2. A summary of the data Doctify collects, and why
Doctify needs to collect, process and store personal information about you in order to provide our service of connecting patients with the most appropriate healthcare provider, and for you to review them.
If you are a patient, the personal data we will process to facilitate your booking depends on your healthcare provider, but usually includes detailed personal information such as name, age, sex, date of birth, contact details (telephone numbers and email addresses) insurance authorisation code, address, details of your general practitioner, insurance policy number, healthcare provider booked, patient registration number (PHIN questions only), time of booking, date and location of booking and other relevant free text.
If you are a healthcare provider, the personal data we will handle includes but is not limited to, age, sex, date of birth, contact details (telephone numbers and email addresses), details of your place of work, your qualifications, key search words, patient booking slots and/or languages spoken.
More detail on this is available in section 3 below.
3. More detail about the data Doctify collects, and the lawful basis.
If you are a patient, we collect the following personal data from you when you use the Doctify Network
When you make a booking, we share your personal data with the organisations involved in providing care to you – usually your insurance company and your healthcare provider.
If you are a healthcare provider, we collect the following personal data from you when you use the Doctify Network
4. Protecting and sharing information
As mentioned above, we only share identifiable information about patients to facilitate their care. Identifiable information about healthcare providers is shared as part of the reviews left by patients across the Doctify Network, which are generally available to the public. We may also share publicly available review data with insurance providers.
We also create anonymous data from the personal data flowing through the Doctify Network. This may include, for example, statistics on how many people experienced a particular injury in a geographical area. We do not commercialise patient identifiable data.
If our business is sold, we will transfer your data to the purchaser because we have a legitimate interest to ensure our business can be continued by the buyer. We may also be required to disclose your data if we are under a legal obligation to do so. Unless we are prevented from notifying you (such as by a court order) we will always notify you before we disclose your data in this way.
We use other companies to provide payment processing, maintenance, hosting and database management services to us. These companies have access to your data (but they have signed strict contracts under which they can only use your data in the way we tell them to)
5. How long do we hold your data for?
Where you sign up to our Doctify Network as a patient or a healthcare provider we will store your data for a period of 6 years from the date the contract between us has been terminated.
Where you are only receiving technical or marketing information from us, we will store your contact details until you unsubscribe, or withdraw your consent to receive these communications from us. Please keep in mind that very limited details (your email address) may be retained by us in accordance with data protection law to ensure we don’t contact you again.
Where you provide information in connection with reporting a problem with our service, we will store any such information for as long as reasonably required to fix such a problem and prevent any future occurrences but in any event, no longer than 6 years.
Where you contact us and we keep a record of that correspondence we will keep that for as long as is reasonably required.
6. Storage of your data
7. Your rights under data protection law
You have various other rights under applicable data protection laws, including the right to:
- access your personal data (also known as a “subject access request”);
- correct incomplete or inaccurate data we hold about you;
- ask us to erase the personal data we hold about you;
- ask us to restrict our handling of your personal data;
- ask us to transfer your personal data to a third party;
- object to how we are using your personal data; and
- withdraw your consent to us handling your personal data.
Privacy law is often complicated, and whether these rights are available to you sometimes depends on the types of data we are handling about you. If you would like to exercise any of these rights, please contact us at email@example.com.
Right to complain: If you wish to complain about our use of your personal data you may complain to the UK Information Commissioner’s Office (ICO) which can be contacted in writing at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone (0303 123 113) or by email at firstname.lastname@example.org.
9. The internet
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your User Data, we cannot guarantee the security of your User Data transmitted to our Doctify Network; any transmission is at your own risk. Once we have received your User Data we will use procedures and security features to try to prevent unauthorised access.
10. Information about us
We have worked hard to produce a short notice that clearly explains how your data is used.
Your feedback and suggestions on this notice are very welcome. If you feel that we have overlooked an important perspective or used language which you think we could improve, please let us know by contacting us at email@example.com. Or you can write to us at our registered office: Doctify Limited, Curtain House, 134-146 Curtain Road, Shoreditch, London EC2A 3AR.
This privacy notice was last updated on 08 July 2021.