Privacy Policy
This policy explains what personal data we collect through this website, why we process it, the legal bases we rely on, who we share it with, how long we keep it, and the rights you have.
1. Who we are
HealthSeed AG (“HealthSeed”, “we”, “us”) is the controller responsible for the personal data processed through this website.
HealthSeed AG
Weidmannstrasse 5, 8046 Zurich, Switzerland
Commercial register number CH-020.3.056.106-6
Email: contact@healthseed.vc
If you have any question about this policy or about how we handle your personal data, contact us at contact@healthseed.vc.
2. Scope of this policy
This policy explains what personal data we collect through this website, why we process it, the legal bases we rely on, who we share it with, how long we keep it, and the rights you have. It applies to visitors to healthseed.vc and to people who contact us, subscribe to our updates, or apply to our expert community through the site.
We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
3. The personal data we collect
We collect personal data in the following situations.
Technical data when you visit the site. When you browse healthseed.vc, our hosting and infrastructure providers automatically process limited technical information such as your IP address, browser type and version, device type, the pages you view, and the date and time of access. This is standard for operating a website securely.
Contact and enquiry data. When you use a contact form or email us, we process the name, email address, company, and the content of your message, along with anything else you choose to provide.
Discovery call bookings. When you book a call, we process your name, email address, the chosen time, and any details you add, through our scheduling provider.
Expert community applications. When you apply to the expert community, we process your name, email address, LinkedIn profile, primary domain, geographic coverage, and the description of your expertise that you provide.
Updates and newsletter. If you subscribe to our updates or event calendar, we process your name and email address and a record of your consent. Section 5 sets out in full how subscriptions to our Vital Signs publication work.
We do not seek to collect special category data, such as health data, through this website. Please do not include sensitive personal information in free-text fields.
4. Why we process your data, and our legal bases
We process personal data for the purposes below. Where GDPR applies, the legal basis is shown in brackets.
To operate, secure, and maintain the website (legitimate interests in running a safe and functional site; lawful processing under the FADP).
To respond to your enquiries and to discuss a possible engagement (steps taken at your request before entering a contract, and our legitimate interests in responding).
To schedule and hold discovery calls (steps taken at your request; legitimate interests).
To assess expert community applications and manage our network (steps taken at your request; legitimate interests in building and managing the community).
To send updates, the event calendar, or market intelligence where you have asked to receive them (consent). You can withdraw consent at any time, with no effect on processing carried out before withdrawal.
To meet legal, regulatory, tax, and accounting obligations (legal obligation).
To establish, exercise, or defend legal claims (legitimate interests).
5. Vital Signs subscriptions
How a subscription starts. When you submit the sign-up form we send you one confirmation email and nothing else. Your subscription begins only when you click the confirmation link in that email. If you never click it, we send you no editions, and the pending sign-up is deleted after 30 days.
Our legal basis. We send Vital Signs on the basis of your consent (Article 6(1)(a) GDPR, and lawful processing under the FADP). The confirmation click is what records that consent, and we store the date and time of it as our evidence that you asked to receive the publication. You can withdraw consent at any time, with no effect on anything we sent before you withdrew it.
What we store. For each subscriber we hold your email address, your name if you gave one, which editions you selected, the page of this website you signed up from, the date and time you consented, the date and time you confirmed, your current subscription status, and a unique token that identifies you in the unsubscribe and preference links at the foot of every edition. We do not store your IP address for this purpose.
Delivery records. So that we can tell whether an edition reached you, we keep a delivery record for each message we send. It holds your email address, which template was sent, the subject line, the identifier our email provider assigns to the message, and the outcome that provider reports back, such as delivered, deferred, or bounced. We do not track whether you open an edition or which links you click.
Who sends it. Vital Signs is delivered through Brevo, our email service provider, which processes subscriber data only on our instructions and under a data processing agreement.
How to withdraw consent. Every edition carries an unsubscribe link at the foot, and one click is enough. There is no confirmation step and no reason required. Each edition also carries a preference link, which lets you reduce the editions you receive rather than stop them altogether. You can also email contact@healthseed.vc and ask us to remove you, and we will do it by hand.
How long we keep your data after you unsubscribe. When you unsubscribe we stop sending immediately, and within 30 days we delete your name, your edition selections, and the page you signed up from. We keep your email address, together with the dates you consented, confirmed, and unsubscribed, for as long as we operate the mailing list. This is a suppression record, and it exists so that a later import or sign-up cannot quietly put you back on a list you have left. Our basis for keeping it is our legitimate interest in honouring your opt-out. You may ask us to erase it, in which case we can no longer guarantee that outcome. Delivery records are kept for 24 months and then deleted.
Subscribers from before this confirmation step existed. A small number of people signed up between 30 June and 31 July 2026, when the confirmation step described above was not yet in place. We are writing to those people once to ask them to confirm. If they do not, we send them nothing further and their record is deleted.
6. Cookies and analytics
This website uses Google Analytics 4 to understand how visitors use the site, for example which pages are read and how people arrive. Google Analytics sets cookies (including _ga and _ga_*) and processes data on our behalf. Because this is not strictly necessary for the site to function, it runs only if you accept it.
When you first visit, a banner asks whether you accept analytics. Until you accept, no analytics cookies are set and no analytics data is collected. If you decline, the site works exactly the same; we simply receive no analytics data about your visit. We record your choice in a first-party cookie named hs-consent, which lasts 180 days, so we do not ask again on every visit.
Google Analytics may transfer data to Google servers, which can include transfers outside Switzerland and the European Economic Area, including to the United States. These transfers rely on the safeguards Google provides as our processor.
You can withdraw consent at any time by clearing your browser cookies for this site, which removes the hs-consent record and causes the banner to appear again on your next visit.
7. Who we share your data with
We do not sell your personal data. We share it only in the circumstances set out below.
Our service providers process personal data only on our instructions and under a data processing agreement. They fall into a small number of categories: website hosting and infrastructure, form handling, appointment scheduling, and email.
Where it helps us respond to your enquiry or deliver an engagement, we may share enquiry details with HealthSeed personnel and with contracted specialists in our partner network, each working under a confidentiality agreement.
We may also disclose personal data to professional advisers, authorities, or courts where this is necessary to comply with the law or to protect our rights.
8. International data transfers
Some of our service providers and partners are located outside Switzerland and the EU and EEA, including in the United States. Where we transfer personal data internationally, we rely on a recognised legal mechanism, which may be an adequacy decision, the EU and Swiss Standard Contractual Clauses, or certification under the EU-US and Swiss-US Data Privacy Framework, together with additional safeguards where appropriate. You can ask us for more detail on the safeguards in place using the contact details above.
9. How long we keep your data
We keep personal data only for as long as we need it for the purposes set out in this policy, and then delete or anonymise it.
Enquiry and contact data is kept for the duration of our exchange and for up to twenty-four months afterwards, unless a relationship develops, in which case it is kept for the duration of that relationship.
Expert community applications are kept for up to twelve months if we do not proceed, or for the duration of your membership if you join.
Vital Signs subscription data is kept as set out in section 5.
Data we must retain by law, for example for tax or accounting, is kept for the statutory period.
10. Your rights
Depending on where you are and which law applies, you have the following rights over your personal data: access, rectification, erasure, restriction of processing, objection to processing, data portability, and, where processing is based on consent, the right to withdraw that consent at any time.
To exercise any of these, contact us at contact@healthseed.vc. We will respond within the timeframes required by law.
If you are in Switzerland and believe we have not handled your data correctly, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC). If you are in the EU or EEA, you may lodge a complaint with the supervisory authority in your country.
11. Data security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including access controls, encryption in transit, and contractual safeguards with our service providers. No system is perfectly secure, but we work to protect your data in line with good practice and our legal obligations.
12. Children
This website is intended for professional audiences and is not directed at children. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date of the most recent update shown at the top.
14. Contact
For any question about this policy or your personal data, contact contact@healthseed.vc or write to HealthSeed AG, Weidmannstrasse 5, 8046 Zurich, Switzerland.