GDPR Privacy notice for Patients
Urgo Limited (we, us, our) is committed to protecting the privacy and security of personal information. This notice is applicable to all patients (you, your) in the UK and Republic of Ireland where we may be required to process you data.
This privacy notice describes how we collect and use your personal information and contains information about your rights in accordance with the General Data Protection Regulation (GDPR).
Urgo Limited is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice
It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Data protection principles
We will comply with data protection law. This says that the personal information we hold about you must be:
- Used lawfully, fairly and in a transparent way.
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
- Relevant to the purposes we have told you about and limited only to those purposes.
- Accurate and kept up to date.
- Kept only as long as necessary for the purposes we have told you about.
- Kept securely.
The kind of information we hold about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may hold the following information about our patients:
- Title
- First name and last name
- Address of pharmacy for delivery of goods
- Relevant measurements in order to provide made to measure garments
Such personal data will be collected upon ordering products directly through Urgo or upon placing an order through a third party such as a pharmacy.
How we will use information about you
We will only use your personal information when the law allows us to. In this case, where it is necessary for our legitimate business purposes and your interests and fundamental rights do not override those interests.
Most commonly, we will use the information described above in order to provide products per a direct request from you or from your pharmacy. We will retain records in order to facilitate repeat orders and for relevant analytical purposes.
In all cases where we may ask you to provide information directly, provision of the requested personal data is optional. However, if we do not collect your personal information we may not be able to provide you with the services required.
Your rights
You may be entitled to ask us for a copy of your information, to correct it, erase or restrict its processing, or to ask us to transfer some of this information to other organisations.
Data Retention
We will hold information about you within our database for a maximum of a three year period to facilitate repeat orders as long as it remains accurate; and otherwise only as necessary for legal backup and audit purposes and to comply with applicable laws.
Changes to this Notice
We may update this notice from time to time. We encourage you to review this notice periodically to stay informed about how we are using and protecting information. Any changes to this notice take effect immediately after being posted or otherwise provided by us.
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of receiving marketing communications, you can get in touch at woundcare@uk.urgo.com or by writing to us at Urgo Ltd, Sullington Road, Shepshed, Loughborough LE12 9JG .
If you have unresolved concerns, you also have the right to complain to data protection authorities.
GDPR Privacy notice for healthcare professionals
Urgo Limited (we, us, our) is committed to protecting the privacy and security of personal information. This notice is applicable to all healthcare professionals (you, your) in the UK and Republic of Ireland. This notice does not relate to individual patients.
This privacy notice describes how we collect and use your personal information and contains information about your rights in accordance with the General Data Protection Regulation (GDPR).
Urgo Limited is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.
It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
Data protection principles
We will comply with data protection law. This says that the personal information we hold about you must be:
- Used lawfully, fairly and in a transparent way.
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
- Relevant to the purposes we have told you about and limited only to those purposes.
- Accurate and kept up to date.
- Kept only as long as necessary for the purposes we have told you about.
- Kept securely.
The kind of information we hold about you
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may hold the following information about healthcare professionals:
- Title
- First name, nickname, last name, and maiden name (if relevant)
- Sex (male/female)
- Healthcare professional type (e.g. doctor, nurse, pharmacist)
- Professional status (e.g. full time/part time)
- Records of meetings and other contact
- Practice and therapeutic areas, specialities and tendencies
- Job title
- Place of qualification
- Name and address of your work/clinical settings and your home address if you have requested this be used for mailings
- Telephone and fax number of your workplace or clinical setting
- Mobile phone number
- Business and/or personal email address
- Year of graduation
- Professional qualifications, experience and interests
Such personal data may have been collected previously directly from you, from public sources such as websites, conferences, publications, or social media. We may also have collected this data from a healthcare database provider who is authorised to share this information with us.
How we will use information about you
We will only use your personal information when the law allows us to. This is most likely to be in one of the following circumstances:
- Where we need to perform the contract we have entered into with you.
- Where we need to comply with a legal obligation.
- Where it is necessary for our legitimate business purposes (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we have your explicit consent to do so.
Most commonly, we will use the information described above to contact or otherwise interact with healthcare professionals for our legitimate business purposes, including:
a) Legal compliance purposes and to communicate directly with healthcare professionals should there be an important message regarding safety or product recalls;
b) recruitment of healthcare professionals for participation in clinical trials, clinical evaluations, market research and other research studies; and
c) conducting direct communications and marketing to healthcare professionals to support the promotion, distribution and development of medical products and services, to inform healthcare professionals about new products, newly approved uses for existing products, medical/healthcare events and conferences, and to distribute free samples.
In some cases we may only contact you with your permission to do so. Where this is the case and you agree we may contact you, we are allowed to process your personal data because you have given your consent. In other cases, we may process your personal data because we have a legitimate interest in doing so, for the purposes we have listed above.
In all cases where we may ask you to provide information directly, provision of the requested personal data is optional. However, if we do not collect your personal information, we will not be able to provide you with the types of benefits listed above.
Your rights
You may be entitled to ask us for a copy of your information, to correct it, erase or restrict its processing, or to ask us to transfer some of this information to other organisations. You may also have the right to object to some processing, such as profiling we perform for the purposes of direct marketing.
Where we have asked for your consent to process your data you have the right to withdraw this consent for future uses of your data for which we need your consent. These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data.
Data Retention
We will hold information about you within our database for as long as it remains accurate and you remain a member of a healthcare profession, and otherwise only as necessary for legal backup and audit purposes and to comply with applicable laws.
Changes to this Notice
We may update this notice from time to time. We encourage you to review this notice periodically to stay informed about how we are using and protecting information. Any changes to this notice take effect immediately after being posted or otherwise provided by us.
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of receiving marketing communications, you can get in touch at woundcare@uk.urgo.com or by writing to us at Urgo Ltd, Sullington Road, Shepshed, Loughborough LE12 9JG .
If you have unresolved concerns, you also have the right to complain to data protection authorities.