Privacy Policy
Privacy Notice
Your privacy and data security are important to us. This privacy notice sets out how and why PatientView collects and stores personal data, in compliance with the EU’s General Data Protection Regulation (GDPR) which came into force on 25 May 2018.
It covers:
- Why and for what purposes we collect and use personal information
- What kinds and sources of personal information we collect
- Who we share personal information with
- How long we retain personal information for
- How and to whom we might transfer personal information
- The legal rights of anyone whose personal information we hold
- Other relevant information, including how to contact us
When you use this website and/or provide us with personal information you are agreeing that we may use your personal information for the purposes set out in this privacy notice.
This privacy notice was last updated 7th January 2019 and replaces and supersedes all previous privacy notices.
Who we are
PatientView Limited is registered in England no 3944382 at One Fleet Place, London EC4M 7WS, UK. PatientView is registered with the Information Commissioner’s Office (ICO) in the UK as a data controller. (number Z7133076).
Why and for what purposes we collect personal data
We collect, store and use your personal information as set out in this section. The overarching purpose of processing your personal data is to help the voices of patient and carer groups to be heard and considered in healthcare decision-making. Your information may be shared with members of our group and some third parties as is set out in more detail below in the ‘Who we might share personal information with’ section.
What we collect | How we use it |
---|---|
Information that you give us (on our website or otherwise) as a representative of a patient group/organisation or if you are interested in receiving our reports:
|
We use this information, including to :
|
Information about the way you use our services including:
|
We use this information, including to:
Undertake statistical analysis and research. |
Information when you communicate with us whether in person, through our website or via email, over the phone, through social media or via any other medium, including:
The details of our messages to you. |
We use this information, including to:
|
Information that we collect through your use of our website including:
|
We use this information, including to:
|
Information that we collect incidentally from other sources or public sources, including:
|
We use this information, including to:
|
Legal requirements
We collect and use your information for a variety of reasons. We need some information to perform our services – for example, your contact details. Some information is processed because you’ve given your consent to that, which can be withdrawn at any time by contacting us.
Other information we collect because we have legitimate interests, for example, in:
Developing and maintaining relationships with representatives of patient organisations, partners and other companies in the medical sector;
Understanding how our services and website are used;
Understanding and responding to feedback; and
Personalising our communications and reports so we’re better able to provide content relevant to you and your organisation.
We may from time to time need to collect certain types of information to the extent required for compliance with any legal requirement placed upon us. If any such information is not provided where required, we may not be able to provide a product or service to you. Your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defence of a legal claims. We will not delete personal information if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.
How long do we keep your information?
We will keep your information for as long as it is reasonably necessary. It will depend on factors such as whether to the best of our knowledge you remain in your position at your organisation, whether you have interacted with recent communications or if you purchase a report from us, whether you have any outstanding purchases with us. We will also routinely refresh our information to ensure we keep it up-to-date. We will also retain your information as necessary to comply with legal, accounting or reporting requirements.
All survey data, identifiable or anonymous, are stored in our database, so we can track changing attitudes and conduct benchmark studies year on year, where relevant. Personal identifiable data can be deleted at your request, but we may retain an anonymised version of the data for ongoing research purposes. For more information on requesting deletion of your personal data, please see the ‘Your rights’ section below.
Who we might share personal information with
There are certain circumstances where we transfer your personal data to employees, contractors and to other parties.
Your personal data is shared with the following third parties for the purposes of running our surveys to produce health sector reports: Campaign Monitor and SurveyMonkey. You can find more information about their privacy practices on their respective websites. [https://www.campaignmonitor.com/trust/gdpr-compliance and https://www.surveymonkey.com/mp/gdpr/?ut_source=footer ]
Our suppliers and service providers will be required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in connection with the performance of their function. They will not be permitted to use your information for any purposes other than those outlined in this privacy notice.
Unless you explicitly consent, we do not share your personal data with health-related partner organisations where our research projects are carried out in conjunction with them or on behalf of them (for example, patient advocates, pharma or medtech industries, health and IT sector associations and networks, health foundations/charities or government agencies). Only anonymised results containing no personal identifiable data are shared with such partners unless explicitly and clearly set out at the start of the research project and with your explicit consent.
Please note your personal information may be transferred to other third-party organisations in certain scenarios (although these are unlikely in the foreseeable future):
If we discuss selling or transferring part or all of our company – the information may be transferred to prospective purchasers under suitable terms as to confidentiality;
If we are reorganised or sold, information may be transferred to a buyer who can continue to provide services to you;
If we’re required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – for example the Police; and
If we are defending a legal claim your information may be transferred as required in connection with defending such claim.
Your personal data may be shared if it is made anonymous and aggregated (for example, in our health sector reports), as in such circumstances the information will cease to be personal data.
Links to third-party websites
Our website, newsletters, email updates and other communications may, from time to time, contain links to and from the websites of others including our partner networks, advertisers and other group companies and/or social networks as offered to you and supported by your browser. The personal data that you provide through these websites is not subject to this privacy notice and the treatment of your personal data by such websites is not our responsibility. If you follow a link to any of these websites, please note that these websites have their own privacy notices which will set out how your information is collected and processed when visiting those sites. For more information about the purpose and scope of data collection and processing in connection with social sharing features, please visit the privacy notices of entities through which you chose to share.
Where we store the data we collect
Our servers, where your personal data is stored, are based in the UK. If at any point, your data is transferred outside of the European Economic Area (EEA), we will ensure that the transfer is governed by a contract including Standard Contractual Clauses approved by the European Commission in accordance with Article 46(2)(c) of the General Data Protection Regulation
Your rights as the data subject
You have certain rights in relation to your information. The availability of these rights and the ways in which you can use them are set out below in more detail. Some of these rights will only apply in certain circumstances. If you would like to exercise, or discuss, any of these rights, please contact us at [email protected].
-
- Access: you are entitled to ask us if we are processing your information and, if we are, you can request access to your personal information. This enables you to receive a copy of the personal information we hold about you and certain other information about it.
- Correction: you are entitled to request that any incomplete or inaccurate personal information we hold about you is corrected.
- Erasure: you are entitled to ask us to delete or remove personal information in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims.
- Restriction: you are entitled to ask us to suspend the processing of certain of your personal information about you, for example if you want us to establish its accuracy or the reason for processing it. In certain circumstances we may not be able to do this or may not be required to do this. For example, if the information is relevant to legal claims.
- Transfer: you may request the transfer of certain of your personal information to another party.
- Objection: where we are processing your personal information based on a legitimate interest (or those of a third party) you may challenge this. However, we may be entitled to continue processing your information based on our legitimate interests or where this is relevant to legal claims.
If you want to exercise any of these rights, please email [email protected].
You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the European Union where you are habitually resident where we are based or where an alleged infringement of Data Protection law has taken place. In the UK you can make a complaint to the Information Commissioner’s Office (Tel: 0303 123 1113 or at www.ico.org.uk).
Direct Marketing
We may use the information you give us for direct marketing purposes to provide updates; newsletters; events; or other communications that we think may interest you. Where required by law, we will only do this with your consent. As a result of the rights above, you can opt out of receiving such communications at any time. You can do this by clicking on the “unsubscribe” link included at the end of any marketing email we send to you, or by contacting [email protected] and requesting the same.
This is a summary of your rights that are relevant to the way we collect and process data. For a full overview, please visit the Information Commissioner’s (ICO) website: https://ico.org.uk/your-data-matters/. If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with the ICO
Data security
We are committed to keeping your personal information safe. We have physical, technical and administrative measures in place to prevent unauthorised access or use of your information. In the event of a data breach, we will consider the likelihood and severity of any risk to person’s rights and freedoms. If we assess there is a significant risk we will notify the ICO and the persons concerned.
Children
We do not knowingly collect information from children or other persons who are under 18 years old. If you are under 18 years old, you may not submit any personal information to us or subscribe to the services. If you believe we might have any personal information from or about a person under the age of 18, please contact us as set out in the ‘How to contact us’ section below.
How to contact us
You can contact us by phone on +44-(0)7960-855-019, or by email: [email protected], or via the ‘Contact Us’ page of our websites: www.patient-view.com, www.myhealthapps.net, www.myhealthappsblog.com
Changes to this privacy notice
If we change anything important about this notice, we will highlight those changes at the top of the notice and provide a prominent link to it for a reasonable length of time following the change and prior to the change taking effect.