CARE Privacy Notice

Privacy Notice

This Privacy Notice sets out how Care Fertility handles, stores, uses and shares your personal information when it collects such information from you or from a third party.

The Data Controller is Care Fertility Group Ltd, located at John Webster House, 6 Lawrence Drive, Nottingham Business Park, Nottingham NG8 6PZ.

What we collect and how we use personal data

Care Fertility processes personal data of individuals and these include names, addresses, telephone numbers, email addresses, financial details, employment details, health records and educational details. Care Fertility processes personal data to enable it provide health services to its service users, to maintain accounts and records, promote its services and manage / support employees.
Care Fertility does not sell personal information to anyone and only shares it with third parties who are facilitating the delivery of Care Fertility’s services.

How we share your personal information

Care Fertility may need to share your personal information with other organisations. Where such sharing is necessary, we will comply with the requirements of the GDPR on data sharing and the requirements of the HFEA Act. The types of organisations / groups that we may share personal data with are set out below:
•    Healthcare professionals
•    Social & welfare organisations
•    Government departments
•    Business associates
•    Representatives of the person whose personal data is processed
•    Suppliers and service providers (including testing laboratories, pharmacies, satellite clinics, the NHS and gamete donation banks)
•    Solicitors
•    Financial organisations / Debt collection agencies (including funding providers)
•    Current, past and prospective employees
•    Other companies within the CARE Group

Your rights as a Data Subject

You have the following rights in relation to your personal information which you can exercise by writing to the Data Protection Officer at the following address:
Data Protection Officer, Care Fertility Group Ltd, John Webster House, 6 Lawrence Drive, Nottingham Business Park, Nottingham, NG8 6PZ.

•    Right to request access to your personal information and information relating to our use and processing of your personal information;
•    Right to request that we restrict our use of your personal information;
•    Right to receive your personal information in a structured commonly-used and machine-readable format or transmit the data directly to another Data Controller;
•    Right to object to the processing of your personal information for certain purposes such as direct marketing and profiling;
•    Right to request your personal information to be erased where it is no longer necessary for the purpose for which it was collected
•    Right to withdraw your consent to the use of your personal information where the processing of your data is based on consent.

How long we retain your personal information

We will retain your personal information for no longer than necessary taking into account the following:
•    The purpose(s) for which we are processing your personal information, such as whether it is necessary to continue to store that information in order to perform our obligation under a contract;
•    Whether we have any legal obligation to continue to process your personal information such as any recordkeeping obligations imposed by an applicable law;
•    Whether we have a business reason to continue to process your personal information;

How we secure your personal information

We take appropriate technical and organisational measures to secure your personal information and protect it against unauthorised or unlawful processing as well as against its accidental loss or destruction or damage including:
•    Using secure servers to store your personal information;
•    Using Secure Sockets Layer (SSL) software or other similar encryption technologies to encrypt confidential data in transit and at rest;
•    Verifying the identity of individuals that access your personal information;
•    Providing access to the minimum personal data necessary, using appropriate restrictions and anonymisation/pseudonymisation whenever possible

Transfer of your personal information to other countries

We may need to transfer your personal information to countries outside the European Economic Area (EEA) or to an international organisation from time to time.

Our use of cookies and similar technologies

Our Site may use “cookies” to enhance User experience. User’s web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. User may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Site may not function properly. Other technologies we use are detailed below.


Detailed information on the processing of Personal Data


Personal Data is collected for the following purposes and using the following services:

Bulletin Board
The CARE Bulletin board is an online forum for use by our patients to discuss elements of treatment or just chat. Registration is required to post on the bulletin board although users can remain anonymous. We may use the collected data to contact users of the board for board administration and also promotional purposes.

Personal Data collected: Cookies, user registration details (inc. e-mail address), publicly posted personal content.

Place of processing: UK

Analytics
The services contained in this section enable the Owner to monitor and analyse web traffic and can be used to keep track of User behaviour.

Google Analytics (Google Inc.)Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy NoticeOpt Out. Privacy Shield participant.

Facebook Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Website.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Notice. Privacy Shield participant.

Hotjar conversion tracking (Hotjar Ltd)
Hotjar conversion tracking is an analytics service provided by Hotjar ltd that records how visitors are using a website, collects user feedback and assists conversions.

Personal Data collected: Cookies and Usage data.

Place of processing: European Union – Privacy NoticeOpt Out.

Contact

Get In Touch (on this Website)
By filling in the contact form with their Data, the User authorizes this Website to use these details to reply to requests for information, quotes or any other kind of request as indicated by the title of the form. The data may further be used to process onward requests by the user.

Personal Data collected: address, city, date of birth, email address, first name, last name, phone number, various types of fertility related data and Postal code.

Events, Newsletter, and Promotion Mailing list (on this Website)
By registering on the mailing list or for the newsletter (with the affirmative action of doing so), the User’s email address and personal data (see form data above) will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature from the CARE Fertility Group Ltd.

Personal Data collected: email address. To opt out, please contact your CARE clinic.

Phone contact (on this Website)
Users that provided their phone number might be contacted for commercial or promotional purposes related to CARE Fertility, as well as for fulfilling support requests. We may also use text messaging to remind you of your appointments or ask you to get in touch with us. To opt out of text messaging please contact your CARE Clinic.

Personal Data collected: phone number.

Patient Portal (my.carefertility.com)
CARE Fertility has a patient portal application to allow both users and CARE to send and access information, including collecting data and processing personal data.

Personal Data collected: Personal Data and Health Records.

Place of processing: United Kingdom

Survey Monkey (SurveyMonkey Inc.)
Survey monkey is an application used to collect user responses to surveyed questions.

Personal Data collected: Cookies and Usage Data, question responses.

Place of processing: United States – Privacy Notice. Privacy Shield participant.

Opinion Access (Opinion Access Inc.)
Opinion Access is an application used to collect user responses to surveyed questions.

Personal Data collected: Cookies and Usage Data, question responses anonymised and for market research only.

Place of processing: United States


Hosting and backend infrastructure

This type of service has the purpose of hosting Data and files that enable this Website to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Website. For redundancy the locations of these servers are distributed but remain within the UK.

Microsoft Azure Web Services (Microsoft Inc.)
Microsoft Azure Web Services is a hosting and backend service provided by Microsoft Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: United Kingdom – Privacy Notice.

Interaction with external social networks and platforms

This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
The interaction and information obtained through this Website are always subject to the User’s privacy settings for each social network.
This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.

Facebook Like button and social widgets (Facebook, Inc.) – including Instagram
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Notice. Privacy Shield participant.

Twitter Tweet button and social widgets (Twitter, Inc.)
The Twitter Tweet button and social widgets are services allowing interaction with the Twitter social network provided by Twitter, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Notice. Privacy Shield participant.

Vimeo (Vimeo, inc.)
Vimeo is a video hosting platform. Data will be collecting on user usage.

Personal Data collected: Cookies and Usage data.

Place of processing: United States – Privacy Notice.

YouTube (Google Inc.)
YouTube is a video hosting platform. Data will be collecting on user usage.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy NoticeOpt Out. Privacy Shield participant.

Managing contacts and sending messages

This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

MailChimp (The Rocket Science Group, LLC.)
MailChimp is an email address management and message sending service provided by The Rocket Science Group, LLC.

Personal Data collected: email address.

Place of processing: United States – Privacy Notice. Privacy Shield participant.

Remarketing and behavioural targeting

This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User.
This activity is performed by tracking Usage Data and by using Cookies, information that is transferred to the partners that manage the remarketing and behavioural targeting activity.
In addition to any opt out offered by any of the services below, the User may opt out of a third-party service's use of cookies by visiting the Network Advertising Initiative opt-out page.

Facebook Custom Audience (Facebook, Inc.)
Facebook Custom Audience is a remarketing and behavioural targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

Personal Data collected: Cookies and email address.

Place of processing: United States – Privacy NoticeOpt Out. Privacy Shield participant.

Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy NoticeOpt Out. Privacy Shield participant.

AdWords Remarketing (Google Inc.)
AdWords Remarketing is a remarketing and behavioural targeting service provided by Google Inc. that connects the activity of this Website with the Adwords advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy NoticeOpt Out.

Remarketing through Google Analytics for Display Advertising (Google Inc.)
Google Analytics for Display Advertising is a remarketing and behavioral targeting service provided by Google Inc. that connects the tracking activity performed by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy NoticeOpt Out. Privacy Shield participant.

 

Questions and Concerns

If you have any question or concern on how we collect, handle, store or secure your personal information, contact our Data Protection Officer using the details below:
Care Fertility Group Ltd,
John Webster House,
Nottingham Business Park,
Nottingham, NG8 6PZ.

You also have the right to lodge a complaint with the Supervisory Authority and for the UK this is the Information Commissioner’s Office (ICO). The ICO’s contact details are:

Information Commissioner’s Office,
Wycliffe House,
Water Lane, Wilmslow,
Cheshire, SK9 5AF,
Tel: 0303 123 1113.