Privacy Policy

Last Updated: September 10, 2023

1. Introduction

Docomed Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our medical devices and services.

As a UK-based medical device company operating globally, we comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws in the countries where we operate.

Please read this Privacy Policy carefully. By accessing our website or using our products and services, you acknowledge you have read and understood this Privacy Policy.

2. Information We Collect

We may collect and process the following types of information:

Personal Data

This includes information that can be used to identify you, such as:

  • Contact information (name, email address, phone number, etc.)
  • Professional information (job title, organization, etc.)
  • Device usage data and unique device identifiers
  • Health and medical data (with explicit consent where required)
  • Payment information for purchases

Non-Personal Data

We also collect anonymous, aggregated information such as:

  • Browser type and version
  • Time and date of access
  • Pages visited and time spent on our website
  • Demographic information not linked to personal identifiers

3. How We Use Your Information

We use your information for the following purposes:

  • To provide, maintain, and improve our medical devices and services
  • To process transactions and send related information
  • To respond to your comments, questions, and requests
  • To monitor and analyze trends, usage, and activities
  • To comply with legal obligations as a medical device company
  • To communicate with you about products, services, and promotions
  • To ensure patient safety and monitor device performance

Legal Basis for Processing: Our processing of your personal data is justified on the following legal bases:

  • Performance of a contract with you
  • Our legitimate business interests
  • Compliance with legal obligations
  • Your consent (for specific purposes)

4. Data Sharing and Disclosure

We may share your information in the following situations:

Service Providers

We may share your information with third-party vendors who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, regulatory bodies).

Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company, we may share your information.

Medical and Safety Purposes

We may share health-related information with healthcare providers, regulatory authorities, or for adverse event reporting as required by medical device regulations.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

5. International Data Transfers

As a global company, we may transfer your personal data to countries outside the UK and European Economic Area (EEA). When we do, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards, such as:

  • Transferring to countries that have been deemed to provide an adequate level of protection
  • Using specific contracts approved for use in the UK which give personal data the same protection it has in the UK

6. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. These include:

  • Encryption of data in transit and at rest
  • Regular security assessments and testing
  • Access controls and authentication mechanisms
  • Staff training on data protection

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: The right to request copies of your personal data
  • Rectification: The right to request correction of inaccurate information
  • Erasure: The right to request deletion of your personal data
  • Restriction: The right to request limiting the processing of your personal data
  • Data Portability: The right to request transfer of your data to another organization
  • Objection: The right to object to processing of your personal data
  • Withdraw Consent: The right to withdraw consent where we rely on it to process your data

To exercise any of these rights, please contact us using the details provided in the Contact section.

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

For medical device-related data, we may retain information for longer periods as required by medical device regulations and product liability laws.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer:

Docomed Ltd

Email: info@docomed.ai

Address: 36 Keswick Road, Bookham, Surrey. KT23 4BH. United Kingdom

You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us first.