Last updated: 31 May 2026
1.1. This Privacy Policy (hereinafter the "Policy") defines how personal data of users of the "My Neuro Doctor" service (myneurodoctor.ai, hereinafter the "Service") is processed and protected.
1.2. The Policy describes the procedures for processing personal data and the measures taken to ensure their security, in accordance with applicable data protection legislation.
1.3. The data controller (hereinafter the "Operator") is DDBD LTD, registration number 12812992, address: 3rd Floor, 120 Baker Street, London, W1U 6TU, United Kingdom.
1.4. By using the Service, completing registration, enquiry or payment forms, submitting requests and uploading materials, the data subject (hereinafter the "User") accepts this Policy and consents to the processing of their personal data on the terms set out herein. If the User does not agree with the Policy, they must refrain from using the Service.
1.5. This Policy applies to all personal data the Operator receives from the User in connection with the use of the Service.
2.1. Personal data β any information relating directly or indirectly to an identified or identifiable natural person (the data subject).
2.2. Processing of personal data β any action or set of actions performed on personal data, including collection, recording, organisation, storage, updating, use, transfer, anonymisation, blocking, deletion and destruction.
2.3. Operator β the person who, alone or jointly with others, organises and/or carries out the processing of personal data and determines the purposes of processing, the categories of data processed and the actions performed with them (DDBD LTD).
2.4. Data subject (User) β the natural person to whom the processed personal data relates.
2.5. Special categories of personal data β data concerning, among other things, the state of health. Information about symptoms, diagnoses, test results and other health data submitted by the User when using the Service constitutes a special category of personal data and is processed solely with the User's consent.
3.1. Identification and contact data: first name, last name, middle name, email address, phone number.
3.2. Enquiry content and medical data (special category): question texts and symptom descriptions, consultation history, uploaded documents (test results, discharge summaries and other medical information).
3.3. Technical data: IP address, browser type and version (user-agent), cookies, data on visits and activity on the website.
3.4. Payment data: information required to process payment, handled through payment systems. The Operator does not store full bank card data β such data is processed on the payment providers' side.
3.5. Verifying doctors' data: additionally β middle name, tax identification number, diploma number, licence/accreditation, identity document data (for the purpose of verifying qualifications).
4.1. Providing the Service β delivering AI consultations on medical questions and preparing related materials.
4.2. Verification of answers by real doctors and confirmation of their qualifications.
4.3. User identification and authentication, and communication with the User regarding their requests and enquiries.
4.4. Payment processing and subscription management.
4.5. Providing technical support and handling User enquiries.
4.6. Anonymised analysis of Service usage and improvement of its quality.
5.1. Consent of the data subject, and, with respect to health data, consent to the processing of special categories of personal data, expressed by the User when using the Service and accepting this Policy.
5.2. Performance of a contract (the public offer) to which the User is a party or beneficiary.
5.3. Compliance with legal obligations that require the Operator to process personal data.
6.1. Personal data is processed both by automated means and without the use of such means (non-automated processing).
6.2. Personal data is processed and retained for as long as necessary to achieve the purposes of processing, or until the User withdraws consent, unless a different period is established by law.
6.3. Once the purposes of processing have been achieved or consent is withdrawn, personal data is deleted or anonymised, except where its retention is required by law.
7.1. The Operator does not transfer personal data to third parties except as provided in this Policy and by law.
7.2. Personal data may be shared with the following categories of recipients, to the extent necessary to provide the Service: payment providers (including Stripe and YooKassa) β to process payments; verifying doctors β to review answers (limited to the content of the enquiry and attached documents); hosting and infrastructure providers.
7.3. International transfer of data. Because the Operator is DDBD LTD, a company registered in the United Kingdom, the processing and storage of personal data may take place outside the data subject's country of residence. Such cross-border transfer of personal data is carried out with the User's consent, which the User provides when using the Service and accepting this Policy.
8.1. The Operator takes the necessary organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying and disclosure.
8.2. Data transmission between the User and the Service is carried out via the encrypted HTTPS/TLS protocol.
8.3. Medical data (enquiry content and doctors' comments) is stored encrypted at rest using the AES-256-GCM encryption algorithm.
8.4. Access to personal data is restricted and granted only to authorised persons to the extent necessary to perform their functions.
9.1. The Service uses cookies and similar technologies. We split them into two categories:
9.1.1. Strictly necessary β required for the Service to function: authentication session, security, language preference and storage of the User's cookie consent. These cookies do not require additional consent and cannot be disabled without losing site functionality.
9.1.2. Analytics β Yandex.Metrica (counter ID 108914550, including Webvisor session recordings, click maps and link tracking). Used for anonymous traffic and behaviour analysis. Data is processed by LLC "YANDEX" in accordance with its privacy policy. The User's IP address is anonymised on the Yandex side. Webvisor recordings are anonymised: form fields and other sensitive data are not transmitted.
9.2. Analytics cookies are loaded only after the User gives explicit consent via the cookie banner. The User may withdraw consent at any time on the Cookie Settings page β analytics will stop loading on subsequent visits.
9.3. The User may also manage cookies and disable them in browser settings, but this may affect Service functionality.
9.4. The Operator does not transfer cookie or analytics data to advertising networks or other third parties beyond the analytics provider listed in clause 9.1.2.
10.1. The User has the right to obtain information regarding the processing of their personal data.
10.2. The User has the right to request the clarification, correction, blocking or deletion of their personal data if it is incomplete, outdated, inaccurate or processed in breach of the law.
10.3. The User has the right to withdraw consent previously given to the processing of personal data.
10.4. The User has the right to lodge a complaint about the Operator's acts or omissions with the competent data protection authority or before a court.
10.5. To exercise these rights, the User sends a request to support@myneurodoctor.ai.
11.1. The User may withdraw consent to the processing of personal data at any time by sending a request to support@myneurodoctor.ai.
11.2. Upon receiving a withdrawal of consent, the Operator ceases processing the personal data and deletes or anonymises it, except where further processing or retention is permitted or required by law.
11.3. Withdrawing consent may make it impossible to continue using the Service or certain features for which the processing of personal data is necessary.
12.1. The Operator may amend this Policy. The current version is always published on this page with the date of the latest revision indicated.
12.2. Continued use of the Service after the changes take effect constitutes the User's agreement with the new version of the Policy.
13.1. Operator: DDBD LTD, registration number 12812992, address: 3rd Floor, 120 Baker Street, London, W1U 6TU, United Kingdom.
13.2. For all questions related to the processing of personal data, please contact: support@myneurodoctor.ai.