Privacy Policy

Qoryx AI is the trading name of TSoul Consulting Limited, a company registered in England and Wales. We provide AI-powered workforce and compliance management tools that help UK care teams anticipate staffing risks, manage compliance, and match suitable professionals to service users. Qoryx is a digital technology platform. We do not employ or manage carers directly.

Company details

• Company name: TSoul Consulting Limited (trading as Qoryx AI)
• Registered address: 71–75 Shelton Street, London WC2H 9JQ, United Kingdom
• ICO registration number: ZB776772
• Email: privacy@qoryx.ai
• Data Protection Officer: dpo@qoryx.ai

Scope

This privacy policy applies when you use Qoryx services via our website, applications, or integrated systems. It applies to:

• Healthcare professionals
• Patients and families
• Organisational users
• Website visitors

Data roles

TSoul Consulting Limited acts as a data controller for individual platform users. Where Qoryx processes personal data on behalf of organisational customers for workforce management, compliance, or rostering, Qoryx acts as a data processor and a separate Data Processing Agreement applies.

Information we collect

Legal basis for processing

We process data under UK GDPR Articles 6 and 9 for contractual necessity, legal obligation, legitimate interests, explicit consent, and health or social care provision.

How we use and share data

We use personal data to provide services, verify credentials, enable matching, ensure safeguarding, prevent fraud, and improve platform functionality. Data is shared only with:

• Other users where necessary for bookings
• Organisational customers under contract
• Regulators or law enforcement when legally required
• Trusted service providers under strict contracts

International transfers

Data is stored primarily in the United Kingdom. Where transfers occur, appropriate safeguards such as the UK IDTA are used.

Cookies

We use essential cookies for platform operation and optional analytics cookies subject to consent. We do not use third-party advertising cookies.

Data retention

Data is retained only as long as necessary:

• Verification documents deleted within 30 days of verification
• Inactive patient accounts deleted after two years
• Professional accounts archived after one year and deleted after three years
• Logs anonymised after 12 months

Your rights

Users have rights of access, rectification, erasure, objection, restriction, portability, and withdrawal of consent. Requests can be made via privacy@qoryx.ai. Users may also complain to the ICO.

Security

We apply encryption, access controls, audit logging, and regular security reviews. Access is limited to authorised personnel.

Automated decision-making and AI

Qoryx uses AI to generate predictive insights and matching recommendations. These outputs are decision-support tools only. Humans always retain oversight and may override recommendations.

Changes

We may update this policy to reflect legal or operational changes. Material updates will be communicated in advance.

Contact

• Privacy team: privacy@qoryx.ai
• DPO: dpo@qoryx.ai
• Postal address: TSoul Consulting Limited (trading as Qoryx AI), 71–75 Shelton Street, London WC2H 9JQ, United Kingdom