Privacy Policy

Last Updated: July 10, 2026

This Privacy Policy explains how Denis Technologies Limited and our subsidiaries ("Denis Technologies", "we", "us") collect, use, store, and share personal data when you use our website, SaaS portals (Taya), and outsourced claims administration systems.

As a key digital provider in the health and dental insurtech market, we frequently handle sensitive data. We act as both a **Data Controller** (for our own corporate data) and a **Data Processor** (on behalf of insurance partners and brokers). We maintain strict ISO/IEC 27001 certifications to protect all information.

1. Contact Details

For any queries regarding this policy, data processing practices, or your rights, please contact our Data Protection Officer:

• Entity Name: Denis Technologies Limited
• Registered Address: 23 Bramblys Cl, Basingstoke RG21 8UP, United Kingdom
• Registration Number: 6399615
• DUNS Number: 225861928
• DPO Email Contact: [email protected]
• Official Telephone: +44 7698 599546

2. What Data We Process

The type of personal data processed depends on your relationship with us:

• Brokers & Partners: Business contact details, usernames, and log data when accessing the Taya SaaS portal.
• Policyholders & Claimants: Name, address, date of birth, policy coverage details, transaction histories, and sensitive health data (e.g. dental procedure codes, dentist invoices, clinician notes) to settle claims.
• Website Visitors: IP address, cookie identifiers, and browser parameters to optimize layout performance.

3. Legal Grounds for Processing

Under GDPR and the UK Data Protection Act 2018, we process data based on the following legal bases:

• Contract Performance: To administer policies, collect premiums, and adjudicate member claims.
• Consent: When you submit questions via our contact form or authorize tracking cookies.
• Legal Obligation: To satisfy tax ledger rules, dunning protocols, and auditing records.
• Legitimate Interests: To check system security, track fraudulent claims, and upgrade software rule engines.

4. How Data is Shared

We do not sell personal data. We only share information with:

• Your primary insurance broker, MGA, or capacity provider.
• Secure third-party sub-processors (such as ISO-certified cloud hosts and secure banking portals).
• Regulatory or legal authorities if legally required.

5. Your Rights

You have the right to request access to the personal data we hold, demand rectifications, restrict certain processing paths, request data portability, or object to automated profiling. To exercise these rights, please write to [email protected].

6. Security and Retentions

We store data only as long as necessary for administrative, legal, or contract auditing requirements. All data is stored in ISO 27001 compliant cloud databases using high-level AES encryption.