Oryon Imaging and Healthcare Privacy Notice

This information has been produced to help you understand everything you need to know about the way Oryon Imaging and Healthcare collects, uses, and shares personal data, what your legal rights are and how to exercise them.

We hope you’ll take some time to read this document; we’ve tried to keep it all as simple as possible and to avoid jargon, and we’ll make our best efforts to keep you informed if there are any changes to the way we process your personal data in the future.F

Oryon Imaging and Healthcare takes its responsibility for protecting your data very seriously and we do advise you get to know our practices. If there’s anything here you don’t understand, or if you want to ask any questions, please feel free to contact us.

Who is the Data Controller?

We are Oryon Imaging and Healthcare.

Registered address: 14th Floor, 33 Cavendish Square, London, United Kingdom, W1G 0PW

Registration number: 08025022

In this document Oryon Imaging and Healthcare may be referred to as “we”, “us”, or “our”.

We are formed of three brands, which together aim to show the way to better health. These brands are Oryon Imaging, Oryon Connect and Oryon Develop.

The Oryon umbrella brand has the singular aim of making the quality of the private healthcare we offer as high as we possibly can. We do this by offering efficient, affordable and accessible diagnostic imaging with a service which is easy to use for patients and referrers alike, putting on CPD courses to broaden the professional horizons of allied health professionals, and by efficiently introducing customers to high quality, affordable healthcare professionals in London.

What kinds of Personal Data does Oryon Imaging and Healthcare Process?

Oryon Imaging and Healthcare collects personal data for various purposes; with that in mind we have created a list of the types of personal data that we may collect, either directly from yourself or from other sources, in order to achieve those purposes.

The kinds of personal data we may collect include:

Patient (Oryon Imaging)

• Name, address, telephone number, email address, date of birth, health data, payment details, insurance details

Customer (Oryon Connect)

• Name, address, telephone number, email address, date of birth, gender, health data

Professional contact (Oryon Develop)

• Name, address, telephone number, email address, medical specialities

Healthcare professionals

• Name, address, telephone number, email address, medical qualifications, GMC number

What are the reasons Oryon Imaging and Healthcare collects Personal Data?

Legal Obligations

Oryon Imaging and Healthcare uses personal data firstly to fulfil any contractual obligations that exist between us and yourself. Where we request personal data be provided to enter into, or meet the terms of any such contract, you will be required to provide the relevant personal data or we will not be able to deliver the goods or services you want. In such cases the lawful basis of us processing the personal data is that it is necessary for the performance of a contract.

We are required by law to process personal data for purposes relating to our legal obligations, these include:

To provide for our financial commitments, or to relevant financial authorities.

To comply with regulatory requirements and any self-regulatory schemes.

To carry out required business operations and due diligence.

To cooperate with relevant authorities for reporting criminal activity, or to detect and prevent fraud.

To investigate any insurance claims, claims of unfair dismissal, claims of any kind of harassment or of discrimination, or any other claim whereby the organisation may have to defend itself.

Consent

Oryon Imaging and Healthcare may process Personal Data for the following purposes where it has received consent to do so:

Marketing

You may withdraw your consent for us to process your personal data for these purposes at any time; after a withdrawal of consent request is received, we may have to contact you to verify the request.

Withdrawing your consent for us to process your personal data will not affect the lawfulness of the processing beforehand.

Legitimate Interests

Oryon Imaging and Healthcare may process Personal Data for any of the following purposes, which are considered to be within our legitimate business interests:

To provide goods and services where it has been requested.

To send notification on subjects to individuals who have asked to be kept informed.

To improve the quality of the services we offer, and to better understand customers’ needs by requesting feedback, or reviews of the services provided, or sending survey forms.

To send notifications of any changes to the goods and/or services provided that may affect people.

To understand the scale of the customer base; for statistical analysis and market research.

To recognise when people re-engage with our organisation.

To allow the organisation to support and maintain our products in active service.

Special Category Personal Data

Oryon Imaging and Healthcare may intend to process the following kinds of Special Categories of Personal Data:

Data concerning health information.

Where Special Categories of Personal Data are processed, one or more of the following lawful basis shall apply:

It is necessary for preventive or occupational medicine, for the assessment of the working capacity of an employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems or pursuant to contract with a health professional.

It is necessary for reasons of public health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices.

Where does Oryon Imaging and Healthcare obtain Personal Data from?

We will collect personal data directly from you when you communicate with us by phone, email or live chat, and when you attend appointments. We may also receive personal data from a healthcare professional who will share information with us on your behalf, as part of your healthcare journey.

We collect some personal data from publicly accessible sources.

We may also gather personal data by any of the following methods:

From technical functionality that gathers data automatically from computer equipment when people visit our online platforms.

Who will Oryon Imaging and Healthcare share your Personal Data with?

To achieve the above stated purposes for which we process your personal data, we may have to share your personal data with certain third parties.

We shall make all reasonable efforts to ensure that any third-party we share your personal data with is also compliant with data protection law.

The kinds of third parties we may share your personal data with include:

Other members of a group of companies to which Oryon Imaging and Healthcare belongs.

Organisation where it is necessary to provide goods or services.

• In accordance with the Caldicott Principles, your healthcare records are only shared with the appropriate healthcare professionals when it is relevant to your ongoing care.
• If you are using our diagnostic imaging services, your data will be sent to the Consultant Radiologist, who will create a report based on your scan images and send it back to your referrer.
• If you are using our consultation services, your data will be shared with the requisite healthcare professional so that they have all the information necessary to give the best treatment possible.

Regional and/or local government authorities.

The specific types of third-party Oryon Imaging and Healthcare may share your personal data witch include:

CRM technology providers:

Customer relationship management and marketing systems.

Diagnostic technology provider:

Imaging scanning equipment.

PACS technology provider:

Radiology system and scan images archive.

IT providers:

IT management services.

Email provider:

Email services

Telephony company:

Voice recordings

Software provider:

Live chat service

Technology provider:

Scan reporting system

Radiologist reporting team:

Scan reporting service

Where will Oryon Imaging and Healthcare store your Personal Data?

As a part of our standard business practices, we may transfer your personal data to organisations based in countries that have not been granted an adequacy decision under the General Data Protection Regulation.
Where data is transferred to such countries, we shall ensure that specific safeguards or derogations have been established.

These might include where the data transfer is necessary in order to fulfil a contract between us and yourself, where we have received your specific consent after making you aware of any risks involved, or where contracts are in place between us and the third parties involved that ensure the recipient organisation has a suitable standard of data protection in place.

How long will Oryon Imaging and Healthcare keep your Personal Data?

We will keep your personal data only for as long as required to achieve the purposes for which it was collected, in line with this privacy notice.

The following criteria are what determine the period for which we will keep your personal data:

Until we are no longer required to do so to comply with regulatory requirements or financial obligations.

Until we are no longer required to do so by any law we are subject to.

Until all purposes for which the data was originally gathered have become irrelevant or obsolete.

Until it has been requested that we no longer process the data and that it is erased; in some cases, where there is a remaining relevant or legal reason why we are required to keep this data, we may opt to restrict the amount of processing being conducted to what is absolute necessary rather than erase it.

Your Rights, Our Responsibility.

There are several rights granted to you immediately upon providing us with your personal information; some of these are mentioned above. We’d like you to know that at Oryon Imaging and Healthcare we take your rights seriously and will always conduct ourselves in a way that is considerate of our responsibility to serve your legal rights.

The Right of Access

This grants you the right to confirm whether or not your personal data is being processed, and to be provided with relevant details of what those processing operations are and what personal data of yours is being processed.

If you would like access to the personal data we have about you, we ask that you contact us using the details below.

The Right to Rectification

This one is fairly straight forward; if you notice that the data we have about you is inaccurate or incomplete, you may request we rectify the mistake. We will make every effort to respond to requests of this type immediately.

The Right to Erasure

Otherwise known as the ‘right to be forgotten’, this given you the right to request your personal data be deleted.

This is not an absolute right; if you were to request that we erase your personal data, we would erase as much of that data as we could but may have to retain some information if it is necessary.

Were we have received a request for personal data to be erased, if it is necessary for us to retain some of that information we shall ensure that the remaining data is used only when and where it is absolutely necessary.

The Right to Objection

The right to object is a basic freedom all democracies enjoy. If you wish to object to the way we use, or have used, your personal data you may do so freely.

The Right to Complain

We will always try to maintain the highest standards and encourage the confidence our customers have in us as an organisation. To achieve this, we request that any complaints be first brought to our attention so we can properly investigate matters. If you would like to complain about Oryon Imaging and Healthcare to a regulatory body, you may do so by contacting your local data protection supervisory authority.

NHS National Data Opt-Out

Information about your health and care helps the NHS to improve your individual care, speed up diagnosis, plan your local services and research new treatments.

In May 2018, the strict rules about how this data can and cannot be used were strengthened. You can choose whether your confidential patient information is used for research and planning.

To find out more visit: https://www.nhs.uk/your-nhs-data-matters/.
Oryon does not use any NHS data for research purposes.

Oryon Imaging and Healthcare Contact Details

Oryon Imaging and Healthcare
Lower Ground Floor
Lister House
11-12 Wimpole Street
London
W1G 9ST

0207 042 1888

Imaging@oryon.co.uk or help@oryon.co.uk

Who is the Oryon Imaging and Healthcare Data Protection Officer?

Ametros Group Ltd
Lakeside Offices, Thorn Business Park
Rotherwas Industrial Estate
Hereford
Herefordshire
England
HR2 6JT

0330 223 2246

dpo@ametrosgroup.com

www.ametrosgroup.com