Privacy Policy

1. Who we are and our privacy policy

We take privacy seriously and we are committed to protecting it. Dr Hooo Ltd is the data controller in relation to the processing activities described below. This means that we decide why and how your personal information is processed. We are registered with the Information Commissioner’s Office, which is the United Kingdom’s regulator for data protection.

Our policy explains when and why we collect personal information about you, how this information is used and the conditions under which it may be disclosed to others and how it is kept secure.

2. Information we collect, how we use it, and how long we keep it for

We will only collect information about you if we have a lawful reason to do so. Lawful reasons include performing our contract (ie allowing the information of our health professionals to be searchable on our website and allowing the contact details of patients booking appointments to be made available to the health professionals), where we have a ‘legitimate interest’ (for example, where we need to check the bona fides of the health professionals advertising on our website) and where you have given your permission for us to use your personal information in a particular way (for example, marketing or adverting of your services).

We may collect personal information about you for the following reasons.

2.1 Providing Our Services

We use information about you to provide the health professional search engine services to our customers (this, of course, may also be you). You may have given us this information, or it may have been provided by someone else (such as the administrator or manager of a private hospital or surgery)

The information that we hold and process about you will depend on whether we hold this information in relation to you using our services to search for health treatment or in relation to your membership of our search service as a health professional. It might simply be your name, address and email address, or may include other personal information such as your date of birth, sensitive personal information such as medical information (for example, if you are requiring any particular health service) or your professional registration details (for example, if we are registering you for our search service).

2.2 Checking your identity

In relation to health professionals applying to be listed on our search service we will collect proof of identity as well as their professional registration. If we ask you for information for this purpose, we will only use the proof of identity and other personal information you give us as part of this process unless you later agree to us using it in a different way.

2.3 Marketing

If you have given us permission to do so, we may send you information promoting us and our services. This includes keeping you up to date with updates/news on topics you have opted to receive.

We will not share your information for marketing purposes outside of our company. You can decide not to receive marketing communications or change how we contact you at any time. If you want to do so, please contact [email protected] If you ask us to not send you marketing emails, we will continue to hold enough information about you to maintain a record of your preference not to receive emails.

2.4 Automated decision-making and profiling

Automated decision-making is where a decision is made about you by a computer system without any human involvement. Profiling is the automated processing of personal information to assess certain things about you.

2.5 Recruitment

If you are a potential employer or free-lance worker we will hold any information you have provided on a recruitment application form for recruitment purposes only. We will not pass that information to anyone else without your consent. If your application is unsuccessful, we will hold the information you give us for 12 months, after which time we will delete it

2.6 Administration

We also use the information you give us for related purposes, such as:

• meeting our legal and regulatory obligations;
• keeping records;
• analysing operational and financial systems; and
• training and quality control.

2.7 Google User Data

In relation to Google user data, whether from doctors and specialists, or potential patients, this will be used for registration on the Dr Hooo Website and for the scheduling of appointments between patients and specialists as well as to create appointments in the calendars of specialists and to update and delete appointments. Additionally, the data may be used for Google Hangout to facilitate video conferencing between the specialist and the patient if an online booking is selected.

We do not transfer or disclose your Google user data to third parties for purposes other than the ones provided unless you provide express permission for us to do so.

3. Who has access to your information

3.1 Our client

We may have to share your information with our professional healthcare clients if you are a patient seeking treatment and your information with potential clients if you are a healthcare provider.

3.2 Regulatory purposes and outsourcing

We may need to reveal information about you in other situations to other people, such as:

• Medical regulators, to check whether you are registered to provide medical service.
• To check your identify so that appointments can be made by you as a patient with the medical professionals.

Like many businesses, we may outsource some of our computer systems to specialist providers. All of our specialist providers have entered into contracts with us that include terms which protect the information that they hold or process on our behalf.

5. Security precautions

We use a variety of physical and technical measures to keep your information available, safe from loss, accurate, and to prevent unauthorised access to it.

We store electronic data and databases on secure computer systems and control who has access to information (using both physical and electronic means). We use ‘the cloud’, which means that we store client information on servers which we do not own and which are not kept in our offices. We access these servers through secure connections. All of our cloud computing suppliers meet strict requirements for security and confidentiality.

Our staff receive data protection training and we have a set of detailed data protection policies which they must follow when handling personal information.

6. Cookies and online analysis

Cookies are small text files that websites put on your computer so the site can remember who you are. They contain a unique, anonymous identifier, which is usually a string of letters or numbers.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website, and also allows us to improve our site.

These cookies do not identify any person and are used only to track user experience so we can make improvements.

If you failed to choose one of the options when we gave you the cookie notice on entering this website, by continuing to use the site you agree to the way we use cookies.

7. Your rights

You have the following legal rights.

• The right to ask us to confirm whether we hold your personal information and, if we do, to get a copy of the information we hold. This is known as a ‘subject access request’. Exemptions, including legal privilege, could mean you may not be entitled to receive all the information we hold on you. We will tell you if there is any information we have not provided and the reason for doing this;
• The right to have your information erased, although this may not apply if we need to continue to hold or use it for a lawful reason.
• The right to move your information to another organisation in an electronically readable form.
• The right to have inaccurate information corrected.
• The right to object to your information being used for marketing.

Please keep in mind that there are exceptions to the rights above and, although we will always try to respond to your satisfaction, there may be situations where we are unable to do so.

8. Complaints about how we handle your information

If you believe that we have broken your data protection or privacy rights, you can complain to us direct by contacting our Data Protection Officer using the details set out above.

If you are not happy with our response, or you want to contact the UK Information Commissioner’s Office, which regulates and enforces data protection law in the UK, you can find details about how to do this at www.ico.org.uk. If you are unhappy about any other aspect of our service, you can find our complaints procedure here.

9. Our information and how to contact us

We are a Private Limited Company incorporated in England and Wales. Our registered business number is 06639822 and our registered office is at Flat A, 379 City Road, London, United Kingdom, EC1V I NA We are trading in the name of Dr Hooo.

For the purposes of anything within this privacy notice, please write to us at Dr Hooo, Flat A, 379 City Road, London, United Kingdom, EC1V I NA

10. Changes to this privacy notice

We may amend this privacy notice from time to time to make sure it is up to date and accurately reflects how and why we use your personal information. The current version of our privacy notice will always be posted on our website.