Privacy Notice

Graphnet Health Limited is responsible for your personal data. This notice explains how we collect and use your data when you use our website, such as when you sign up for newsletters or buy a product or service.

If you are a user of Graphnet products you may also be interested in our page on Managing personal information with the NHS Login and Personal Demographic Service.

This notice follows the Data Protection Act 2018 and UK General Data Protection Regulation guidelines from the Information Commissioner’s Office (ICO).

1. Keeping your information accurate

Please let us know if your personal data changes during your relationship with us to keep it accurate and current.

2. The data we collect about you

We may collect and use different types of personal data, including:

• Identity data: Name, job title, username, marital status, etc.
• Contact data: Address, email, phone numbers.
• Technical data: IP address, browser type, time zone, etc.
• Profile data: Username, password, purchases, interests, feedback.
• Usage data: How you use our website, products, and services.
• Marketing data: Your preferences for receiving marketing from us and third parties.

We do not collect:

• Sensitive data.
• Information about criminal convictions.
• Data about children under 13.

3. How we collect your data

We collect data through direct interactions, such as:

• Creating an account.
• Subscribing to services or publications.
• Requesting marketing.
• Entering competitions or surveys.
• Providing feedback.

4. How we use your data

We use your data when the law allows, such as:

• To fulfill a contract with you.
• For our legitimate interests, unless your rights override these.
• To comply with legal obligations.

We usually do not rely on consent, except for direct marketing via email or text. You can withdraw consent anytime by contacting us.

You can opt out of marketing messages anytime by following the opt-out links or contacting us. Opting out does not affect data provided for services you receive.

5. Sharing your data

We may share your data with:

• Other companies in the Graphnet Health group.
• Service providers.
• Professional advisers (lawyers, bankers, auditors, insurers).
• Third parties in case of business transfers or mergers.

Specifically, we may share data with:

• Docobo (our subsidiary).
• Health Service Journal.
• Digital Health.

We require third parties to respect your data's security and use it only for specified purposes.

6. International transfers

We do not transfer your data outside the European Economic Area unless extra protection is in place.

7. Data security

We have security measures to protect your data from loss, misuse, or unauthorised access. Only those who need to know will have access to your data.

We have procedures for data breaches and will notify you and the ICO if required.

8. Data retention

We keep your data only as long as necessary for the purposes we collected it, including legal, accounting, or reporting requirements. Contact us for details on retention periods.

9. Your legal rights

You have rights under data protection law, including:

• Access: Request copies of your data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request data deletion in certain circumstances.
• Restriction: Limit data processing in certain circumstances.
• Objection: Object to data processing in certain circumstances.
• Data portability: Transfer your data to another organization or to you.

Usually, there is no charge for exercising your rights, and we respond within one month. We may ask for identification to confirm your identity.

To exercise your rights, contact our Data Protection Officer (DPO).

10. Cookies

We use Google Analytics to measure website performance and usage. Accept cookies to help us understand how you use our site. You can change your preferences anytime by clicking the grey star at the bottom right of our site.

11. Contact us about your personal data

If you have questions about how we use your personal data, you can contact our DPO:

• Mail: Graphnet Health Limited, Ground Floor, Building 5 Caldecotte Lake Drive, Caldecotte, Milton Keynes, Buckinghamshire, MK7 8LE.
• Email: dataprotectionofficer@graphnethealth.com
• Phone: 03330 771988

If we can't resolve your query, you can also contact the Information Commissioner’s Office (ICO) for advice:

• Mail: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
• Phone: 0303 123 1113
• Website: www.ico.org.uk