Privacy Policy

This Privacy Policy explains how we collect, use, disclose, transfer, and store any personal information that we collect from you or that you provide to us through www.medicalconsultationsonline.co.uk (the “website”), or when contacting us in relation to our services.

To fully understand how and why we are using your data, it is crucial that you read this privacy notice as well as any other privacy notices or fair processing notices we may offer you from time to time. This privacy notice is meant to enhance any further notices we offer; it is not meant to replace them.

Data Controller Contact Details

We are SB Locums LTD, trading as Medical Consultations Online, of 85 Great Portland Street, First Floor
London, W1W 7LT. We are the data controller for the Website, and in relation to information you provide in relation to our services. We abide to the The Data Protection Act 2018, UK GDPR and are registered with Information Commissioner’s Office.

You can contact us by telephoning us at 0208 156 6750 or by writing to us at hello@medicalconsultationsonline.co.uk or 85 Great Portland Street, First Floor, London, W1W 7LT.

What personal information we collect

When you contact us through the website, correspond with us or otherwise use our services, we may collect a range of personal data:

Identity information such as first and last names, usernames or other similar identifiers, title, birthdate, and gender
Contact Data, including addresses, email addresses and telephone numbers.
Financial and Transaction Data, as well as information on the services you have purchased from us, such as payment information.
Medical Data, including information about your physical and mental health, previous and current symptoms and treatments both past and present as well as family history of conditions and social history.
Marketing and Communications Data, including your preferences for how we communicate with you and how you would want to receive marketing from us.
Technical Data, including internet protocol (IP) address, your login information, the operating system and platform of the devices you use to access the website and our services, the browser type and version, time zone setting and location, the types and versions of browser plug-ins.

How we use your personal information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

When we must fulfil the terms of a contract we have with you or are intending to engage into.
Where we must adhere to a legal or regulatory requirement.
Whenever it is required to protect our (or another party’s) legitimate interests, and where your interests and basic rights do not supersede those interests.
When it is required to safeguard a significant interest that is crucial to your life or the life of another person.
If a prescription is required, we will input your personal data i.e. identity information, contact data and medical data (when required) on the signature RX platform where it will be stored. Please check Signature RX’s privacy policy here https://signaturerx.co.uk/privacy-policy/#_Toc87791933

With the exception of when we send you email or text messages from third parties with direct marketing messages, we generally do not use your consent as a legal basis for processing your personal data. It is always possible for you to revoke your marketing permissions.

Your personal information is used by us to answer to your inquiries, run the website, provide the services you have requested, and investigate violations of our terms of service and other policies. We might also use it internally for areas such as data analytics, audits, and research as well as to create and improve our goods and services. The data we collect will not be sold, rented, or leased to other parties, but we may disclose it under the conditions described below in “Disclosure to third parties.”

A list of all the methods we intend to use your personal data, together with the legal basis we will be using to do so, is presented below in table format. We have also determined our legitimate interests and the period of time we will keep the personal data, as applicable.

Purpose/Activity	Type of data	Lawful basis for processing	Data Retention Period
To react to a request for information about our services	1. Identity 2. Contact 3. Technical 4. Marketing and Communications	Necessary for our legitimate interests (to respond to potential sales enquiries).	7 years
To register an account on the Website	1. Identity 2. Contact 3. Transaction	Performance of a contract	7 years
To provide you with medical services	1. Identity 2. Contact 3. Transaction 4. Medical 5. Location	Performance of contract	7 years
To make available medical reports to your GP and other medical professionals	1. Identity 2. Contact 3. Medical	Performance of contract	7 years
If a prescription is required, we will provide Signature RX platform with your information so that we can issue the prescription as per medical need.	1. Identity 2. Contact 3. Medical	Performance of contract	7 years
To report concerns over your vital interests to other medical professionals	1. Identity 2. Contact 3. Medical	To protect your vital interests	7 years
To manage and safeguard our company’s operations, products, and website, which includes problem-solving, data analysis, testing, system upkeep, support, reporting, hosting data, and responding to a breach of an agreement made with us.	1. Identity 2. Contact 3. Transaction 4. Technical 5. Usage 6. Medical 7. Location	1. Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) 2. Necessary to comply with a legal obligation	7 years
To provide you with advice and recommendations for products or services that might be of interest to you	1. Identity 2. Contact 3. Technical 4. Usage 5. Location	Necessary for our legitimate interests (to develop our products/services and grow our business).	7 years

When you access our website, we may gather information from your computer or mobile device. This information includes statistical data on the browsing habits and behaviours of our users. We may utilise aggregate data to report to any advertisers and use this information for system administration.

Your personally identifiable information might be used by us to let you know about other goods or services, forthcoming activities, and advertising. If you do not want to be included on our mailing list, you can opt out at any time by emailing us at hello@medicalconsultationsonline.co.uk

Collection and Use of Non-Personal Information
We also gather data on business operations, locations, time zones, and other aspects of website activity that are not directly related to any particular person. We might make use of this non-personal data to better understand user behaviour and enhance our services and products. We might potentially combine this data in order to give our consumers access to more pertinent data. In the event that non-personal information and personal information are combined, the combined information will be treated as personal information for the duration that it can be used to identify a specific person for the purposes of this privacy policy.

Disclosure to third parties

Unless you specifically request otherwise, we may disclose your personal information to your GP and other medical specialists.
Even if you ask us not to, we may nevertheless disclose your medical information to your GP or other medical providers if doing so is in your best interests. Unless the issue is urgent or the conversation could jeopardise your vital interests, we will always consult with you before acting.
All third parties must adhere to the law and respect the security of your personal data, as required by us. We only permit our third-party service providers to process your personal data for those reasons and in line with our instructions. We do not authorise them to use your personal data for their own purposes.

We might potentially share your personal data with other parties:

If we ever sell or buy any assets or businesses, we may reveal your personal information to the potential buyer or seller of those businesses or assets.
If our business or nearly all of our assets are bought by a third party, personal information about our customers that we have on file will be one of the transferred assets.
If we have a legal obligation to reveal or share your personal information, or if we need to enforce an agreement with you, or if it’s necessary to safeguard the rights, property, or safety of us, our clients, or others. For the purpose of preventing fraud and reducing credit risk, this includes exchanging information with other businesses and organisations.

Protection of Personal Information
We take efforts to protect your personal information from loss, theft, and misuse as well as from unauthorised access, disclosure, alteration, and destruction. These precautions include administrative, technical, and physical safeguards.

Despite our best efforts to safeguard your personal information, due to the unsecure nature of the internet, we are unable to guarantee the security of any data you communicate to the website. You do so at your own risk. We will utilise stringent protocols and security features once we acquire your personal information to try to prevent unauthorised access.

Your rights
You have the right to:

Make a “data subject access request” to gain access to your personal information. You can use this to request a copy of the personal information we have about you and confirm that we are processing it lawfully.
Request an update to the personal information we currently have about you. This gives you the opportunity to change any incomplete or erroneous information we may have about you, albeit we may need to confirm the veracity of any updated information you supply to us.
Demand the removal of your personal data. This gives you the option to request that we stop using your personal data if there is no valid reason for us to keep doing so. Additionally, you have the right to request that we erase or otherwise take away your personal information in cases where you have successfully exercised your right to object to processing (see below), in which case we may have processed your information unlawfully, or in which case we are required to do so by local law. Note, However, we may not always be able to abide by your request for erasure, in which case we shall provide you with precise legal justifications.

If we are processing your personal data based on our (or a third party’s) legitimate interests and there is something about your circumstances that makes you want to object to processing on this ground because you feel it affects your basic rights and freedoms, you can do so. In cases where we are using your personal data for direct marketing, you also have the right to object. In some circumstances, we may show that our legitimate interests in processing your information outweigh your rights and freedoms.

Request a restriction on how your personal data is processed.

This gives you the option to request that we stop processing your personal data in the following circumstances.:

if you want us to verify the accuracy of the data;
if our use of the data is illegal but you do not want it deleted;
if you need the information to establish, exercise, or defend legal claims, and you need us to keep it even if we no longer need it.; or
Although you have objected to our use of your information, we must first determine whether we have overwhelming justifications for doing so.

You won’t be charged a price to view your personal information (or to exercise any of the other rights). However, if your request is obviously baseless, repeated, or unreasonable, we may charge a reasonable price. Alternatively, in these situations, we may decline to abide with your request.
In order to verify your identity and establish that you have the right to access your personal data, we might need to ask you for certain information (or to exercise any of your other rights). This is a safety precaution to make sure that personal information is not given to anyone who is not authorised to receive it. In order to streamline our response, we might possibly get in touch with you and request more details about your request.

Privacy Policy changes
There may be periodic changes to our privacy policy. Any time our privacy policies change, we’ll update this page and provide a more prominent notice if the changes are important (including, if appropriate, by email).

Third-party links
Links to third-party websites, plug-ins, and programmes may be present on the website. It’s possible for third parties to gather or share information about you if you click on those links or enable those connections. These third-party websites are not under our control, and their privacy policies are not our responsibility. We advise reading the privacy notice of each website you visit after leaving ours.