Privacy Notice

Introduction

MedGenix Tech Limited (“MedGenix Tech”, “we”, “us”, “our”), of 48 Warwick Street, London, England, W1B 5AW, is committed to protecting the privacy and security of the Personal Data we collect about website visitors (“you”, “your”).

This privacy notice explains what Personal Data we collect when you visit our website. We are the Controller of the data we process, registered in the UK with the Information Commissioner's Office (ICO), registration number ZB919454.

Please read this notice carefully. If you have any questions, please contact us.

MedPrompt Service Data Processing

For our MedPrompt service, MedGenix Tech acts as a Processor on behalf of GP Practices and healthcare organisations, who act as the Controllers.

We process patient data (including special category health data) solely for the purpose of providing the MedPrompt service, strictly in accordance with the documented instructions of the Controller and a comprehensive Data Processing Agreement (DPA).

Note for Patients: As we process data only on behalf of your GP Practice, they remain responsible for your patient record. If you wish to exercise your data protection rights (such as accessing or correcting your data), please contact your GP Practice directly.

Personal data we collect (Website)

When you visit our website for business inquiries or information, we act as a Data Controller. We may collect:

• Identity and contact details you give us, such as your name, email address and telephone number, when you contact us or arrange a conversation with us;
• Anything you choose to include in a message or booking form;
• Technical and usage information about your visit, such as the pages you view and information about your browser and device.

Business contacts and prospects

We hold contact details for people at GP practices and NHS organisations who may be interested in MedPrompt. This includes your name, job title, organisation, work email address, telephone number and our correspondence with you. We obtain this from public NHS directories, LinkedIn, events, referrals and directly from you. If we obtain your data from a source other than you, we will tell you within one month. We use it to respond to you, tell you about our services and manage our business relationships.

Providing your data

You are not required to give us your data, but we cannot respond to enquiries without it.

Purposes and legal bases for processing

You have an absolute right to object to direct marketing at any time. Every marketing email contains an unsubscribe link.

Sharing your data

We share personal data with service providers who support our business, and with our Data Protection Officer (Evalian Limited) and professional advisers. The providers we use can change. They may include providers of:

• Customer relationship management;
• Email and productivity;
• Hosting and infrastructure;
• Website tools, such as analytics, scheduling and embedded content;
• AI-assisted tools, which we use to help draft, summarise and organise business correspondence and records. We do not make decisions about you solely by automated means.

Where personal data is transferred outside the UK, we rely on UK adequacy regulations, the UK Data Bridge, or the UK International Data Transfer Agreement or Addendum.

Cookies

We use cookies and similar technologies to run this website, understand how it is used, and to support tools and content provided by others, such as scheduling and media. Those providers may set their own cookies. The tools we use can change.

Data retention

We keep website enquiries, prospect records and customer records for as long as we need them for the purpose we collected them, including any further period needed to meet legal obligations. We keep a marketing suppression list so we honour opt-outs.

How we protect your data

We use technical and organisational measures to prevent unauthorised access or loss. You can help protect your data by not sharing OTPs, checking for secure HTTPS connections, and avoiding suspicious links.

Your data protection rights

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights regarding automated decision-making
• Right to withdraw consent
• Right to lodge a complaint with MedGenix Tech

Exercising your rights

You may contact us to exercise your rights. Requests are typically free unless manifestly unfounded or excessive.

Complaints to the UK ICO

If unresolved, you may raise concerns with the Information Commissioner’s Office.

Data Protection Officer

Our DPO is Evalian Limited. You can contact them at dpo@evalian.co.uk