Privacy
Policy Available Here
Who we are
Someone To Talk To is registered in England and Wales under Company number 13606463 and have our registered office at 102 Bressey Grove South Woodford, London, England, E18 2HX. For the purposes of applicable data protection legislation including the General Data Protection Regulation 2016/679/EU (‘GDPR’), Someone To Talk To is the data controller for the personal data we process, as described in this privacy policy unless otherwise stated. Our data protection officer is 8foldGovernance Limited (company registration number 13606463) and can be contacted at info@someonetotalkto.online.
Personal data we collect and process about you
We may collect, use, store and transfer different kinds of personal data about you which we have set out in the table below, together with the legal basis which we rely on for such processing and the purpose for which we process that personal data.
If you are resident in the EU/EEA, our data protection representative for the purposes of Article 27 GDPR is Data Protection Representative Limited (trading as ‘DataRep’), a company registered in the Republic of Ireland with registered number 13606463. You should contact DataRep in the first instance for any requests in relation to your personal data by emailing info@someonetotalkto.online. Your request will be forwarded to the DPO as required.
|
Categories of Personal Data |
Legal Basis for processing |
Purpose of processing |
|
Contact Data Includes
name, Someone To Talk To Professional name, address, telephone number,
personal email address and work email address. Your Someone To Talk To
Professional name may constitute personal data if you use identifiable data
when choosing this. |
Legitimate
interests Someone To Talk To communicates with you to deliver our services, and for
business development reasons. Consent Necessity for performance of a contract |
·
Provision
of healthcare and personalised digital content services. ·
Research,
statistical analysis and behavioural analysis to improve our services. ·
Customer
service improvements and quality management. ·
Security,
fraud prevention and detection. ·
To
notify you of any changes to this website or to our services that may affect
you. ·
Direct
marketing and business development activities. |
|
Health Data
(Special category personal data) includes information relating to
your health status and wellbeing. This may include health data you share
during practitioner sessions, biometric data, test results where you have
requested diagnostic test services, photos and images of symptoms that you
choose to share, symptoms and pathological conditions, medication history,
health content preferences, and any other health information submitted via
the application or in practitioner sessions. |
Consent Your
explicit consent is required for the processing of your personal data and sensitive
personal information, particularly regarding health-related data. The
collection and processing of personal health information primarily rely on
your explicit consent. Necessity for providing health services In specific situations where
health or social care services and safety measures are essential, medical
professionals may process sensitive personal data in accordance with their
obligations of confidentiality.
|
· Provision of health and/or social
care, and personalised digital content services. ·
Customisation
to determine your App content preferences. ·
Research,
statistical analysis and behavioural analysis to improve our services,
including temporary processing by AI language models. · Necessary safeguarding (where
explicit consent may not be possible). |
|
Ethnicity
Data (Special category personal data) This may encompass details
regarding your ethnicity and/or race. We refer to established ethnic
categorizations, often in alignment with the Office of National Statistics'
ethnicity consensus list, and may involve particulars concerning your
heritage, birthplace, cultural background, customs, language, and related
elements. |
Consent Your explicit consent is necessary
for the processing of your personal data and special category information
related to ethnicity. Processing of personal ethnicity data primarily relies
on obtaining your explicit consent. Necessity for
providing health services In certain situations where health
services are required and involving medical professionals bound by
confidentiality obligations, the processing of ethnicity data may be
necessary for providing these services.
|
· Research, statistical analysis and
behavioural analysis to improve clinical outcomes and our services. · Necessary for the provision of
health services. |
|
Identity Data
(Special category personal data where the ID document reveals ethnicity or
race or contains biometric data) This may involve the gathering and
handling of copies of passports, driver's licenses, and other identity
documents, which are essential for our review to provide specific services,
such as the facilitation of prescriptions. |
Consent Your explicit consent is crucial
for the processing of your personal data, especially sensitive
identity-related information. The processing of personal identity data
largely relies on obtaining your explicit consent. Necessity for
providing health services In certain situations where health
or social care services are essential and involving medical professionals
obligated by confidentiality standards, the processing of sensitive
identity-related data might be necessary for providing these services. |
· Provision of health and/or social
care, and personalised digital content services. ·
Necessary
for the provision of prescription services. ·
Providing
any required information to third party prescription services. · Necessary safeguarding (where
explicit consent may not be possible). |
|
Technical
Data This encompasses details such as
the internet protocol (IP) address, login data, device type, operating
system, browser type and version, time zone settings, geographical location,
browser plug-in types and versions, as well as other technology information
related to the devices used to access the website or application.
|
Legitimate
Interests Someone To Talk To processes this
information on the basis of its legitimate interests as a digital services
business |
·
Provision
of healthcare and personalised digital content services. ·
Customisation
to determine your App content preferences. ·
Research,
statistical analysis and behavioural analysis to improve our services. ·
Customer
service improvements and quality management. ·
Security,
fraud prevention and detection. ·
Customising
this website and its content to your particular preferences. ·
Improving
the functionality of our services. |
|
Usage Data This involves details regarding
your interactions with our website, the app, and our services, including the
pages visited, traffic data, and location information. When scheduling an
initial video call for discussing the acquisition of Someone To Talk To
services, we might request the recording of calls for quality assurance,
training, and monitoring purposes. However, you have the option to opt out of
such call recordings. |
Legitimate
Interests Someone To Talk To processes such
usage data on the basis of its legitimate interests Consent You have given clear consent for
us to process your personal data when you register to use our services, make
contact with us or provide feedback to us about our services. |
·
Provision
of healthcare and personalised digital content services. ·
User
profiling to determine your App content preferences. ·
Research,
statistical analysis and behavioural analysis to improve our services. ·
Customer
service improvements and quality management. ·
Security,
fraud prevention and detection. ·
Customising
this website and its content to your particular preferences. ·
Improving
the functionality of our services. |
|
Aggregated
Data We reserve the right to utilize
and disclose aggregated and anonymized data, including statistical
information, for various purposes, including research in artificial
intelligence. Aggregated data may be generated from your personal information
but does not identify you directly or indirectly. For instance, we might
aggregate your usage data to determine the proportion of users accessing a
particular service, and this information could be shared with relevant
entities, such as your employer. |
N/A |
·
Research,
statistical analysis and behavioural analysis to improve our services. ·
Customer
service improvements and quality management. ·
To
display on the Someone To Talk To website and social media accounts anonymous
testimonials you may provide to us. |
Please note that in order to ensure continuity of services, your health data submitted during consultations may be accessible to multiple practitioners who are qualified to provide you with assistance.
where
we have gathered and processed your personal information based on your consent,
you retain the right to revoke this consent at any time by contacting us at
info@someonetotalkto.online, ensuring you provide adequate details for
identification purposes (such as account number, username, or registration details).
Please note that withdrawing your consent may impact our ability to provide you
with complete or partial access to our services.
Withdrawing
your consent will not affect the lawfulness of any processing we conducted
prior to your withdrawal.
How your Personal Data is provided to Us
Regarding
users of the application, we collect Personal Data that you voluntarily submit
through the app. We do not receive Personal Data from any third party unless
you have explicitly instructed such a party to share this information with us.
Contact
Data of customer account holders may be collected in the course of our
marketing and sales activities or through your submission of forms on the
Someone To Talk To website(s).
Marketing and opting out
We
conduct direct marketing activities in accordance with all applicable laws. If
you prefer not to receive any direct marketing communications from us, you can
opt out at any time by:
·
emailing
us at info@someonetotalkto.online with subject title ‘Unsubscribe’;
·
providing
us with enough information to identify you (e.g., account number, username,
registration details); and
·
If
your objection is not to direct marketing in general, but to direct marketing
by a particular channel (e.g., email or telephone), please specify the channel
you are objecting to.
In
each communication you receive from us, there will be an “opt-out” or
“unsubscribe” option available.
Information about other individuals
If
you give us information on behalf of someone else, whether through the Someone
To Talk To web forms, you confirm that the other person has appointed you to
act on his/her behalf and has agreed that you can:
·
give
consent on his/her behalf to the processing of his/her personal data;
·
receive
on his/her behalf any data protection notices;
·
give
consent to the processing of his/her personal data; and
·
give
explicit consent to the transfer of his/her health data.
You should refer any such individuals to this Privacy Policy.
Processing data of minors
At
times, you may opt to provide the personal data of your dependents to access
guidance or healthcare services. In such instances, when individuals are under
the minimum legal age for online service usage or healthcare consent, you might
be required to provide explicit parental consent for the processing of their
information.
How long we keep your personal data
We
retain your personal data in our server logs, our databases, and our records
for as long as necessary to provide our services to you or until such time as
you request erasure of your personal data. We may need to retain some of your
information for a longer period, such as in back-up records, or in order to
comply with our legal or regulatory obligations, to resolve disputes or defend
against legal claims. Medical records, which may include chat data, may be
retained for up to ten years after you cease to use the services, in line with
established health practices.
Your rights
You
have the following rights in relation to your personal data. The rights
available to you depend on our legal basis for processing your data.
Access - You have the right to request access
to personal data that we may process about you.
Rectification - You have the right to require us to
correct any inaccuracies in your personal data.
Erasure - You have the right to ask us to
erase your personal data in certain circumstances. Deletion of personal data
will be carried out on the understanding that removal of some information
(e.g., addresses) during an active membership term may negatively affect your
ability to use the website.
Restriction - You have the right to request that
we restrict processing of your personal information in certain circumstances.
Objection - You have the right to object to the processing of your
personal data.
Portability - You have the right to ask that we
transfer the personal data you have given us to another organisation or give it
to you.
You
will not have to pay a fee for exercising your rights, save for where such a
request is determine to be manifestly unfounded or excessive in which case a
reasonable fee may be imposed or we may refuse to act on the request. We have
one month to respond to you in relation to a request.
If
you wish to exercise any of the rights set out above, please contact
info@someonetotalkto.online and provide us with enough information to identify
you (e.g., account number, username, registration details); and to rectify your
data specify the information that is incorrect and what it should be replaced
with.
Disclosure of your personal data
We
maintain contracts with our data processors, ensuring that they are not
authorized to undertake any actions with your personal data unless specifically
instructed by us. While they might engage their third-party data processors,
all of our data processors are bound by legal obligations aligned with GDPR
regulations for any processing performed on our behalf. They are responsible
for securely holding and retaining the data for the duration specified by our
instructions.
These
types of organisations are:
·
Email
and SMS messaging services (to enable us to communicate with you efficiently).
·
Providers
of business services such as auditors, consultants, solicitors and/or insurers
(to enable us to run Someone To Talk To efficiently).
·
Providers
of IT systems or services (to enable us to run Someone To Talk To efficiently)
·
IT
storage providers (to enable us to secure data efficiently).
·
Market
research providers (to help us to improve the services we offer).
·
Providers
of information management services (to help us learn about our customers).
·
Organisations
that you ask us to share your personal information with (upon request)
As
a purchaser of Someone To Talk To services, we may seek your consent to monitor
and record communications with you, including telephone conversations, emails,
and chat, for the purposes of quality assurance, training, and detecting,
investigating, and preventing illegal activities. This may also involve the sharing
of data with law enforcement agencies. You reserve the right to opt out of such
record-keeping, especially concerning sensitive personal data, unless legal
requirements necessitate data sharing.
Keeping your data secure
We
will use technical and organisational measures to safeguard your personal data,
for example: we store your personal data on secure encrypted servers.
While
we will use all reasonable efforts to safeguard your personal data, you
acknowledge that the use of the internet is not entirely secure and for this
reason we cannot guarantee the security or integrity of any personal data that
is transferred from you or to you via the internet.
Transfers of your information out of the EEA
There
might be instances where we have to transfer your personal data outside the
European Economic Area (EEA), including to countries such as the United States,
particularly if any of our suppliers or employees are located outside the EEA.
When
we transfer EU personal data to the United Kingdom, such transfers are
conducted in accordance with the European Commission's adequacy decision of 28
June 2021, which acknowledges the adequacy of data protection standards in the
United Kingdom.
where
the transfer of your data outside the EEA is required to a country not
maintaining an equivalent standard of data protection, we will ensure that any
such transfer of your personal data is subjected to suitable safeguards. This
may include implementing European Commission approved contracts, if applicable,
to guarantee that you have appropriate remedies in the unlikely event of a
security breach.
Links to Other Sites
our
website does and may contain links to other websites, please note that this
privacy policy is applicable solely to our website
(https://www.someonetotalkto.online and any website URL starting with
https://www.someonetotalkto.online/). Therefore, when visiting other websites,
we recommend reviewing their respective privacy policies. We cannot accept
responsibility for any breaches or privacy-related issues that may occur once
you leave our website.
How to make a complaint
We
would encourage you to contact us at info@someonetotalkto.online if you think
that any collection or use of your personal data by us is unfair, misleading or
inappropriate.
Changes to privacy policy
We
keep our privacy policy under regular review. If we change our privacy policy
we will post the changes on this page, so that you may be aware of the
information we collect and how we use it at all times.