Privacy Policy

How will my personal information be kept safe

We are committed to ensuring the privacy of your personal information and have the following controls in place to do so for medical data:

• The user records will be stored in a secure electronic environment where unauthorised access cannot be obtained.
• At no time will user records be accessible by non-authorised personnel
• Data held on computer is password protected and access to it limited in accordance with the policy on confidentiality.

Processing of sensitive personal information

Where we are processing your sensitive/special category personal information one of the following conditions will also apply. Sensitive personal information includes racial or ethnic origin, data concerning health or data concerning a natural person’s sex life or sexual orientation:

• you have given your explicit consent to the processing;
• the processing relates to personal information which are manifestly made public by you;
• the processing is necessary for the establishment, exercise or defence of legal claims;
• the processing is necessary to protect an individual’s vital interests where the individual cannot give consent; or
• the processing is necessary for reasons of substantial public interest;

Who receives your personal information

We may disclose your personal information to:

• our affiliates or third-party data processers who may process data on our behalf to enable us to carry out our services and usual business practices, e.g. our laboratory service;
• other members of support staff involved in the delivery of our services, such as admin staff;
• anyone that you ask us to communicate with or provide as an emergency contact (e.g. your next of kin );
• relevant parties if we have concerns about your wellbeing if you provide your consent or in order to protect your vital interests;
• NHS or private sector healthcare providers;
• the police and other third parties where reasonably necessary for the prevention, investigation, prosecution or detection of crime;
• our insurers;
• debt collection agencies;
• our third party services providers including for example software providers, auditors, lawyers, and tax advisers; and
• law enforcement agencies, courts or other relevant party, to the extent necessary for the establishment, exercise or defence of legal rights.

Accuracy of your personal information

It is important that the personal information we hold about you is accurate and up to date. We take all reasonable steps to ensure that this is the case but we do not undertake to check or verify the accuracy of personal information provided by you.

Please keep us informed if your personal information changes during your relationship with us either by logging onto your account on the website or by contacting us at info@newwomanhealth.co.uk. We will not be responsible for any losses arising from any inaccurate, deficient, or incomplete personal information that you provide to us.

International transfers of personal information

Personal information we collect from may be transferred, stored and/or processed outside the United Kingdom including to the USA and the EEA.
In connection with such transfers we will seek to ensure that:

• there are appropriate safeguards in place such as European standard contractual clauses between us and the recipient; or
• an adequacy decision has been made by the United Kingdom such that the data protection regime in the relevant location or jurisdiction ensures an adequate level of protection for personal information; or
• one of the derogations for specific situations in the first sub-paragraph of Article 49(1) GDPR (or the equivalent provisions of applicable data protection legislation in the UK) applies to the transfer, storage or processing.

How long we store your personal information for

We will store your personal information for the time which is appropriate in accordance with our record retention policy and applicable regulations.

Your rights in relation to your personal information

As well as being able to withdraw any consent you have given to our processing your personal information, you may also have the following additional rights:

• the right to request access to your personal information that we process or control;
• the right to request rectification of any inaccuracies in your personal information or, taking into account the purposes of our processing, to request that incomplete data is completed;
• the right to request, on legitimate grounds as specified in law:
  • erasure of your personal information that we process or control; or
  • restriction of processing of your personal information that we process or control.
• the right to object, on legitimate grounds as specified in law, to the processing of your personal information;
• the right to receive your personal information in a structured, commonly used and machine-readable format and to have your personal information transferred to another controller, to the extent applicable in law; and
• the right to make a complaint regarding the processing of your personal information with the Information Commissioner’s Office.

If you would like to exercise any of the rights set out above, please contact us using the contact details set out in the ‘Contacting Us’ heading at the start of this policy.