At MyMedical.Support (“we”, “us”, or “our”), we take data protection and information security very seriously. The effective management of all personal data, including its security and confidentiality, is at the heart of our business and underpins all our practices and processes.

This privacy notice informs you about the type, scope, and purpose of the processing of personal data we collect, use, and process as part of our website and its functions and content, as well as our external online presences, such as our social media profiles (the “Services”).

This notice applies to you, the User of our Services, and us, the provider of the Services, and governs the processing of your personal data in the context of our Services and business.

This Policy was first published on the 10 June 2025.

Who We Are

We are MyMedical.Support. If you have any questions about your personal information or how we use it, you can contact us via our contact form.

We are the data “controller,” meaning we are responsible for deciding how and why your personal information is used. We’re also responsible for ensuring it is kept safe, secure, and handled legally.

What Is Personal Data?

Personal data refers to any information relating to an identified or identifiable natural person (“Personal Data”).

The Regulation

If you live in the European Economic Area, Regulation (EU) 2016/679 (General Data Protection Regulation) applies. In the UK, it is the “Data Protection Act 2018.”

The Supervisory Authority

The Information Commissioner’s Office (ICO) in the UK is the relevant authority for data protection matters. You have the right to make a complaint at any time to the ICO (www.ico.org.uk). However, we would appreciate the chance to address your concerns before you approach the ICO, so please contact us first.

Accuracy

It is important that the data we hold about you is accurate and current; please keep us informed of any changes to your personal data.

Automated Decision-Making and Profiling

We do not use automation for decision-making or profiling.

Children’s Data

Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your child has provided us with personal data without parental consent, please contact us and we will take the necessary steps to remove that information from our servers.

Cookies

We use cookies on our website. For more information about the cookies we use and how to disable them, please view our cookie policy.

What Personal Data Do We Collect?

We may collect personal information in the course of our business, your use of our Services, or when you purchase one of our digital solutions. This includes:

• Basic information: name, company, title or position

• Contact information: postal address, email address, phone number(s)

• Financial information: payment-related data

• Technical information: details from your visits to our website or communication materials

• Information provided when you contact us or sign up for our Emergency Identity Profile

The Emergency Identity Profile may include:

• Chronic conditions (e.g. diabetes, coronary heart disease), prior surgeries (e.g. organ transplant)

• Medications taken regularly, allergies, intolerances

• Other medical information (e.g. pregnancy, implants)

• Emergency contact details and attending healthcare providers

Data is linked, and we only ask for what is necessary to carry out our services. In emergencies, your Emergency Identity Profile may be accessed without your consent if you are unconscious or otherwise unable to communicate.

How Do We Obtain Personal Data?

We collect personal data through technology tools and services, including our website and emails. We gather information when you provide it to us or interact with us.

Purpose for Processing

• Provide and operate our website and services

• Fulfil contractual services

• Handle customer care and enquiries

• Conduct marketing and advertising

• Maintain security

Legal Basis for Processing

• Consent: With your explicit permission

• Contract: To fulfil a contractual arrangement

• Legitimate Interests: To provide you with the best and most secure service

• Legal Obligation: To comply with legal requirements

• Vital Interests: To communicate important updates or defend legal rights

Data Retention

We retain your personal data only as long as necessary. If not deleted for legal reasons, it will be restricted and not processed for other purposes.

When Do We Disclose Your Personal Data?

We may share your data with service providers who help us deliver our services. In emergencies, medical professionals may access your profile without prior consent. We may also share information with analytics and advertising services to improve our website. Legal obligations or protections may also necessitate disclosure.

How Do We Protect Your Data?

We implement strong technical and organisational measures, including:

• UK-based secure servers

• Two-way authentication

• Encrypted VPNs

• Antivirus and firewall protection

• Strict internal data access policies

International Transfers

Your data is generally processed within the UK and EEA. When transferred outside, we use Standard Contractual Clauses or ensure equivalent protections.

Your Rights

You have the right to:

• Access, correct, or delete your data

• Object to or restrict processing

• Withdraw consent

• Transfer your data to another provider

• File a complaint with the ICO

Social Media

We maintain presences on social media platforms. Interactions there may be processed according to platform terms and this policy.

Analytics and Market Research

We use anonymised data for business analysis, optimisation, and marketing research.

Changes to This Policy

This privacy notice may change over time. Please review it regularly to stay informed.