SaySo Medical Privacy Policy

This website and platform is operated by SaySo Medical Ltd.

We take your privacy very seriously and we ask that you read this privacy policy carefully as it contains important information on:

the personal information we collect about you
what we do with your information, and
who your information might be shared with.

We may change this privacy policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access the Platform.

Who we are

SaySo Medical Ltd ('we' or 'us') are a 'data controller' for the purposes of the Data Protection Act 2018, the General Data Protection Regulation (EU) 2016/679 and any subsequent UK data protection legislation and we are responsible for, and control the processing of, your personal information. Our registered office address is C/O Roxburgh Milkins Limited, Merchants House North, Wapping Road, Bristol, United Kingdom, BS1 4RW.

We provide a web-based platform for healthcare professionals to access interactive content, pursuant to the terms and conditions of use at https://www.sayso.health (Platform).

Who does this privacy policy apply to?

This privacy policy applies to all registered users of the Platform, as well as prospective users that we may contact in relation to the Platform and any other individuals whose data we receive for the purposes of operating our business and providing our services.

If you are unsure how this policy applies to you, please contact us (see ‘How to contact us’ below) and we will be happy to help.

What information do we collect and process?

Personal information provided by you

During the course of accessing the Platform, contacting us, or otherwise dealing with us, you may provide us with a range of personal data which we will use in the course of our business. This personal information may include:

Your name or another unique identifier;
Your contact details (which may include your landline telephone number, mobile number, and/or email address);
Your country of residence;
Professional information (e.g. job title and/or type, professional qualifications, industry); and
Other related information that you provide as part of your profile on the Platform.

Information we collect automatically

Our website and services may collect certain information about you automatically (such as your IP address, geographical location, browser type and version, operating system).

Personal information provided by third parties

Occasionally we may receive information about you from other sources (such as our Platform customers, which are referring you to use the Platform or on whose behalf you will access and use the Platform), which we will add to the information we already hold about you in order to help us operate our business effectively.

Personal information about other individuals

If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:

transfer the personal data and give consent on his/her behalf to the processing of his/her personal data; and
receive on his/her behalf any data protection notices.

Sensitive personal information

We do not request, hold or process any sensitive personal information. We do not permit the uploading or sharing of any sensitive personal information via the Platform.

How We Use Your Data and Our Legal Basis for Processing Your Data

Overview:

The Platform hosts and distributes content from healthcare professionals, hospitals, other academic medical groups and content sponsored by pharmaceutical companies, which includes both promotional and non-promotional materials. This content is produced to keep healthcare professionals updated on the latest developments in medical treatments and pharmaceutical products.[AdC1]

Legal Bases for Processing:

We process your personal data under several legal bases:

Consent: Where you have explicitly agreed to our processing of your personal data, for example for receiving promotional materials.
Contractual Necessity: Where processing is essential to perform a contract with you, such as providing you access to our Platform.
Legal Obligation: Where processing is necessary to comply with a legal obligation, such as verifying your identity.
Legitimate Interests: Where processing is necessary for our legitimate business interests, including the distribution of educational and informational non-promotional materials from pharmaceutical companies via email, which we believe enhances your professional knowledge without promotional intent.

Specific Processing Activities:

Prospective Users/Marketing Recipients:

We process your personal data to contact you about our Platform and maintain communication records.
Legal Basis: Consent (where you have provided personal data directly or through our customers) or the performance of a contract (if referred by a Platform customer).
Opt-Out: You can object to direct marketing at any time by contacting us at info@saysomedical.com

Registered Users:
We process your data to provide access to the Platform and to send you updates and information about our services, including non-promotional content that is in your professional interest to receive.
Legal Basis: Contractual necessity for access and service provision; legitimate interests for distributing non-promotional, educational content via email, and for ongoing account management, customer support, and internal audits.
Communication: For promotional updates, we process based on your consent. For non-promotional, educational updates, we rely on our legitimate interests. Opt-out options are included in all communications.

Third-Party Information:
We may receive information about you from our customers or suppliers and use it to offer registration or information about our Platform.
Legal Basis: Consent (where applicable) or our legitimate interests in expanding our user base and enhancing our services.

Monitoring and recording communications

We may monitor and record communications with you (such as emails) for the purpose of training, fraud prevention, and/or quality assurance. We may also retain copies of communications and details provided to us by you, for example support requests, account queries, complaints, for internal account management and auditing purposes. This is done on the basis of legitimate interests.

Storage of your information and who your information might be shared with

We store your personal data on cloud-based servers based in the European Economic Area (EEA).

You agree that we may disclose your information and use of the Platform with third parties which referred you to access the Platform, or on whose behalf you are accessing the Platform, on the basis that they have a legitimate interest in processing such information.

We may also disclose your personal data to:

our agents and service providers, to the extent that they require access to the data in order to provide goods/services to us, in which case they will be bound by a contract requiring them to process personal data in accordance with the requirements prescribed by data protection law;
law enforcement agencies in connection with any investigation to help prevent unlawful activity; and
a third-party purchaser if we sell our business, in which case, customer and user information will be a transferred asset.

Keeping your data secure

We will use technical and organisational measures to safeguard your personal data, for example:

access to your account is controlled by a password and user name that are unique to you; and
we store your personal data on secure servers.

While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason, we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see ‘How to contact us’ below).

What can I do to keep my information safe?

If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Transfers of your information out of the EEA

We do not routinely transfer personal data outside of the EEA but may need to do so in certain limited cases. We will only do this if appropriate safeguards are place in accordance with data protection legislation.

How long do we keep your personal information?

We keep your personal information for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep personal information to comply with our legal and regulatory requirements. This duration will depend on whether you are a prospective user or user of the Platform, how long you continue to use the Platform, and our obligations to third parties.

What rights do you have?

You are responsible for ensuring that the information you provide to us is accurate, complete and up-to-date. You can review and change your information by contacting us.

You have a number of rights in relation to your personal data, these include the right to:

The right to be informed: find out how we process your data;
The right of access: request access to the personal data we hold about you. We will take steps to verify your identity before responding to your request. Once we have verified your identity we will respond as soon as possible and in any event within one month.
The right to rectification: request that your personal data is corrected if you believe it is incorrect or inaccurate;
The right to erasure: request for your personal data to be erased
The right to restrict processing and the right to object: obtain restriction on our, or object to, processing of your personal data;
The right to data portability: the right to receive a copy of the personal data you have given to us in a structured, commonly used, machine-readable format. We will take steps to verify your identity before responding to your request. Once we have verified your identity we will respond as soon as possible and in any event within one month.
The right to complain to the competent supervisory authority and lodge a complaint with the UK supervisory body, the Information Commissioner’s Office (the ICO) here https://ico.org.uk/. If you have a concern or complaint about the way we handle your data, we ask that you contact us in the first instance to allow us to investigate and resolve the matter as appropriate.

Furthermore, you have the right to:

if we are relying on consent, you can withdraw your consent to our processing of your personal data (including any direct marketing);
if we are relying on legitimate interests for direct marketing, you can object to receiving such direct marketing;

If you would like to exercise any of your rights or find out more, please contact us via info@saysomedical.com and a member of the team will be in touch with you promptly to process your request.

Changes to this Privacy Policy

We may change this Privacy Policy from time to time, and if we do so we will highlight any changes to these pages. If you continue to access or use our services after notified changes have come into effect, you will have agreed to the revised policy.

How to contact us

Please contact us if you have any questions about this privacy policy or the information we hold about you.

If you wish to contact us, please send an email to info@saysomedical.com or write to us at SaySo Medical, 51-53 Mount Pleasant, London, WC1X 0AE, United Kingdom

Please note that you can also contact us at the above email or address if you wish to exercise your right to have your account deleted and withdraw your consent of us processing your data. Our team will promptly process your request and ensure that your data is removed from our system.