide it directly. The data we may process includes:

• Full name
• Date of birth
• Postal address
• Phone number
• Email address
• Gender identity
• Other personal data voluntarily provided via our website, contact forms, WhatsApp, phone calls, or email correspondence

If you create an account, additional personal data may be collected to facilitate account management.

Sensitive Personal Data

With your explicit consent, we may process the following special category data:

• Health and medical information relevant to the services you receive
• Gender identity (if disclosed and relevant to care)

Purposes of Data Processing

We process your data for the following purposes:

• To deliver services and conduct intake and follow-up appointments
• To communicate with you via email, phone, or messaging platforms
• To process payments and comply with financial regulations
• To manage your account (if applicable)
• To conduct research studies (only with explicit consent)
• To comply with legal obligations, including tax law

Automated Decision-Making

NeuroAlign may use AI-based tools to transcribe or summarise consultations. However, no automated decisions are made regarding your treatment or care. All decisions are made by qualified practitioners.

Data Retention

We retain personal data for a maximum of 5 years from the date of your last interaction, unless a longer period is required by legal, regulatory, or insurance obligations. After this period, data will be securely deleted or anonymised.

Third-Party Data Sharing

Your data is not shared with third parties except:

• Where required by law (e.g., tax authorities)
• Where essential to deliver our services (e.g., cloud service providers, AI transcription providers)
• When explicitly consented to by you (e.g., for research participation)

Any third-party processors are contractually bound to handle your data in accordance with GDPR requirements.

Cookies and Tracking Technologies

We use cookies for essential website functionality. These include:

• Essential cookies: for basic site operations

You may control cookie preferences via your browser settings.

Your Rights Under GDPR

You have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how your data is processed
• Data Portability: Receive a copy in a structured, machine-readable format
• Objection: Object to data processing in specific contexts

To exercise your rights, please email us at privacy@neuroalign.nl. We may need to verify your identity before processing your request.

Data Security

We implement appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure, and alteration. These include encrypted communications, access control, secure storage systems, and regular reviews of security protocols.

If you suspect a data breach, contact us immediately at privacy@neuroalign.nl.

Changes to This Policy

We may update this Privacy Policy to reflect changes in legal requirements or business operations. The latest version will always be available on our website. Please review it periodically.

Translation Disclaimer

This website may be viewed in languages other than English using automated translation tools. In case of discrepancies, the English version of this Privacy Policy shall prevail.

Governing Law and Jurisdiction

This Privacy Policy and our services are governed by Dutch law. Any disputes arising from or related to our services shall be submitted to the exclusive jurisdiction of the competent court in Rotterdam, the Netherlands.