Privacy Policy

Last updated: 15 September 2026

SideLight AI is a legaltech platform based in London, United Kingdom and operates the website sidelight.ai. This privacy policy informs you of SideLight AI’s policies regarding the collection, use, and disclosure of personal data when you use SideLight AI’s services, when you visit SideLight AI’s website or express interest in SideLight AI’s services.

Information Collection and Use

SideLight AI collects personal data when you use SideLight AI’s services, register on SideLight AI’s website, or when you otherwise interact with SideLight AI. The personal data SideLight AI collects may include, but is not limited to:

  • Contact information, such as your name and email address. 

  • Technical information, such as your IP address, browser type and version, and device information.

  • Documents and files which contain information identifying or describing an identifiable individual, including, but not limited to information relating to their name, age, gender, reproductive status, marital status, national, ethnic or social origin, sexual orientation, physical or mental health (including medical histories, diagnoses, treatment information and genetic and biometric data), disability, conscience, belief, culture, language and birth of the individual and any identifying number, address or contact information of the individual. Where a Sidelight AI client requests and agrees, SideLight AI may collect personal data direct from healthcare providers and systems on behalf of its client.

  • Usage data, such as the date and time you access SideLight AI’s website UI elements, clicks, storage, log ins, pages viewed, other log information and the amount of time spent on the website.

How SideLight AI uses your data

SideLight AI uses your personal data for the following purposes: 

  • Providing SideLight AI’s services: To provide SideLight AI’s clients, customers and end users with access to SideLight AI’s platform, deliver claims document management and other services, and manage client accounts. 

  • Improving SideLight AI’s Services: To analyse usage patterns, improve SideLight AI’s platform’s performance, and enhance user experience. 

  • Client Support: To respond to client and end user inquiries, resolve issues, and provide technical support. 

  • Billing and Payments: To process client payments and manage client subscriptions. 

  • Compliance and Security: To ensure SideLight AI’s services are secure, prevent fraud, and comply with applicable legal requirements and protecting user accounts against unauthorised access.

Lawful basis for processing personal data

When you supply any personal information to SideLight AI, SideLight AI has legal obligations towards you in the way SideLight AI uses it. SideLight AI will always ensure that whenever personal data is processed, industry standards and legal requirements are maintained. SideLight AI relies on the following legal bases to process your personal information:

  • Consent: SideLight AI may process your information if you have given SideLight AI permission (i.e. consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. 

  • Performance of a Contract: SideLight AI may process your personal information when SideLight AI believes it is necessary to fulfill SideLight AI’s contractual obligations to you, including providing SideLight AI’s services or at your request prior to entering into a contract with you.

  • Legitimate Interests: SideLight AI may process your information when SideLight AI believes it is reasonably necessary to achieve SideLight AI’s legitimate business interests and those interests do not negatively affect your interests and fundamental rights and freedoms. For example, SideLight AI may process your personal information for some of the purposes described in order to diagnose problems and/or prevent fraudulent activities.

  • Legal Obligations: SideLight AI may process your information where SideLight AI believes it is necessary for compliance with SideLight AI’s legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend SideLight AI’s legal rights, or disclose your information as evidence in litigation in which SideLight AI are involved.

  • Vital Interests. SideLight AI may process your information where SideLight AI believes it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person. 

Where SideLight AI provides its services to its clients and its end users, SideLight AI will enter into a data processing agreement with its clients. In this case, SideLight AI’s clients are and remain the “data controller” responsible for your personal information (which may include information about your physical or mental health). In this case, SideLight AI merely processes your information on its clients’ behalf in accordance with its clients’ instructions. If you want to know more about SideLight AI’s clients’ privacy practices, you should read their privacy policies and direct any questions you have to them.

Data Retention

SideLight AI will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. SideLight AI will retain and use your information to the extent necessary to comply with its legal obligations, resolve disputes, and enforce SideLight AI’s policies. When your data is no longer needed, SideLight AI will securely delete or anonymise it.

Disclosure of Data

SideLight AI may disclose information to its carefully selected third parties to provide elements of SideLight AI’s services and management of these services, such as hosting, storage, document classification and event extraction. If the third-party processes data on SideLight AI’s behalf, SideLight AI will ensure that the processor only has the information they require to perform their specific service and is only entitled to process personal data to SideLight AI’s specific instructions.

SideLight AI primarily stores your data within the UK or the European Economic Area. If SideLight AI needs to transfer your personal information to another organisation for processing in countries that are not located in the United Kingdom, European Economic Area or listed as ‘adequate’ by the Information Commissioner’s Office, SideLight AI will only do so if SideLight AI has sufficient protections in place to safeguard information, including, where appropriate, contractual terms approved by the relevant regulatory authorities.

SideLight AI may also disclose your personal data to comply with legal requirements, to enforce SideLight AI’s policies, or to protect the rights, property, or safety of SideLight AI, SideLight AI’s users, or others.

Security

SideLight AI takes the security of your personal data very seriously. SideLight AI has implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

SideLight AI limits access to users’ personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process users’ personal data on SideLight AI’s instructions and they are subject to a duty of confidentiality.

Communications

SideLight AI may communicate with its clients, end users and other persons by email. SideLight AI may invite you to opt in to promotional communications from SideLight AI that are not strictly related to the provision of its services to you.

Your Rights

You have the right to request access to your personal data and to request that it be corrected, updated, or deleted. You may also have the right to request the transfer of your personal data to another party.

If you terminate your relationship with SideLight AI, portions of your personal information may be retained in back-ups and archives for as long as is reasonably necessary to assist SideLight AI in meeting SideLight AI’s legal compliance obligations.

If you have any concerns or questions about SideLight AI’s Privacy Policy, please contact SideLight AI at privacy@sidelight.ai

Changes to Privacy Policy

SideLight AI reserves the right to update this Privacy Policy from time to time. Please refer to the date at the top of this page to determine when this Privacy Policy was last revised. SideLight AI will notify you of any changes by posting the new Privacy Policy on this page. Any changes to SideLight AI’s Privacy Policy will become effective upon posting of the revised Privacy Policy on SideLight AI’s website. By continuing to use SideLight AI’s website and/or services following such changes, users will be deemed to have agreed to such changes. You are advised to review this Privacy Policy periodically for any changes.

Links to Other Websites

From time to time, SideLight AI’s website may contain links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. SideLight AI does not control these third-party websites and is not responsible for their privacy statements. When you leave SideLight AI’s website, SideLight AI encourages you to read the privacy policy of every website you visit.