Privacy Policy
This sets out how SimpleMed and its partners use and protect any information that you give us when you use this website.
We are committed to ensuring that your privacy is protected. Should we ask you to use any information by which you can be identified, it will always be used in accordance with this privacy statement.
We may collect the following information:
- Name
- Contact information including email address
- Demographic information such as postcode, preferences and interests
- IP-address
- Browser type
- Global information on our members use of the site (i.e. period of time spent watching videos, browsing notes, questions completed)
- Any information our analytics provider, Google (via Google Analytics) may require for site usage analytics, as defined in their privacy policy.
You can exercise your right to restrict the collection or use of your personal information in the following ways:
- When you fill in a form on the website, at times there will be an option to opt-in to marketing e-mails. In the absence of this box we will not contact you for marketing purposes.
- You can allow or decline optional analytics in the privacy banner. After making a choice, use the “Privacy choices” control shown on the site to change it at any time. Essential cookies used for security, sign-in and requested features are not controlled by the optional analytics choice.
- If you have already agreed to allow direct marketing, you may change your mind by contacting us.
If you are concerned that any information we are holding on you is incorrect or you would like us to delete any information, please contact us. Our GDPR compliance lead is Dr. Marcus Judge.
1. General
SimpleMed (“we” or “us”) take the privacy of your information very seriously. Our Privacy and Data Protection Policy is designed to tell you, the user of our website simplemed.co.uk and any other services provided by us via and technology or media (the “Service”) about our practices regarding the collection, use and disclosure of personal and other information about you or your business that may be provided via the or collected through other means such as an online form, email or telephone communication.
This policy applies to information provided by our users and registered members. We process information where it is needed to provide the Service, meet legal obligations or pursue a legitimate interest described in this policy. Where consent is required, we ask for it separately and you can withdraw it at any time. Using the Service alone does not grant consent to optional analytics.
You can manage optional analytics in the privacy banner and change your choice later using the “Privacy choices” control.
2. Our policy
We aim to limit our interaction with your data wherever possible. We have a general policy relating to access to your data. We will generally seek only to access that data which is necessary in accordance with the privileges you have granted to the system. Automated processes may scan your data, but only for an explicit purpose to do with the provision of our service. When working with data that was originally collected by us, our processes may need to scan and manipulate the information in order to deliver our service to you.
If you actively accept optional analytics, we use Google Analytics to understand aggregated site usage and improve SimpleMed, as described in Google’s privacy information. Google Analytics is not loaded before that choice. The privacy banner appears on your first eligible visit; use “Privacy choices” later to change your decision.
3. Ways in which we collect data
We may collect and process the following personal information or data (information that can be uniquely identified with you) about you: certain information required to use the Service, including your name and e-mail address; any correspondence between you and us; replies to any surveys or questionnaires that we may use for research purposes; details of your visits to the Service and the resources that you access; any information we may require from you when you report a problem or complaint.
We only collect such information when you choose to supply it to us. You do not have to supply personal information, although features such as account sign-in cannot operate without the information they require. Optional analytics can be allowed or declined in the privacy banner and changed later using “Privacy choices”.
Information may also be gathered through the Service without you actively providing it, through the use of various technologies and methods such as Internet Protocol (IP) addresses and cookies. These methods do not collect or store personal information.
An IP address is a number assigned to your computer by your Internet Service Provider (ISP), so you can access the Internet. It is generally considered to be non-personally identifiable information, because in most cases an IP address can only be traced back to your ISP or the large company or organisation that provides your internet access (such as your employer if you are at work).
We use your IP address to diagnose problems with our server, report aggregate information, and determine the fastest route for your computer to use in connecting to the Service, and to administer and improve the Service.
4. Use and disclosure
We may use this information to: ensure that the content of the Service is presented in the most effective manner for you and for your computer and customise the Service to your preferences; assist in making general improvements to the Service; carry out and administer any obligations arising from any agreements entered into between you and us; allow you to participate in features of the Service; contact you and notify you about changes to the Service (except where you have asked us not to do this); analyse how users are making use of the Service.
We do not disclose any information you provide via the Service to any third parties except: If we are under a duty to disclose or share your personal data in order to comply with any legal obligation (for example, if required to do so by a court order or for the purposes of prevention of fraud or other crime); in order to enforce any terms of use that apply to the Service, or to enforce any other terms and conditions or agreements for our services that may apply; to protect the rights, property, or safety of SimpleMed, our Service’s users, or any other third parties. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Other than as set out above, we shall not disclose any of your personal information unless you give us permission to do so. We will not hand over any user information in the case of a company sale or closure.
5. Security
In order to safeguard the information we collect from you we will take all reasonable steps to ensure that: our servers are protected by security mechanisms and can only be administered via strictly controlled public/ private cryptographic keys; our data processing storage facilities are sited in secure locations to prevent unauthorised access.
6. Cookies
A cookie is a piece of data stored locally on your computer and contains information about your activities on the Internet. The information in a cookie does not contain any personally identifiable information you submit to our site.
We use essential cookies for security, sign-in, account sessions and features you request. If you actively accept optional analytics, separate analytics cookies help us understand aggregated use of the Service and make improvements. Declining optional analytics does not prevent access to site content or account features.
Cookies can be session cookies, which expire after a browser session, or persistent cookies, which remain for a stated period. You can also block or delete cookies in your browser settings, although blocking essential cookies may prevent sign-in or other requested features from working.
Optional analytics remain off unless you actively select “Accept”. Continuing to use the website does not count as consent. Select “Only essential” or “Reject” to keep analytics off, and use “Privacy choices” to change your decision later.
Declining optional analytics does not affect access to SimpleMed. Separately blocking essential cookies in your browser may prevent sign-in, security protections or other requested online features from working.
7. Web statistics
We use log files generated by our web servers to analyse site usage and statistics but the files do not identify any personal information. Log file analysis helps us to understand usage patterns on our website and to make improvements to our service.
8. Access to and correction of personal information
We will take all reasonable steps in accordance with our legal obligations to update or correct personally identifiable information in our possession.
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.
9. Other Websites
The Service may contain links and references to other websites. Please be aware that this Privacy Policy does not apply to those websites.
We cannot be responsible for the privacy policies and practices of sites that are not operated by us, even if you access them via the Service that is operated by us. We recommend that you check the policy of each site you visit and contact its owner or operator if you have any concerns or questions.
In addition, if you came to our Service via a third party site, we cannot be responsible for the privacy policies and practices of the owners or operators of that third party site and recommend that you check the policy of that third party site and contact its owner or operator if you have any concerns or questions.
10. Transferring your information outside of Europe
As part of the services offered to you the information you provide to us may be transferred to, and stored at, countries outside of the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU or one of our service providers is located in a country outside of the EU. We may also share information with other equivalent national bodies, which may be located in countries worldwide. These countries may not have similar data protection laws to the UK. If we transfer your information outside of the EU in this way, we will take steps with the aim of ensuring that your privacy rights continue to be protected as outlined in this privacy policy.
If you use the Service while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
By submitting your personal information to us you agree to the transfer, storing or processing of your information outside the EU in the manner described above.
11. Notification of changes to our Privacy Policy
We will post details of any changes to our Privacy Policy on our website to help ensure you are always aware of the information we collect, how we use it, and in what circumstances, if any, we share it with other parties.
12. Contact us
If at any time you would like to contact us with your views about our privacy practices, or with any enquiry relating to your personal information, you can do so by way of our contact page.
Push notifications in SimpleMed+
Push notifications are optional. They remain off unless you choose to enable them in SimpleMed+ and grant notification permission on your device.
Information used. If you enable push notifications, we associate your SimpleMed account with your device platform, time zone, an encrypted Apple or Google push token and a one-way token fingerprint. We also record your notification choice and policy version, recent app activity, and delivery records such as the reminder type, message, status, provider result and time sent.
Purpose and choice. We use this information, with your consent, to send the study reminders you request and to prevent duplicate or excessive messages. You can withdraw your consent at any time in SimpleMed+ or your device settings. Turning notifications off stops future push messages. Push consent is separate from email preferences and does not opt you into marketing email.
Providers and retention. Apple Push Notification service processes iOS delivery data and Google Firebase Cloud Messaging processes Android delivery data. Active device registrations are kept while notifications remain enabled. Disabled device registrations are removed after 30 days, and delivery records after 180 days. Consent records are retained as needed to demonstrate your choices and are deleted with your account.
See the Apple Privacy Policy and Google Firebase privacy information for details of how those providers handle data.