Who we are

Health Connect provides healthcare coordination services, helping clients identify and communicate with appropriate clinics and healthcare providers and assisting with appointments, treatment coordination and related arrangements.

Data Controller: Health Connect
Website: myhealthconnect.co.uk
Email: info@myhealthconnect.co.uk
Business address:2 Marcus steet, Newry, BT341AZ

For the personal information that Health Connect determines how and why to process, Health Connect acts as a data controller.

Information we collect

Depending upon the service you request, we may collect:

• your name, date of birth and contact details;
• address and identification/contact information;
• information about the healthcare service or treatment you are seeking;
• medical history and information about existing or previous medical conditions;
• medical reports, test results, scans, photographs, referral letters and other medical documentation you voluntarily provide;
• information required to communicate with an appropriate clinic or specialist;
• appointment and treatment information;
• travel and accommodation information where you ask us to coordinate these services;
• communications between you and Health Connect; and
• payment and transaction information where applicable.

We only seek information that is reasonably necessary to provide the services you request.

Health and medical information

Information concerning your health is special category personal data and receives additional protection under data-protection legislation.

Where required, Health Connect will obtain your explicit consent to process and disclose your health information for specified purposes connected with the healthcare coordination service you have requested. Explicit consent is one of the Article 9 conditions recognised by both UK and EU GDPR frameworks.

Where another lawful condition applies, we may rely upon that condition as permitted by applicable data-protection legislation.

Why we use your information

We may process your information to provide the services you have requested; identify and communicate with an appropriate clinic or specialist; send information to your selected clinic; obtain information, quotations or treatment proposals from that clinic; arrange consultations, appointments and treatment; communicate information between you and the clinic at your request; arrange travel, accommodation or transfers where you purchase those services; administer payments and our business relationship; respond to enquiries; maintain appropriate business and legal records; and comply with applicable legal or regulatory requirements.

We will not use your medical information for purposes unrelated to providing or administering the services you have requested unless we have another lawful basis to do so.

Who we share your medical information with

Your medical and health information will only be shared with the clinic or healthcare provider you have selected or authorised Health Connect to contact for the purpose of your healthcare enquiry, consultation or treatment.

We will not send your medical information to other clinics for marketing purposes or allow unrelated clinics to access your medical records without your authorisation.

Where you ask Health Connect to approach more than one clinic or specialist on your behalf, we will make clear which organisations you have authorised us to contact.

Your personal data may also be processed by trusted service providers that are necessary for the operation of our business, such as secure IT, website, email, cloud-storage, CRM or payment providers, where applicable. Such access will be limited to what is necessary for the relevant service and subject to appropriate data-protection requirements.

We may also disclose information where required by law, regulation, court order or another legally binding requirement.

International transfers

As Health Connect may coordinate treatment with healthcare providers located outside the United Kingdom, your information may be transferred internationally.

Before medical information is transferred to your selected clinic, Health Connect will take appropriate steps required under applicable data-protection law and will inform you where necessary.

Where UK personal data is transferred internationally, we will apply the safeguards required by UK data-protection legislation. Where EU/Irish personal data is transferred outside the EEA, we will apply the safeguards required under EU GDPR.

Our lawful basis for processing

Depending upon the particular processing activity, Health Connect may process ordinary personal data where processing is necessary to provide a service or perform a contract with you, comply with a legal obligation, pursue a legitimate interest where your rights do not override that interest, or where you have provided consent.

Where we process health or other special-category information, we will additionally identify an appropriate condition under Article 9 of the applicable GDPR framework.

The ICO confirms that processing special-category information requires both an Article 6 lawful basis and an Article 9 condition.

Consent

Where we rely upon your consent, including explicit consent for particular processing of health information, you may withdraw that consent at any time by contacting Health Connect.

Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.

Withdrawal of consent may mean that we cannot continue providing a service where processing the relevant medical information is necessary to provide that service.

How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, regulatory, accounting or dispute-resolution requirements.

Medical and other sensitive information will not be retained longer than necessary for the purpose for which Health Connect obtained it.

Our retention periods are reviewed periodically, and information that is no longer required will be securely deleted or anonymised where appropriate.

The Irish DPC specifically emphasises data minimisation and keeping health information for no longer than necessary.

How we protect your information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

Access to medical and other sensitive information is restricted to persons who require access for legitimate business purposes.

Your data-protection rights

Depending upon the applicable law and circumstances, you may have rights including the right to:

• access personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion of your information in certain circumstances;
• restrict processing in certain circumstances;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based upon consent; and
• lodge a complaint with the relevant data-protection supervisory authority.

These rights are not absolute and some are subject to statutory exceptions. The Irish DPC specifically identifies access, correction, erasure, restriction, objection and portability among the rights that privacy information should explain.

Cookies and website information

Our website may use cookies and similar technologies necessary for the operation, security and functionality of the website.

Where non-essential cookies, analytics or marketing technologies are used, appropriate information and consent mechanisms will be provided where required by law.

Please see our Cookie Policy for further information.

Third-party websites

Our website may contain links to clinics, healthcare providers or other third-party websites. Health Connect is not responsible for the privacy practices of independent third-party websites. You should review the relevant organisation’s privacy information when visiting its website or providing information directly to it.

Complaints

If you have concerns about how Health Connect processes your personal information, please contact us first so that we can investigate your concerns.

For matters governed by UK data-protection legislation, you also have the right to complain to the Information Commissioner’s Office (ICO).

Where Irish/EU data-protection legislation applies, you may have the right to complain to the Data Protection Commission (DPC) in Ireland or another competent EU supervisory authority.

Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our services, processing activities or legal requirements.

The latest version will be published on this website together with the date it was last updated.