Medwise.ai Privacy Policy

Introduction

The website medwise.ai (the “Site”) is owned and operated by Medwise AI Limited, registered in England and Wales under company number 12146414. Our registered offices are

Nexus House Discovery Way Leeds LS2 3AA

This Privacy Policy does not form part of any contract to provide services and stands alone in setting out the principles governing our use of personal information that we may obtain about you in accordance with the General Data Protection Regulation (the “GDPR”) and Data Protection Act 2018 (“DPA 2018”). It should, however, be read alongside our Terms and Conditions because together these set out the terms of our relationship with you.

Please review the entire Privacy Policy carefully, so that you understand your rights under the data protection legislation, as well as how and why we are using your personal information. By using the Site and any services offered through the Site, you are agreeing to be bound by this Policy.

We may update this Policy from time to time. When we update the Policy, we will revise the “Effective Date” date above and post the new Privacy Policy. We recommend that you review the Privacy Policy each time you visit the Site to stay informed of our privacy practices.

Description of the information we collect

At Medwise we take data protection and the individual’s rights relating to their personal data seriously. For the purposes of the GDPR, we are the Data Controller of your personal data.

Personal Information

The GDPR and DPA 2018 regulate the processing or use of personal data, which is defined as any information related to an identified or identifiable natural person. This does not include anonymous data, i.e. information from which it is not possible to identify any individual. There are further classes of personal data to which the data protection legislation affords a higher level of protection, known as special category data. This includes information relating to an individual’s health, racial or ethnic origin, sexual orientation and criminal convictions. We do not process any special category data.

We will collect personally identifiable information about you from your interactions with us, such as filling in a registration form or otherwise contacting us. The information we collect about you may include:

• your name;

• e-mail address;

• country of practice;

• user name;

• profession or job title;

• clinical areas of interest;

• GMC number; and

• any other information which you provide to us.

If you contact us or send us feedback, we may keep a record of that correspondence.

We may also collect information about how you use the Site through the use of cookies (see below). This information helps us personalise your experience by tailoring the content you see, and to optimise your website experience. We will also use it to generate anonymised statistical data about how the Site is used, particularly in relation to the access of particular resources. We may share that anonymised data with third parties. Any reporting of such information would be on an anonymised basis only.

We may also receive information about you from other sources, including through third-party services and organizations.  We may add this data to the information which we hold about you in order to help us improve and personalise our service.

We use Google Analytics to track user activity. The data we collect about users in Google Analytics can be connected to other data we have about the user, as per the measurement policy supplied by Google. We will not upload any data that would allow Google to personally identify an individual (such as certain names, social security numbers, email addresses, or any similar data), or data that permanently identifies a particular device (such as a unique device identifier if such an identifier cannot be reset).

Information we collect automatically

We may collect certain information automatically when you use the Site, such as your Internet protocol (IP) address, device and advertising identifiers, browser type, operating system, Internet service provider, pages that you visit before and after using the Site, the date and time of your visit, information about the links you click, the pages you view, the general manner in which you navigate the Sites, and other standard server log information.

Cookies

In common with many organisations, we monitor the use of this website by collecting aggregate information through the use of cookies. No personally identifiable data are collected in this process. Typically, we collect information about the number of visitors to the website, to each web page and the originating domain name of the visitor’s Internet service provider. This information helps us to improve the Site and to deliver a more personalised service and may be shared with third parties.

Cookies are small bits of information that are stored by your computer’s web browser. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve the Site in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

You may be able to refuse or disable cookies by adjusting your web browser settings. Because each web browser is different, please consult the instructions provided by your web browser (typically in the “Help” section). If you refuse, disable, or delete these technologies, some of the functionality of the Sites may no longer be available to you. To find out more above cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org.

How we use your information

We generally use the information we collect to

• verify your healthcare professional status;

• customise the Site according to your interests;

• administer the Site and for internal operations, troubleshooting, data analysis, testing, research, statistical and survey purposes;

• improve our products and services;

• internal record keeping;

• carry out our obligations arising from any contracts entered into between you and us;

• understand how the Site is being used;

• we may periodically send promotional emails about new products, special offers or other information that we think you may find interesting using the email address you provided;

• we may use your information to contact you from time to time for market research purposes.

We will only use your personal data in accordance with the data protection legislation, which says that the personal information we hold about you must be:

1. Used lawfully, fairly and in a transparent way.

2. Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.

3. Relevant to the purposes we have told you about and limited only to those purposes.

4. Accurate and kept up to date.

5. Kept only as long as necessary for the purposes we have told you about.

6. Kept securely.

In order to ensure that your personal data is used lawfully, we must ensure that we have a lawful condition for processing under Article 6 of the GDPR. With the exception of the specific scenarios outlined below, we process your personal data on the basis of Articles 6(1)(b), which relates to processing necessary for the performance of a contract with you, and/or 6(1)(f) which allows us to process personal data where necessary to do so in the pursuit of legitimate interests.

Who we share your information with

We will keep your information confidential. We will not pass your information to anyone else unless permitted to do so by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so, except for (a) successors in title to our business; or (b) when required by law. Companies and individuals who provide services and functions on our behalf may also use and store your personal information. However, they may not use your personal information for any other purpose. As set out above, we may provide business partners (for example, publishers and life science companies) with statistical data which provides an aggregated overview of the manner in which services are used but, critically, you will not be identifiable from that information and accordingly it will not comprise your personal data.

As set out above, we do not provide your personal information to any third parties for marketing purposes.

Opting out of further communications from us

If we have specified (in a data collection notice on this website) that we will contact you with information about our products, services, or those of other companies and you wish to opt out of receiving such information, then you can do so by sending an e-mail to support@medwise.ai. You should clearly state on all communications: your name, username (if any), registration details (if any) and the name of this website. You may also edit your contact preferences on your profile page.

How we protect your information

If we collect any information relating to you, we will store it on a secure server. We have in place security policies that are intended to ensure, as far as possible, the security and integrity of all our information, including your personal information. However, whilst we will do our best to protect your personal data, unfortunately, the transmission of information via the internet is not completely secure. We cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.

Linking to third party websites

We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our Site and recommend that you check the policy of each site you visit and contact its owner or operator if you have any concerns or questions. In addition, if you linked to this Site from a third party site, we cannot be responsible for the privacy policies and practices of the owners or operators of that third party site and recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions.

Intended audience

This website is intended for use by healthcare professionals. We do not knowingly collect information from or about children. If we learn that a child under the age of 13 has provided us with personal information, we will delete it in accordance with applicable law.

Improper conduct

We may use the information we gather and/or receive about you to investigate and help prevent unlawful activity or activity that threatens our network or otherwise jeopardises the provision of this website and we may disclose such information to third parties (such as the police) for these purposes.

Data retention

We are required to ensure that we do not continue to retain your data for longer than is necessary by reference to the purpose for which it was collected. We will keep your personal information for no longer than is necessary to administer the business relationship between us, and/or by reference to relevant legal and regulatory retention periods.

International data transfers

We may also use Amazon Web Services (AWS) or Google Cloud (GC) to host personal data information. If AWS or GC servers are based outside the UK, you will remain protected under the data protection regulations, as the Data Processing Agreements put in place by AWS and GC contain approved ‘Model Clauses’ which have been adopted by the European Commission as an appropriate safeguard to comply with the GDPR restricted transfer rules.

Your Rights

Your duty to inform us of changes

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

Your rights in connection with personal information

Under certain circumstances, and as set out in further detail in our general privacy notice, by law you have the right to:

• Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).

• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

• Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us in writing as set out below.

No fee usually required

You will not usually have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you would like to exercise any of your rights then you can do so by contacting us at support@medwise.ai.

Please state your name, username (if any), registration details (if any) and the name of this website clearly on all communications.

Contact us

If you have any questions about this Policy or our practices, please send an e-mail to support@medwise.ai.