Privacy Notice

Introduction

MedGenix Tech Limited (“MedGenix Tech”, “we”, “us”, “our”), of 48 Warwick Street, London, England, W1B 5AW, is committed to protecting the privacy and security of the Personal Data we collect about website visitors (“you”, “your”).

This privacy notice explains what Personal Data we collect when you visit our website. We are the Controller of the data we process, registered in the UK with the Information Commissioner's Office (ICO), registration number ZB919454.

Please read this notice carefully. If you have any questions, please contact us.

MedPrompt Service Data Processing

For our MedPrompt service, MedGenix Tech acts as a Processor on behalf of GP Practices and healthcare organisations, who act as the Controllers.

We process patient data (including special category health data) solely for the purpose of providing the MedPrompt service, strictly in accordance with the documented instructions of the Controller and a comprehensive Data Processing Agreement (DPA).

Note for Patients: As we process data only on behalf of your GP Practice, they remain responsible for your patient record. If you wish to exercise your data protection rights (such as accessing or correcting your data), please contact your GP Practice directly.

Personal data we collect (Website)

When you visit our website for business inquiries or information, we act as a Data Controller. We may collect:

• First name and surname;
• Email address;
• Any personal data you choose to include in our free-text box.

Purposes and legal bases for processing

• Responding to correspondence: Legitimate interest
• Sending marketing information: Legitimate interest or consent
• Business forecasting/statistics: Legitimate interest
• Website improvement: Legitimate interest

Sharing your data

We typically do not share your Personal Data outside the UK/EEA. If necessary, we will ensure appropriate safeguards are in place such as Adequacy Regulations or the UK International Data Transfer Agreement.

Data retention

Your data will be retained for as long as needed to provide services and meet legal obligations. Afterward, it will be securely deleted or anonymised.

How we protect your data

We use technical and organisational measures to prevent unauthorised access or loss. You can help protect your data by not sharing OTPs, checking for secure HTTPS connections, and avoiding suspicious links.

Your data protection rights

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights regarding automated decision-making
• Right to withdraw consent
• Right to lodge a complaint with MedGenix Tech

Exercising your rights

You may contact us to exercise your rights. Requests are typically free unless manifestly unfounded or excessive.

Complaints to the UK ICO

If unresolved, you may raise concerns with the Information Commissioner’s Office.

Data Protection Officer

Our DPO is Evalian Limited. You can contact them at dpo@evalian.co.uk