This notice explains how your personal data is processed for the provision of the Tirzepatide Self-Referral.

References in this Privacy Policy to “we” and “us” are to Health Call Solutions Ltd (company number 10218146). It is important that you take time to read it carefully.  This Privacy Policy sets out the basis on which any personal data we collect from you or that you provide to us will be processed by us.

When you use our Tirzepatide Self-Referral, you trust us with some information, this can be personal and non-personal. In legal terms, we are a “data processor”. This is a legal term used to describe the person or organisation which processes personal data under the controller’s instructions. The “data controller” for the service provided through Health Call is North East and North Cumbria Integrated Care Board (NENC ICB).

Health Call Platforms and Applications delivered via inhealthcare services will be referred to as ‘Self-Referral’ ‘Applications,’ ‘Services’ or ‘our Services’ throughout this document.

WHO ARE WE?

Heath Call Solutions Ltd are a unique NHS-owned digital health company. We were set up to share digital health expertise and resources to drive down the costs of health and care provision – whilst also improving outcomes for the population. You can find out more about us on our website by clicking here.

How we process data

Data is collected by way of completing a self-referral form, hosted by inhealthcare.

Personal Data:

Personal data is processed in order to ensure data is collected from the correct individual. Personal information linked to you will be used to invite you to education sessions and will be shared with your local health providers to triage your self-referral.

The Self-Referral platform processes data on behalf of NENC (your data controller). The data controller for this solution is NHS NENC ICB. The privacy policy can be found here: North East and North Cumbria NHS | Privacy Notice.

WHAT INFORMATION DO WE COLLECT AND WHEN DO WE COLLECT IT?

The information stored on the inhealthcare patient portal includes:

  • Full name
  • Date of Birth
  • NHS Number
  • Mobile Number
  • Home Phone Number
  • Work Phone Number
  • Email address
  • Contact Preference
  • Gender
  • Address
  • Registered GP

Source of Information:

  • Patient, collected by enrolment to service.
  • Personal demographic service (PDS) which is used to validate and populate the demographic details of the patient.

YOUR RIGHTS

You have the right to object to our use of your personal data or ask NENC ICB (Data Controller) to remove, delete or stop using your personal information. You may ask NENC ICB (Data Controller) to restrict the use of your data if the data is not accurate or your personal information is no longer relevant. You have the right to request a copy of your personal data stored by Health Call. If you want to access your data, ask us to delete it or restrict how we use it, please contact NENC ICB (Data Controller) where your data is located.

All rights requests will be managed and responded to under the instruction of the data controller. The data controller is NENC ICB.

If you have any objections or complaints relating to your data, we will investigate and attempt to resolve them. We will make every reasonable effort to allow you to exercise your rights as quickly as possible and within the timescales set out in data protection laws.

We ask that you try to resolve any issues with us first. However, you have a right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time about our processing of your personal information. The ICO is the UK regulator for data protection and upholds information rights. Contact the ICO here.

SECURITY OF YOUR INFORMATION

The information we receive reaches us electronically originating from the form that you submit. Where it is within our control, we will put measures in place to ensure that “in-flight” data is secure.  However, we use appropriate procedures and technical security measures to safeguard your information across all our computer networks. Unfortunately, the transmission of information via the internet is never completely secure and we cannot guarantee the absolute security of information transmitted to us.

Detailed below are other data processors that are involved in the delivery of the service:

  • Inhealthcare are a data sub-processor on behalf of Health Call.
  • inhealthcare Portal – to collect and store data patient data

We have standard Data Processor Agreements in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it.

We have Data Processor Agreement in place with NENC, the data controller. We cannot do anything with your personal information unless we have been instructed to do so. We will not share your personal information with any organisation apart from any further sub-processors who must comply with our Data Processor Agreement. They will hold your personal data securely and retain it for the period we instruct.

CHILDREN

We understand the importance of taking extra precautions to protect the privacy and safety of children using the internet. The self-referral solution will reject any responses for patients under 18. Any forms that have been completed by under 18s will be rejected. The referral will not take place, and the data will be deleted.

DISCLOSING DATA

We never disclose personal data to third parties without the consent of the individual concerned or other reasonable justification.

It may be necessary − by law, legal process, litigation, and/or requests from governmental authorities within or outside your country of residence or ICB (Data Controller) – for Health Call to disclose your personal information. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. We will inform the ICB (Data Controller) of any legal requirements to disclose your information unless the law prohibits us from doing so.

PRIVACY QUESTIONS

If you have any questions or concerns about this Privacy Policy or data processing or if you would like to make a complaint about a possible breach of local privacy laws, please contact North East and North Cumbria ICB (the Data Controller) where your care is managed.

GETTING IN TOUCH WITH US

You are welcome to get in touch with us to discuss your information at any time at [email protected]

Share