We may collect the following personal information:

• General information such as your name, address, phone numbers and email addresses, date of birth and gender.
• Identification information including passport, driving license, national identity card (for non-UK nationals) or government issued ID verification.
• Employment information such as job title, employment history and professional accreditations.
• Financial information such as your bank details and credit and debit card details.
• Information about your family including information about your dependents.
• Information obtained during telephone recordings.
• Information about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views). For more information, please see our cookies policy.

• Details about your physical, mental and emotional health including information on your medical history and treatments received, including but not limited to, blood test results, radiology (imaging reports), medical examinations, histology (biopsies), allergies, co-morbidities, current and historical medications, relevant psychological assessments (including quality of life assessments), bone assessments, performance status (i.e. appetite, pain levels, quality of life).
• Details of your race and/or ethnicity.
• Details of any genetic data or biometric data relating to you.
• Details of your sexual orientation (where relevant to your care).

We will collect information directly from you when:

• You attend a medical appointment (either in person, or via telemedicine) our clinic or by filling in forms on our website.
• You contact us by email, telephone and through other written and verbal communications.
• Dealing with any complaints you may have.

As well as obtaining information directly from you, we will also collect your personal information from:

• Enquiries, discussions and referrals with healthcare professionals including NHS doctors, GPs and oncologists.
• Your GP, other hospitals or clinics where you are currently being treated who may share your medical information with us.

There are a number of reasons we use your personal information and for each use we need to have a “legal ground” to do so.

We will rely on the following “legal grounds” when we process your “personal information”:

• We need to use your personal information to enter into or perform the contract that we hold with you.
• We have a legal or regulatory obligation to use such personal information.
• We have a valid business reason (known as a legitimate interest) to use your personal information, and which is necessary for our everyday business operations and activities (e.g., to keep business and accounting records, manage our business operations and to develop and improve our products and services). When using your personal information for these purposes, we will always consider your rights and interests.
• In very rare circumstances we may need to use your personal information to protect your vital interests. This may happen where you are critically ill and we need to administer emergency treatment or pass on your information to others to enable them to administer emergency treatment to you.
• In each case we assess our need to use this personal information for these purposes against your rights to privacy to ensure we are protecting your rights.

When we use your “special categories of personal information”, we must have an additional “legal ground”. For certain processing purposes, we have outlined alternative legal grounds. We will rely on the following legal grounds when we process your special categories of personal information:

• You have given your explicit consent to our use of your special categories of personal information.
• We need to use such special categories of personal information to establish, exercise or defend legal rights, such as when we are facing legal proceedings or want to bring legal proceedings ourselves.
• We need to use such special categories of personal information for the purposes of preventive medicine, medical diagnosis, provision of healthcare and treatment and the management of health care systems and services.
• We need to use such special categories of personal information for the purposes of medical and scientific research, where that research is not to support measures or decisions with respect to particular individuals.

It is necessary to enter into or perform your contract.

The processing is necessary for a legitimate interest in the form of a valid business reason (to ensure that we fulfil our contractual obligations to clients).

We need to use your information in order to establish, exercise or defend legal rights.

You have given us your explicit consent

The processing is necessary for the purposes of preventive medicine, medical diagnosis, provision of healthcare and treatment and the
management of health care systems and services.

You have given us your explicit consent.

The processing is necessary for the purposes of preventive medicine, medical diagnosis, provision of healthcare and treatment and the management of health care systems and services.

You have given us your explicit consent.

It is necessary to enter into or perform your contract.

The processing is necessary for a legitimate interest in the form of a valid business reason (to ensure that we fulfil our contractual obligations to clients).

We are processing the information to protect your vital interests.

The processing is necessary for the purposes of preventive medicine, medical diagnosis, provision of healthcare and treatment and the management of health care systems and services.

You have given us your explicit consent.

The processing is necessary for protecting your vital interests.

It is necessary to enter into or perform your contract.

It is necessary for compliance with a legal obligation to which we are subject (your data subject access rights).

The processing is necessary for the purposes of preventive medicine, medical diagnosis, provision of healthcare and treatment and the management of health care systems and services.

You have given us your explicit consent.

The processing is necessary for the purposes of preventive medicine, medical diagnosis, provision of healthcare and treatment and the management of health care systems and services, where that research is to support measures or decisions with respect to particular individuals; or

The processing is necessary for the purposes of scientific research where that research is not to support measures or decisions with respect to particular individuals.

The processing is necessary for the purposes of preventive medicine, medical diagnosis, provision of healthcare and treatment and the management of health care systems and services, where that research is to support measures or decisions with respect to particular individuals; or

The processing is necessary for the purposes of scientific or statistical research where that research is not to support measures or decisions with respect to particular individuals.

You have given us your explicit consent.

We need to use your information in order to establish, exercise or defend legal rights.

The use is necessary in order for us to establish, exercise or defend our legal rights.

It is necessary to enter into or perform your insurance contract.

The processing is necessary for a legitimate interest in the form of a valid business reason (to send you communications, record and investigate complaints and ensure that future complaints are handled appropriately).

You have given us your explicit
consent.

We need to use your information in order to establish, exercise or defend legal rights.

The processing is necessary for a legitimate interest in the form of a valid business reason (to run our business efficiently and effectively).

We will keep your personal information confidential, and we will only share it where necessary for the purposes set out above with the following parties.

• Our business partners, suppliers and sub-contractors for the performance of any contract we enter into with you or with them for your benefit. For example, medical details you send to us electronically for assessment of your condition, arrangement of appointment or any other purpose may be transmitted to consultants employed by, or contracted to, Care Oncology Clinic for their professional opinion.
• Healthcare professionals including NHS doctors, GPs, oncologists, referring consultants or your other primary care provider(s).
• We will share your personal information with a registered pharmacy which is providing you with items we have prescribed for you.
• Other third parties who we have entered into contractual arrangements with to provide services we need to carry out our everyday business activities such as document management providers, backoffice system providers, storage warehouses, IT suppliers, actuaries, auditors, lawyers, pharmacy providers, your health insurance provider, outsourced business process management providers, our subcontractors and tax advisers.
• Our insurers (if appropriate) and with your health insurance company to facilitate reimbursement to you of costs incurred by you.
• Prospective purchasers of our business, so that you may continue receiving a seamless service from the Care Oncology Clinic.
• Those who we are under a duty to disclose or share your personal data with in order to comply with any legal obligation or for the purposes of fraud protection and credit risk reduction.
• Third parties, using anonymised data, for the purposes of conducting marketing-related activities, including conducting market research and reports.