Privacy policy
Last updated: 9 April 2026
Anatomical Concepts UK Ltd ("we", "us", "our") is the data controller for this website and for the tVNS UK product and support service. This policy explains what personal data we collect, how we use it, who we share it with, and what rights you have under UK GDPR and the Data Protection Act 2018.
If anything in this policy is unclear, or you want to exercise any of the rights described below, the contact details are at the bottom of this page.
What personal data we collect
We collect personal data in a small number of situations.
- When you buy the tVNS device through this site. Stripe processes your payment and provides us with your name, billing address, shipping address, email address, and order details so that we can fulfil the order and handle warranty, returns, and after-sales support. We do not see or store your full card details at any point.
- When you contact us by email, phone, or through a contact form, we collect the details you choose to share with us, including your name, contact details, and the content of your message.
- When you browse the site, our analytics provider records standard web analytics data such as the pages you visit, the approximate time spent on each page, the country you are visiting from, and the type of device and browser you are using. This data is aggregated and does not identify you personally.
- When you download a resource from the clinician zone, if we ask for your name or email in exchange for the download, we collect the details you provide.
We do not collect special category data (such as health data about a specific individual) through this website. If you write to us about a medical condition in a message, we will handle that information with appropriate care and only for the purpose of answering your question.
Why we collect it, and our lawful basis
We process your personal data for the following purposes and under the following lawful bases in UK GDPR.
| Purpose | Lawful basis |
|---|---|
| Fulfilling orders and providing after-sales support, warranty, and returns | Performance of a contract (Article 6(1)(b)) |
| Replying to contact enquiries | Legitimate interests (Article 6(1)(f)) |
| Keeping accounting records and meeting our legal obligations | Legal obligation (Article 6(1)(c)) |
| Understanding how the site is used and improving it | Legitimate interests (Article 6(1)(f)) |
| Sending you information about tVNS or related products, where you have asked to receive it | Consent (Article 6(1)(a)) |
Who we share it with
We share personal data only where there is a clear reason to do so, and only with parties we have reviewed for their own data handling practices. The main recipients are:
- Stripe, our payment processor. Stripe handles card details directly and is PCI DSS compliant. We do not store card data.
- Our delivery partners, such as couriers and postal services, who need your name and address to deliver the device.
- tVNS Technologies GmbH, the manufacturer of the device, in the limited case where a warranty or technical issue needs to be escalated to them. Only the minimum information needed is shared.
- Our IT and hosting providers, including our website host and email provider, who act as data processors on our behalf.
- Regulatory authorities and law enforcement, if we are legally required to share information.
We do not sell your personal data to anyone, ever.
International transfers
Some of our processors, including the manufacturer in Germany, are based outside the UK. Where personal data is transferred outside the UK, we rely on the UK government's adequacy decisions, or on standard contractual clauses where adequacy is not in place, to ensure your data is protected to the same standard as under UK GDPR.
How long we keep your data
We keep personal data only for as long as we need it.
- Order and warranty records are kept for seven years, to meet HMRC and consumer law requirements.
- Contact enquiries are kept for up to three years, so that we can respond to follow-up questions.
- Analytics data is aggregated and retained according to the settings of our analytics provider, and does not identify you personally.
- Marketing subscriptions, where you have opted in, are kept until you unsubscribe.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you, and receive a copy of it.
- Rectify data that is inaccurate or incomplete.
- Erase your data, where there is no overriding reason for us to keep it.
- Restrict how we process your data in specific circumstances.
- Object to processing based on legitimate interests, including direct marketing.
- Data portability, to receive your data in a structured, machine readable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, email us (see the contact section below). We will respond within one month.
If you are not satisfied with how we handle your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk. We would rather hear from you first so we can try to put things right, but you are never required to come to us before going to the ICO.
Cookies
We use a small number of cookies to make the site work and to understand how it is used. A separate cookie notice on the site explains what each cookie does and lets you accept, reject, or change your preferences. You can change your mind at any time.
Changes to this policy
If we make material changes to this policy, we will post the updated version here and update the "last updated" date at the top. If the changes are significant, we will make a reasonable effort to let you know by other means too.
How to contact us
For any question about this policy, or to exercise any of the rights above, the contact details are on our contact page.
Anatomical Concepts UK Ltd is registered with the Information Commissioner's Office.
This policy sits alongside our terms and conditions and accessibility statement.