In this policy:
- Square Health refers to Square Health Limited, company number 7054181 of Crown House, William Street, Windsor SL4 1AT, and We, Us, Our, Ours and Ourselves also refer to Square Health
- You, Your, Yours and Yourself refer to you
- Data Protection Law refers to the DPA, the GDPR and all other laws and regulations relating to the collection and processing of personal data
- DPA refers to the Data Protection Act 1998
- GDPR refers to the General Data Protection Regulation (EU regulation 2016/679)
- personal data refers to personal data as defined in the GDPR (including, if relevant, health data or any other sensitive or special category personal data as defined in the DPA or GDPR).
For the purposes of Data Protection Law, We are the data controller for personal data which are provided via Our website.
Information We may collect and process about You
Information You give to Us and which We collect about You
You may give Us personal data by entering information via Our website. The information we collect will typically include:
- Your name
- Email, telephone and other contact details
- Date of birth
- Information about your work/education and lifestyle.
We do not normally ask for or collect health or medical information or any other “sensitive” or “special category” data. (If We need to collect or process sensitive or special category data of this kind We will not process it without Your consent.)
Information about you which is automatically collected by use of Our website
Each time you use Our website we may automatically collect the following information:
- technical information, including the internet protocol (IP) address used to connect your device to the internet, your login information, browser type and version, time zone setting, operating system and platform, and your location;
- information about Your visit, including the date, time and length of Your visit, pages or service elements You viewed or used; response times, download errors, interaction information (such as scrolling and clicks), and any phone or other methods used to contact Us.
Uses made of information
We use information that You provide or that We collect about You for the following purposes:
- to provide information that You request about Our services or those of any affiliated company;
- to provide any services or any other products or services that You request from Us and that We agree to provide;
- to allow You to participate in interactive features of Our website or any Square Health service when You choose to do so;
- to process any application by You for employment or to provide services to Us;
- to make disclosures required by law or regulation;
- to assist in the detection of fraud.
We may also use information about You (subject to anonymising Your data):
- for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve Our products and services;
- as part of our efforts to keep Our website and services safe and secure;
- to measure or understand the effectiveness of Our services to You and others.
Disclosure of Your information
Disclosure of information to affiliated companies
We may share personal data relating to You, including any health or medical information or other sensitive personal data that You have agreed We may use, with any affiliated company which processes personal data on Our behalf. Our affiliated companies are Docslot Limited, Square Health Group Limited, Bodycare Limited and Doctors Chambers (UK) Limited and any of their respective holding companies and any subsidiaries of any of those holding companies, as well as our ultimate holding company and its subsidiaries. Holding company and subsidiary are defined in section 1159 of the UK Companies Act 2006.
Disclosure of information to other third parties
We may share personal data (but not sensitive personal data) with selected third parties including:
- (subject to anonymising Your personal data) advertisers and advertising networks that require the data to select and serve relevant adverts to You and others.
- Analytics and search engine providers that assist in the improvement and optimisation of Square Health Services and/or Square Health Apps.
We may disclose Your personal data to third parties:
- In the event that we sell or buy any business or assets, in which case We may disclose personal data on any anonymised basis to the prospective seller or buyer of such business or assets. But we will never disclose health or medical information or other sensitive personal data for this purpose.
- If all or substantially all of Our assets are acquired by a third party as part of a sale or transfer of our business, in which case personal data held by Us about our clients and users will be one of the transferred assets.
- If We are under a duty to disclose or share the personal data in order to comply with any legal obligation, or to protect the rights, property, or safety of Us, Our clients and users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Other than as above We will not share Your personal information with third parties without Your consent.
How we store your personal data
All personal data relating to You and provided or collected via Our website will be stored on secure servers located in the UK or EEA.
Passwords and security
Where We have given You (or where You have chosen) a password which enables You to access Our website or any part of it, You are responsible for keeping this password confidential. We ask You not to share a password with anyone.
We encrypt data which are transmitted via Our website. However, the transmission of information via the internet can never be completely securedue to security threats outside Our control. For this reason, although We will do our best to protect Your personal data, We cannot guarantee the security of Your data transmitted via Our website. Once We have received your information, We will use strict procedures and security features to minimise the risk of unauthorised access.
Our website may contain links to and from third party applications or websites. If You follow a link to any of these applications or websites, please note that these applications or websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal data to these websites.
Retention of Your personal data
Data Protection Law gives you the right to access information held about You and to ask Us to update or correct any inaccurate information. You also have the right to request us to delete Your personal data (‘right to be forgotten’) unless We have a contractual/legal requirement to keep your data.
We will not use Your personal data for marketing purposes without Your consent. If you have given Your consent, You have the right to withdraw Your consent and to ask Us not to use Your personal data for marketing purposes. If you have elected to receive marketing materials, at any time subsequently You can ask not to receive marketing materials.
You can exercise Your rights by writing to Us at Crown House, William Street, Windsor SL4 1AT OR by sending your request to firstname.lastname@example.org.
Data Protection Law also gives You the right to complain to the Supervisory Authority (www.ico.org.uk) about our data processing activities.