Egton Medical Information Systems Ltd trading as Edenbridge Healthcare (we or us) are committed to protecting and respecting your privacy.
This privacy notice lets you know what happens to any personal data that you give to us, or any that we may collect from or about you. It applies to all products and services, and instances where we collect your personal data.
This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. ‘Processing’ for the purposes of this notice covers a very broad range of activities, including using, transferring, storing and even deleting.
Please read the following terms carefully to understand our views and practices regarding your personal data and how We will treat it.
For the avoidance of doubt, by registering with, or using, our websites, services or otherwise interacting with us, you consent to the collection, use and transfer of the relevant data and your information under the terms of this privacy notice.
We may collect and process the following information about you:
Information you give us:
The information We collect may be used in the following ways:
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Like most businesses We may rely on a range of legal bases in order to ensure that our use your personal data is lawful, including:
Where it is needed to provide you with our products or services, such as:
Where it is in our legitimate interests to do so (provided this is not overridden by considerations regarding your rights and interests), such as:
We may disclose your information to other organisations in certain situations. For example, We may disclose information:
The information that We collect from you will be processed (which may include, where relevant, storing it) in accordance with our obligations under the relevant laws which set out our obligations as someone that has personal data within our possession and control.
We will retain a record of your personal data in accordance with relevant law and based on the following criteria:
We use strict procedures and security features designed to prevent any unauthorised or unlawful access to the personal data which We control. All information you provide to us is stored securely at our offices. We also hold your personal data in secure data centres in the UK.
Any payment transactions will be encrypted using SSL technology. Where We have given you (or where you have chosen) a password that enables you to access certain parts of our website or services, you are responsible for keeping this password confidential. We ask you not to share your password information with anyone.
We are a UK based business and do not transfer any data outside of the European Economic Area.
Our websites may, from time to time, contain links to and from the websites of our partner networks, (from certain of our sites) advertisers or other third parties (for example, We include links below to the site of the Information Commissioner’s Office).
If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy notices and policies and that We do not accept any responsibility or liability for these notices or policies (and how they may be applied) or for any personal data that may be collected through those third-party websites or services, such as contact and location data. Please check the relevant third-party policies before you provide any personal data to those websites or use their services.
From time to time We would like to tell you about the products and services available from Edenbridge Healthcare.
If you have agreed to receive marketing materials from us then We may contact you through the post, by email, telephony, online, using social media, or by any other electronic means.
In addition, as noted above We have a legitimate interest in using personal data We hold in respect of individuals to let them know about our products and services. This ground will not apply if you are interacting with us in a personal capacity.
You have the right at any time to ask us not to process your personal data for marketing purposes. You can exercise your right to limit or prevent such processing by contacting us (see below) or by selecting an option to unsubscribe in any relevant electronic communication.
We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 50 contacts have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, practices in SW1). We may make use of the personal data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience.
You have a number of important legal rights regarding the manner in which personal data relating to you is used. You can find more information about your rights on the Information Commissioner’s Office website – please see ico.org.uk/for-the-public/
We have outlined below the key rights which We believe may be relevant to your use of our websites and services.
If you would like to exercise any of these rights, then please contact us using the contact information provided below. Please note that You may be asked to provide us with reasonable proof of your identity so that We can be sure that We are discussing your information with you (or if someone is making a request on your behalf, that they have the authority to do so).
You have the right to access certain information held about you so that you can be aware of, and verify the lawfulness of, the processing We undertake.
You can exercise your right of access by making what is generally referred to as a ‘subject access request’.
We will review each request which We receive and if We agree that We are obliged to provide personal data to you then We will (subject to certain limited exceptions provided under the relevant law) amongst other things: (i) describe it to you; (ii) tell you why We are holding it; (iii) tell you who it could be disclosed to; and (iv) let you have a copy of it (this may include providing an electronic copy).
If you identify that any personal data that We hold about you is wrong, inaccurate, or out of date then you may ask us to correct or update it. Please contact us via the details provided below and We will review each request and respond accordingly.
This is also known as the ‘right to be forgotten’. You have the right to require us to stop or to limit any processing We are undertaking in respect of your personal data if We no longer have a valid reason to do so or if We have held it for too long.
This is not an absolute right but every request We receive will be considered carefully and We will respond accordingly (providing grounds for any decision We make).
You are free to withdraw any consent which you have given to us in relation to our use of your personal data at any time. As noted above, you have the right to tell us to stop sending you any direct marketing materials at any time.
If you are unhappy about the way in which We have processed your personal data then you have a right to raise the issue or to lodge a complaint with the Information Commissioner’s Office – as noted above please see ico.org.uk/for-the-public/ for further details.
Additionally, should you wish to raise a complaint to us then please do so via email to email@example.com addressed for the attention of the Designated Complaints Handler. Within five working days of receiving your complaint, we will review your file and any other relevant documentation and send you a letter telling you how we propose to deal with your complaint. If you are not satisfied with our final decision, please let us know and we will review our decision again. We will let you know the result of any appeal within five working days of receiving your appeal.
We will keep this privacy notice under regular review, and We may update it from time to time (for example, to reflect changes We might make to our services or to reflect changes in the law or best practice).
Any changes We may make to our privacy notice in the future will be posted on this page. We encourage you to visit this page periodically so that you are aware of any changes which have been made and, where appropriate, notified to you by e-mail.
Last Updated: 22 July 2022
If you have any comments or concerns regarding our privacy notice, or the manner in which We handle your personal data or if you would like to exercise any of the rights outlined above then please do feel free to contact us at: firstname.lastname@example.org