Privacy Policy

Last updated: 14th January 2022

1. About us and this Privacy Policy

   medCrowd is controlled and operated by medDigital Limited ("medDigital", "we", "us", "our"). We are a company registered in England and Wales with the company registration number 06453053. Our registered office is GG.430, Metal Box Factory, 30 Great Guildford Street, London SE1 0HS. We are registered with the UK Information Commissioner's Office as a data controller with registration Z1263667.

   This Privacy Policy explains what personal data is collected and recorded about you during your visit to medCrowd and what we do with that information.

   The legal basis for processing your personal data is the consent you give when you join medCrowd.

   Please also see our Terms of Use which govern your access to and use of medCrowd.

2. Your rights

   We treat all our Members equally, irrespective of which country they reside in. As a UK company, we adhere to the UK Data Protection Act (2018)/GDPR.

   The GDPR provides you the following rights:

   • The right to be informed: You have the right to be informed about the collection and use of your personal data and this privacy policy aims to do that.
   • The right of access: You have the right to access your personal data¹.
   • The right to rectification: You have the right for any inaccurate personal data to be rectified¹.
   • The right to erasure: You have the right for your personal data to be erased¹.
   • The right to restrict processing: You have the right to restrict how we process your personal data.
   • The right to data portability: You have the right to receive a copy of the personal data you have given to us in a structured, commonly used, machine readable format.
   • The right to object: You have the right to object to the processing of your personal data¹.
   • The right to complain to the competent supervisory authority about the processing of your data, which in the UK is the Information Commissioner's Office.
   • Rights in relation to automated decision making and profiling: medCrowd does not perform automated decision making or profiling.

   ¹medCrowd allows you to assert these rights using the settings available within medCrowd.

   If you are unable or unwilling to assert these rights using the tools provided in medCrowd, please email us at privacy@medCrowd.com and we'll ensure your rights are respected and actioned. We won't charge a fee for doing so, but we will have to take steps to verify your identity before actioning your request.

3. Cookies

   "Cookies" are small amounts of information that are placed on your device. We only set cookies that are strictly necessary. medCrowd does not participate in any form of user tracking or the collection/distribution of personal data involving cookies.

   First party cookies:

   Name	Purpose	Typical Content	Expires
   medCrowd	A unique session identifier to keep track of your session.	A sequence of random characters unique to your current session.	When you close your browser.
   XSRF-TOKEN	A security mechanism to protect from cross-site request forgery.	A sequence of random characters.	After 1 hour of inactivity

4. The information we collect

   We may collect, store or accumulate certain non-personal data such as information regarding how visitors found medCrowd, which of our pages are most popular, and how people navigate through medCrowd to help us improve the user experience and for general administration.

   We collect personal information from persons who register to be medCrowd members.

   The type of information that we collect from you if you choose to register as a Member includes: your name, a photo, the name of your organisation, email address(es), mobile number(s), role, specialisms and career grade.

   We may also record additional personal data that you provide to us as a result of your use of medCrowd. This includes, for example, information you provide when applying to join a team, participate in a paid conversation, when sending us an email enquiry and in the general provision of services.

   You may be given the opportunity to submit information about other people for the purposes of, for example, sharing medical expertise. You must obtain permission from such other people before you submit their information to us.

   You must respect patients' confidentiality and comply at all times with all applicable laws as well as the regulations and guidance governing your healthcare profession in the country where you are located (for example, for UK-based users there is specific guidance from the GMC on this issue). Insofar as you do wish to use a patient's personal circumstances within any context on medCrowd, you must either: (a) ensure that there is no way that the patient could possibly be identified from the details that you have provided; or (b) you must have clear and unambiguous authority to disclose those details;

5. Children

   In order to become a Member, you must be over 18 years old and be registered with us in accordance with the Terms of Use. Accordingly, we do not knowingly collect any personally data from anyone under 18 years old. If we learn that a Member is under 18 years old, we will terminate that membership and delete any personal data that we have collected about that individual.

6. Why and how we collect and process your information

   We collect and process information so we are able to:

   • recognise you as a Member and to provide you with the services or products you request;
   • inform you about, and allow you to participate in, activities on medCrowd;
   • manage our relationship with you and to inform you of changes made to medCrowd;
   • send you updates (such as when certain activities, like conversation updates, happen), newsletters, marketing materials and other information that may be of interest to you. For example, depending on your email notification settings, we may send you monthly updates that include topics you may like. You can decide to stop getting these updates by updating your account settings (or through other settings we may provide);
   • to keep a record of your activity as a resource for other medCrowd members to search, including amongst other things, your conversations, any contributions you make, and/or answers you provide;
   • to develop an online user profile of you;
   • respond to any comments or questions you may have (including keeping a copy of email correspondence); and
   • collect, store or accumulate certain non-personal data such as information regarding how visitors found medCrowd, which of our pages are most popular, and how people navigate through medCrowd to help us improve the user experience and for general administration.

7. Usage data

   When you use App, we collect limited, anonymous data. Our servers will record your browser and operating environment, date and time, the page you accessed, and any referring page. We use this information to generate statistics, analyse navigational patterns and measure activity so we can improve medCrowd.

   If you become a medCrowd member, we will additionally keep a record of the IP addresses and types of browsers/devices that you use when accessing medCrowd. We use this information to warn you if we detect usage of your medCrowd account on a device or at a location not normally used by you. This information will be used for no purpose other than maintaining the security of your account.

   If you become a medCrowd member, we will additionally log the activities that you perform on medCrowd to maintain an audit trail to comply with healthcare legislation. This information will be used for no other purpose.

8. Who we disclose your information to

   Limited personal information (name, photo, country, role, specialism(s), organisation & career grade) is available to all medCrowd members as your profile.

   If you choose to apply to join a team or participate in a paid conversation, we will ask for additional information which will be disclosed to the owners of those resources to allow them to make an informed decision whether to accept or reject your application and to manage your membership of those resources including, for example, making payments to you.

   If you connect a third party application to medCrowd (for example, using 'Login with medCrowd' on a third party application), we will disclose limited information to them so they can provide you with the services that you have requested. We'll make it clear what information will be disclosed and ask for your consent before doing so. You can revoke that consent at any time by removing the application using the tools provided within medCrowd.

   We may use third parties to perform functions such as hosting or payment processing on our behalf. Such third parties may be provided with access to your information if needed to perform their specific functions, but they may not use the information for any other purpose. These third parties will be UK or EU entities that must comply with the UK & EU GDPR or US entities who have adequate safeguards in place as determined by the UK GDPR.

   We may disclose your information to third parties where necessary to comply with applicable laws and regulations, where there is a complaint relating your use of the medCrowd and/or for the purposes of obtaining professional advice (for example, legal advice).

   We may sell, share or otherwise transfer information about visitors to medCrowd in an anonymous or aggregate form with third parties including advertisers, business partners, and sponsors, for the purposes of, without limitation, understanding customer trends and patterns and managing and improving our business relationships.

   It is possible that medDigital could merge with or be acquired by another business or that the operation of medCrowd will be transferred or sub-contracted to another legal entity. To the extent legally permissible, we may share with, or otherwise transfer your information to, the resulting legal entity.

9. Publicly available information

   medCrowd offers a variety of means by which Members may write comments, express their opinions and take part in chat rooms, message boards, video conferences, newsgroups, etc. Such services are accessible by third parties (including other Members) and we cannot be responsible for other parties' use of the information which you make available to such third parties. Please see our Terms of Use for additional information on the rights associated with information you may submit through these services.

10. Links, advertisers and sponsors

    medCrowd may contain links to websites. Please be aware that we are not responsible for, and have no control over, the privacy practices of other websites. Please refer to their own privacy policies for more information.

    In addition, we may sometimes provide content on medCrowd that is sponsored by, or co-branded with, third parties (for example, surveys). Depending on the circumstances, your participation in any such sponsored and/or co-branded activities may involve you volunteering your personal information to the relevant third party. We are not responsible for the collection and/or use of your personal information by any such third parties.

11. Security

    We have taken appropriate technical and organisational measures to protect the personal information that we collect against unauthorised or unlawful processing as well as against accidental loss, destruction or damage.

    We will continue to maintain and improve these measures over time in line with legal and technological developments. Please note, however, that no data transmission over the internet can be guaranteed as totally secure.

12. Storage

    The information that you submit to medCrowd is stored on servers in a secure location in the United Kingdom. Your information will not be stored for longer than is necessary for the purposes set out in this Privacy Policy.

13. Changes to our Privacy Policy

    If we decide to change this Privacy Policy, we will post the revised policy here.

    If we make a change to this Privacy Policy which means we'll be using existing personal data for a new purpose, we'll communicate this to you before doing so.

14. How to contact us

    If you have any questions or comments about this Privacy Policy please feel free to contact us by email at privacy@medCrowd.com or by post to The Privacy Officer, medDigital Limited, GG.430, Metal Box Factory, 30 Great Guildford Street, London SE1 0HS, United Kingdom.