Privacy notice
This privacy notice explains how Healum Ltd use your personal data.
This notice applies to all processing undertaken except that if you are located outside the UK.
Who are we?
We (Healum Ltd) are a technology company who have created the Healum product to help you in the management of your long-term conditions. We are registered with the Information Commissioners Officer (registration number ZA254966)
What do we do?
Healum act as a Processor in relation to our customers. This means that we only ever act under the written instructions from the Controller, which is likely your GP or NHS Hospital. Your GP or NHS Hospital remain in control of your personal data, and at the end of our contract with them, we return or destroy your personal data.
All your personal data will remain in the UK.
Your rights
Data Protection Law provides you, as a data subject, a number of rights. This includes the right of access to your personal data. As a Processor, we assist the Controller in compliance with this. You should therefore first contact your healthcare provider who introduced you to Healum.
You may of course contact us too, details of which are provided below.
How can you contact us?
If you have any queries around the use of personal data, we have appointed a Data Protection Officer to independently monitor our compliance with Data Protection Law. You can contact them at [email protected].
You also have the right to contact the Information Commissioners Office, who can be contacted at [email protected] or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Healum as Joint data controller
If you are using Healum product as part of the Enhancing Type 2 Diabetes treatment through digital plans of care study run by Vernova and Healum Ltd , this privacy notice will apply to the processing of your personal data.
Part of Research Study (IRAS 20/nw0203)
Who are we?
If you have decided to take part of the research study into the use of Healum, Healum act as Joint Controller along with Vernova CIC and your GP Practice.
As Joint Controllers, Healum, Vernova CIC and your GP Practice have an agreement in place which details the roles and responsibilities of each organisation for this research.
Healum (“we”) are registered with the Information Commissioners Officer (registration number ZA254966). Our registered address is Studio 37, The Riverside Building, Trinity Buoy Wharf, London, E14 0FP
What do we do?
As a research participant, your personal data will be processed for the following purposes:
| Purpose | Lawful Basis |
| Provision of the Healum platform (only for those individuals who are in the group using the Healum platform) | Healum Article 6(1)(f) – Legitimate interests Article 9(2)(h) – provision of health and social care GP Practice Article 6(1)(e) – public task Article 9(2)(h) – provision of health and social care |
| Undertaking Research for all individuals who are participating in the research. | Healum Article 6(1)(f) – Legitimate interests Article 9(2)(j) – scientific research GP Practice Article 6(1)(e) – public task Article 9(2)(j) – scientific research Vernova Article 6(1)(f) – Legitimate interests Article 9(2)(j) – scientific research |
The legitimate interests pursued by Healum are:
- Ensuring individuals living with long term conditions can access supportive services through the product
- Ensuring research is carried out on the Healum product to evaluate the effectiveness of its use in supporting individuals living with long term conditions
All your personal data shall remain in the UK.
Your personal data shall be shared with Vernova CIC as Chief Investigator. Healum will not share your personal data with any other organisation unless there is a lawful basis to do so. In the case that it does, you shall be informed before any transfer takes place unless there is a legal obligation to not do so.
Any personal data during the use of the Healum application which is used as part of the research will be destroyed at the end of the contract with your GP Practice. Personal data as part of the research shall be anonymised where possible but in any case kept for no longer than 20 years. Healum shall only retain a pseudonymised subject ID as Sponsor of this research.
Your rights
Data Protection Law provides you, as a data subject, a number of rights including right of access, right to object and right to erasure. In certain limited circumstances your request may be refused, but you will be informed of any reason why and how to appeal if, in a rare circumstance, this does happen.
In line with the informed consent participant form, you are able to withdraw from the study at any time. If you withdraw, no more personal data will be collected from you to form part of the research study, however, any personal data collected up to that point will be anonymised where possible and retained to maintain the integrity of the research.
You may make a request free of charge to Healum by writing to [email protected].
How can you contact us?
If you have any queries around the use of personal data, we have appointed a Data Protection Officer to independently monitor our compliance with Data Protection Law. You can contact them at [email protected].
You also have the right to contact the Information Commissioners Office, who can be contacted at [email protected] or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Other users not partipcants to the research study (IRAS 20/nw0203)
If you did not wish to be part of the research study, you are still able to use the Healum platform. In this instance, Healum and your GP Practice act as Joint Controllers.
As Joint Controllers, Healum and your GP Practice have an agreement in place which details the roles and responsibilities of each organisation.
Healum (“we”) are registered with the Information Commissioners Officer (registration number ZA254966). Our registered address is Studio 37, The Riverside Building, Trinity Buoy Wharf, London, E14 0FP
What do we do?
In providing the Healum product to you, your personal data will be processed for the following purposes:
| Purpose | Lawful Basis |
| Provision of the Healum platform | Healum Article 6(1)(f) – Legitimate interests Article 9(2)(h) – provision of health and social care GP Practice Article 6(1)(e) – public task Article 9(2)(h) – provision of health and social care |
| Undertaking Machine Learning | Healum Article 6(1)(f) – Legitimate interests Article 9(2)(j) – scientific purposes GP Practice Article 6(1)(e) – public task Article 9(2)(j) – scientific purposes |
The legitimate interests pursued by Healum are:
- Ensuring individuals living with long term conditions can access supportive services through the product
- Improving the Healum product to provide personalised service using machine learning
All your personal data will remain in the UK.
Personal data will be retained for the period of your involvement with Healum for one year after your last activity with Healum.
Your rights
Data Protection Law provides you as a data subject a number of rights including right of access, right to object and right to erasure. In certain limited circumstances your request may be refused, but you will be informed of any reason why and how to appeal if, in a rare circumstance, this does happen.
You may make a request free of charge to Healum by writing to [email protected].
How can you contact us?
If you have any queries around the use of personal data, we have appointed a Data Protection Officer to independently monitor our compliance with Data Protection Law. You can contact them at [email protected].
You also have the right to contact the Information Commissioners Office, who can be contacted at [email protected] or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF