Information we collect

‍

Information we collect from you

• Where you are invited to access a specific form located on our site (by URL provided in aletter for example) – information collected is dependent on the form but may include your email address, reference number, date of birth, postcode.

Information collected automatically from you as a result of your interactions with the Site

• Unique system reference number

How we use collected information

• To action any request you make via an online form, for example to set up an account, to respond to your messages/ provide any information requested, or to contact you by phone or email if further information is required as a result of your completion of a specific form.
• To evidence your consent where applicable
• To understand where/ what new services are needed 

Legal basis for processing your personal data:

We use your Personal Data only as permitted by law, for the purposes for which we collected it. Under the UK General Data Protection Regulations the different purposes of processing your data collected here are legally permitted under Article 6 (1) (a) consent or Article 6 (1) (b) contract.  

Sharing your information

‍

ieso takes care to ensure that only the right people have access to your personal data. We have internal procedures in place to safeguard your privacy and anyone within ieso receiving information about you will be under an equal legal duty to keep it confidential.

We will always seek your permission ahead of disclosing any information that identifies you directly to any other person ororganisation or for any other reason than those set out in this policy without your knowledge or permission unless we have an overriding legal duty to do so.

In the event that we undergo re-organisation or all or a part of our business is sold to a third party, you agree that any personal information we hold about you may be transferred to that re-organised entity or third party, whether such acquisition is by way of merger, consolidation, or purchase of all or a portion of our assets, or in connection with any bankruptcy or reorganization proceeding brought by or against us.

We may disclose aggregate statistics about visitors to the Site in order to describe our services to prospective partners and other reputable third parties and for other lawful purposes, but these statistics will include no personally identifiable information.‍‍

How we secure your personal data

‍

We place great importance on the security of personal information. We have put controls in place to safeguard your personal information, applying physical, technical and procedural measures against unauthorised access, loss, misuse and alteration of personal information under our control.

We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

We have achieved the International Standard certification for Information Security (ISO 27001) and maintain the Cyber Essentials Plus certification.

How we store your personal data

‍

We use a small number of well-known Softwareas a Service (SaaS) providers to store your information enabling the use of information described in these notices. We have rigorous 3rd party supplier processes in place to ensure your data is secure and your data protection rights are upheld.

‍Retention details:

‍

We retain your account data for specific durations based on the type of data and its use. We follow a criteria-based approach, retaining information as long as necessary to fulfil the purposes for which it was collected and comply with legal obligations. When your data is no longer needed, we will securely delete it.‍‍

Transferring data outside the UK

‍

We seek where possible to prevent any transfers of your personal information to countries which do not have adequate data protection standards.

The European Commission makes decisions on the adequacy of the protection of personal data in third countries and have decided that personal data can flow safely between countries in the European Union, the European Economic Area (EEA), and other listed territories without any further safeguards being necessary. Post UK departure from the EU, the UK has been granted adequacy by the EU, and the UK has accepted the European Commission’s adequacy decisions for the UK too, and also included Gibraltar.

If we transfer your Personal Data out of the EEA and the UK to a country not deemed by the relevant regulatory authority to provide an adequate level of personal information protection, the transfer will be performed (i) pursuant to the recipient’s compliance with standard contractual clauses or Binding Corporate Rules; (ii) pursuant to your consent; or (iii) as otherwise permitted by applicable data protection requirements.

Your data protection rights

‍

‍‍Data protection law provides you with rights that ieso is committed to supporting you with. These rights may be available to you:

• ‍Right to be Informed: You have the right to be informed about the collection and use of your personal data. This includes who we are, what data we collect, how we use it, and who we share it with.‍
• Right of Access: You can request access to the personal data we hold about you to help you understand how your data is being used.‍
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that we correct or complete this information.‍
• Right to Erasure: You can request the deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.‍
• Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain situations, such as if you contest the accuracy of the data.
• Right to Data Portability: You can request to have your personal data ‘ported’ or transferred to another providerin a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data.

PLEASE NOTE that these rights are not absolute in all situations and may be subject to conditions and provisions set out in data protection laws.  For more detailed information on your rights visit https://ico.org.uk/for-the-public/.

Cookies

‍

A cookie is a small data file stored by your browser on your device's hard disk for record-keeping purposes and typically includes a unique reference code that relates to, or is accessed from, a user's device and that enables that device to be remembered when next visiting the same site.

Cookies that are necessary for functionality, security and accessibility, are set and cannot be turned off by you.

You can ‘manage preferences’ via our cookie banner regarding analytics and targeting cookies. We rely on consent as our UK lawful basis for processing the information collected for the optional cookies we use.

You can read more about how we use cookies, and how to change your preferences, by visiting our cookies policy.

You can also change your browser settings to prevent any automatic acceptance of cookies, or to notify you each time a cookie is set. You can learn more about cookies by visiting www.allaboutcookies.org which includes additional information on cookies and how to block them using different types of browser. Please note however, that by blocking or deleting cookies you may not be able to take full advantage of the site.

Contact

‍

Questions, comments and requests regarding these privacy notices or data protection should be addressed to our Privacy Team: info@iesohealth.com

‍Changes to these Privacy Notices

‍

We reserve the right to change these privacy notices from time to time by changing it on the Site and we may provide you notice of these changes by any reasonable means, including by providing notice through the Site. By continuing to access, browse or use the Site, you confirm your acceptance of the revised privacy policy. We strongly recommend that you periodically visit this page of the Site to review this privacy policy.

‍Changes to your personal data

‍

It is important that the personal data we hold about you is accurateand current. Please keep us informed if your personal data changes during your relationship with us.

‍Third Party sites

‍

Our site may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.