SaySo Medical Privacy Policy

This website and platform is operated by SaySo Medical Ltd.

We take your privacy very seriously and we ask that you read this privacy policy carefully as it contains important information on:

the personal information we collect about you
what we do with your information, and
who your information might be shared with.

We may change this privacy policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access the Platform.

Who we are

SaySo Medical Ltd ('we' or 'us') are a 'data controller' for the purposes of the Data Protection Act 2018, the General Data Protection Regulation (EU) 2016/679 and any subsequent UK data protection legislation and we are responsible for, and control the processing of, your personal information. Our registered office address is C/O Roxburgh Milkins Limited, Merchants House North, Wapping Road, Bristol, United Kingdom, BS1 4RW.

We provide a web-based platform for healthcare professionals to access interactive content, pursuant to the terms and conditions of use at https://www.sayso.health (Platform).

Who does this privacy policy apply to?

This privacy policy applies to all registered users of the Platform, as well as prospective users that we may contact in relation to the Platform and any other individuals whose data we receive for the purposes of operating our business and providing our services.

If you are unsure how this policy applies to you, please contact us (see ‘How to contact us’ below) and we will be happy to help.

What information do we collect and process?

Personal information provided by you

During the course of accessing the Platform, contacting us, or otherwise dealing with us, you may provide us with a range of personal data which we will use in the course of our business. This personal information may include:

Your name or another unique identifier;
Your contact details (which may include your landline telephone number, mobile number, and/or email address);
Your country of residence;
Professional information (e.g. job title and/or type, professional qualifications, industry); and
Other related information that you provide as part of your profile on the Platform.

Information we collect automatically

Our website and services may collect certain information about you automatically (such as your IP address, geographical location, browser type and version, operating system).

Personal information provided by third parties

Occasionally we may receive information about you from other sources (such as our Platform customers, which are referring you to use the Platform or on whose behalf you will access and use the Platform), which we will add to the information we already hold about you in order to help us operate our business effectively.

Personal information about other individuals

If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:

transfer the personal data and give consent on his/her behalf to the processing of his/her personal data; and
receive on his/her behalf any data protection notices.

Sensitive personal information

We do not request, hold or process any sensitive personal information. We do not permit the uploading or sharing of any sensitive personal information via the Platform.

How we use your data and our legal basis for processing your data

We may process your data for a variety of reasons, including because:

you have consented for us to do so
we are legally obliged to e.g. to confirm your identity;
the processing is necessary for the performance of the contract with you to provide access to the Platform; or
it is in our legitimate business interests to do so.

In some instances, we will rely on your consent to process personal data and where we do this, it will be flagged to you at the time.

Our main processing activities for personal data, and the legal basis on which we perform those activities are:

Prospective users/marketing recipients:

We will process your personal data in order to contact you in relation to our Platform and keep a record of our communications.

Our legal basis for doing so will either be that we have received your consent, which you will have given when you provided the personal data to us or one of our Platform customers; or performance of a contract for your benefit, if you have been referred to us by one of our Platform customers. If you wish to object to direct marketing, you may do so by contacting us.

Users:

We will process your personal data in order to provide access to the Platform to you and to provide you with information and updates regarding the same. Our legal basis for doing so is that the processing is necessary for the performance of a contract. We will also keep a record of your data and use it for related purposes, including account management, customer support, and audit purposes, on the basis that we have a legitimate interest in doing so.

We may also contact you in relation to our products and services. Our legal basis for doing so will be the same as for prospective customers, as set out above.

Individuals about whom we receive information from our customers or suppliers:

We may receive information about individuals from our customers or suppliers, which we use in the course of our business. We use this information to provide information about the Platform and the opportunity to register to access the Platform. Our legal basis for doing so is either that you have consented to such use of your personal information or there is a legitimate interest in doing so.

Other processing activities

Monitoring and recording communications

We may monitor and record communications with you (such as emails) for the purpose of training, fraud prevention, and/or quality assurance. We may also retain copies of communications and details provided to us by you, for example support requests, account queries, complaints, for internal account management and auditing purposes. This is done on the basis of legitimate interests.

Storage of your information and who your information might be shared with

We store your personal data on cloud-based servers based in the European Economic Area (EEA).

You agree that we may disclose your information and use of the Platform with third parties which referred you to access the Platform, or on whose behalf you are accessing the Platform, on the basis that they have a legitimate interest in processing such information.

We may also disclose your personal data to:

our agents and service providers, to the extent that they require access to the data in order to provide goods/services to us, in which case they will be bound by a contract requiring them to process personal data in accordance with the requirements prescribed by data protection law;
law enforcement agencies in connection with any investigation to help prevent unlawful activity; and
a third-party purchaser if we sell our business, in which case, customer and user information will be a transferred asset.

Keeping your data secure

We will use technical and organisational measures to safeguard your personal data, for example:

access to your account is controlled by a password and user name that are unique to you; and
we store your personal data on secure servers.

While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason, we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see ‘How to contact us’ below).

What can I do to keep my information safe?

If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

Transfers of your information out of the EEA

We do not routinely transfer personal data outside of the EEA but may need to do so in certain limited cases. We will only do this if appropriate safeguards are place in accordance with data protection legislation.

How long do we keep your personal information?

We keep your personal information for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep personal information to comply with our legal and regulatory requirements. This duration will depend on whether you are a prospective user or user of the Platform, how long you continue to use the Platform, and our obligations to third parties.

What rights do you have?

You are responsible for ensuring that the information you provide to us is accurate, complete and up-to-date. You can review and change your information by contacting us.

You have a number of rights in relation to your personal data, these include the right to:

The right to be informed: find out how we process your data;
The right of access: request access to the personal data we hold about you. We will take steps to verify your identity before responding to your request. Once we have verified your identity we will respond as soon as possible and in any event within one month.
The right to rectification: request that your personal data is corrected if you believe it is incorrect or inaccurate;
The right to erasure: request for your personal data to be erased
The right to restrict processing and the right to object: obtain restriction on our, or object to, processing of your personal data;
The right to data portability: the right to receive a copy of the personal data you have given to us in a structured, commonly used, machine-readable format. We will take steps to verify your identity before responding to your request. Once we have verified your identity we will respond as soon as possible and in any event within one month.
The right to complain to the competent supervisory authority and lodge a complaint with the UK supervisory body, the Information Commissioner’s Office (the ICO) here https://ico.org.uk/. If you have a concern or complaint about the way we handle your data, we ask that you contact us in the first instance to allow us to investigate and resolve the matter as appropriate.

Furthermore, you have the right to:

if we are relying on consent, you can withdraw your consent to our processing of your personal data (including any direct marketing);
if we are relying on legitimate interests for direct marketing, you can object to receiving such direct marketing;

If you would like to exercise any of your rights or find out more, please contact us via info@saysomedical.com and a member of the team will be in touch with you promptly to process your request.

Changes to this Privacy Policy

We may change this Privacy Policy from time to time, and if we do so we will highlight any changes to these pages. If you continue to access or use our services after notified changes have come into effect, you will have agreed to the revised policy.

How to contact us

Please contact us if you have any questions about this privacy policy or the information we hold about you.

If you wish to contact us, please send an email to info@saysomedical.com or write to us at SaySo Medical, 51-53 Mount Pleasant, London, WC1X 0AE, United Kingdom

Please note that you can also contact us at the above email or address if you wish to exercise your right to have your account deleted and withdraw your consent of us processing your data. Our team will promptly process your request and ensure that your data is removed from our system.