This policy relates to Our compliance with HIPAA, POPIA and (i) the Data Protection Act 1998 while it remains in effect until it is replaced by the General Data Protection Regulation ((EU) 2016/679) on 25 May 2018; or (ii) unless and until the GDPR is no longer directly applicable in the UK, the General Data Protection Regulation ((EU) 2016/679) and any national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK; or (iii) any successor legislation to the General Data Protection Regulation ((EU) 2016/679) or the Data Protection Act 1998 (hereinafter “Data Protection Legislation”). In accordance with GDPR, we will notify you within 24 hours of a personal data breach relating to your Connected Healthware Account becoming known to us and will inform the ICO within 72 hours of any such incident.
For the purpose of the Data Protection Legislation, where you add information to your Connected Healthware account, you are the data controller and Connected Healthware is the data processor.
We use session cookies to keep track of your password and in the case of the Connected Healthware Application to personalize your future visits. We use contact information for internal purposes, and to provide the services, as well as to provide updates and enhancements and information about new product features and services where you have opted in to receive these. You will be given the opportunity to opt into these services at the point of registration. Your health information and personal records are password-protected to prevent access by other users.
Data Ownership – Your Data
The Connected Healthware service allows you to store or share Your Data or receive data from others. We don’t claim ownership of Your Data. Your Data remains Your Data and you are responsible for it. When you share Your Data with other people, you understand that they may be able to, on a worldwide basis, use, save, record, reproduce, transmit, display Your Data. If you do not want others to have that ability, do not use the Service to share Your Data. You represent and warrant that for the duration of these Terms, you have (and will have) all the rights necessary for Your Data that is uploaded, stored, or shared on or through the Service and that the collection, use, and retention of Your Data will not violate any law or rights of others. Connected Healthware and Digital Shift PTY LTD cannot be held responsible for Your Data or the material others upload, store or share to your account using the Service.
Use and Disclosure of Personal Information
We use the data that we collect from you for purposes, which may include:
- providing our users with a personalised service
- processing registrations and enquiries
- providing you with information about enhancements and alterations to our products and services, (provided that you ask to receive such information)
We may also disclose your information to successors in title to our business or in accordance with a properly executed court order or otherwise required to do so by law.
We also use information in aggregate form (so that no individual user is identified) for example in the following ways:
- to build up marketing profiles
- to aid strategic development
- to provide data to medical charities, (for example as to the number of individuals in a geographic region that might be suffering from diabetes)
- audit usage of the site
All personal, identifiable information is retained by Connected Healthware indefinitely unless you request that the information be deleted.
The Connected Healthware website may contain links to other websites. Connected Healthware and Digital Shift PTY LTD is not responsible for the privacy practices or the content of such web sites. Please read the privacy statements of the linked web sites that you visit.
When you provide Connected Healthware with personal information, that information may be sent electronically to servers outside of the country where you originally entered the information. In addition, that information may be used, stored and processed outside of the country where you entered the information.
Whenever Connected Healthware handles personal information, regardless of where this occurs, Connected Healthware takes every precaution to ensure that your information is treated securely, for instance by encrypting the information and by storing the information in a secure environment. Unfortunately, no data transmission over the Internet can be guaranteed to be 100 per cent secure. As a result, while we strive to protect your personal information, Connected Healthware and Digital Shift PTY LTD cannot ensure or warrant the security of any information you transmit to us, and you do so at your own risk.
Registered users may, from time to time, get information from Connected Healthware about present or future Connected Healthware products and services as well as details of changes to and enhancements of our products and services. You can opt-out of receiving such information by emailing us at support@ConnectedHealthware.com.
Subscribers to the Connected Healthware Service may remove all of the information stored about them by means of contacting firstname.lastname@example.org and requesting such action be performed. Connected Healthware users that wish to have information held by Connected Healthware about them deleted, may do so by contacting Connected Healthware and quoting the unique Connected Healthware ID number allocated to them on registration. If you wish to remove your information, the process takes three business days and you will be notified via e-mail upon completion of the removal process.
Notification of Changes