Privacy policy

Effective Date: 03/01/2024
Last Updated: 27/04/2025

Note: This privacy policy applies only to our website and does not cover our API product or any integrations into third-party EHR systems. For product-related data processing, please contact us directly.


1. Who We Are

This privacy policy applies to the website operated by BMX Holdings Ltd (trading as EightX), registered in the United Kingdom.

Company: BMX Holdings Ltd (EightX)
Address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: dataprivacy@eightx.com


2. What Data We Collect

When you visit our website, we may collect the following types of data:

  • Device & usage data: IP address, browser type, device information, pages visited, and interaction data
    Legal basis: Legitimate interest (analytics and site performance)

  • Contact data (if you email us or fill out a form): Name, email address, and any message you send
    Legal basis: Consent

  • Cookies & tracking technologies: See section 5 below


3. How We Use Your Data

We use your data to:

  • Analyze website traffic and optimize performance (via Google Analytics)

  • Respond to inquiries and messages sent via contact forms or email

  • Provide interactive support (via Chatbase chat widget)

  • Maintain website security and detect abuse

We do not use website data for advertising or profiling.


4. Tools We Use

We work with the following service providers:

  • Framer (website hosting)

  • Google Analytics (traffic and usage analytics)

  • Chatbase (AI-powered support chat widget)

Each provider may process limited technical data (e.g. IP address, device info) necessary to deliver their service. All providers are bound by appropriate data protection agreements.


5. Cookies and Tracking

We use cookies and similar technologies to understand website usage and improve performance.

You can manage cookies through your browser settings. By continuing to use the site, you consent to our use of cookies in accordance with this policy.


6. Data Sharing and Transfers

We do not sell personal data. We may share data with service providers as listed above or as required by law (e.g. regulators or auditors).

Some data may be processed outside the UK/EU (e.g., in the US). We apply appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure GDPR-equivalent protection.


7. Retention

  • Analytics and usage data: retained for up to 14 months via Google Analytics

  • Contact form submissions: retained only as long as needed to respond

  • Logs: stored temporarily for technical and security purposes


8. Your Rights

If you are located in the UK, EU, or another region with data protection laws, you may have rights to access, correct, delete, or restrict your personal data.

To exercise any rights, please contact: dataprivacy@eightx.health
We aim to respond within 30 days.


9. Changes to This Policy

We may update this policy from time to time. Any material changes will be posted here and, if appropriate, communicated via email or on-site notice.


10. Contact

If you have questions about this privacy policy or how we handle your data, contact:

Maximilian Brandstaetter
BMX Holdings Ltd (EightX)
Email: dataprivacy@eightx.health
Postal: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom