Privacy Policy

Who we are:

NUMA Ltd (“we”, “us” or “our”) operate the Hyperbaric Oxygen Clinic (“Clinic”), which is a private clinic offering hyperbaric oxygen treatment. The Clinic is based at 6 York Street, London, W1U 6QD. 

The General Data Protection Regulation (GDPR) sets out the basis upon which an individual’s data can be obtained and used. The purpose of this Privacy Notice is to explain how we will use any personal data that we collect about you when you contact us or use our services.

If you would like to contact us about any of the information contained within this Privacy Notice you can contact us at info@numaoxygen.com or telephone on +44 (0)20 3823 1212.  

Information we collect about you:

Patients and Prospective Patients:

We collect information about you when you contact us about our services, make an appointment with us and visit the Clinic for treatment or are referred to us by another medical professional.

In order to support your care, our staff maintain records about you. This can include:

• Your age, contact details and next of kin
• Details of your appointments, clinic visits, etc.
• Records about your health, treatment and care
• Results of investigations, such as laboratory tests, and x-rays
• Information received from other health professionals
• We also collect information about you when you complete our new patient questionnaire and patient satisfaction feedback questionnaire.

Website users:

When you use our website, we may also collect information about your visits to the website, and technical information about your computer, tablet, mobile or other device through which you access the website and/or platform.

How we will use your personal information:

We will use information about you to enable us to arrange appointments with our clinician and/or investigations or hyperbaric treatments to ensure that you are receiving care appropriate to your clinical needs.

We will use your information to provide you with details about other services or products that we offer that we think will be relevant to your ongoing care or of may be of interest to you.

If you are a website user, we will also use your personal data for the purposes of:

• enabling you to access and use our website
• administering our website
• improving our website to ensure that content is presented in the most effective manner
• helping to create a safe environment on the website

Marketing:

We would like to send you information about products and services of ours and other companies we work with which may be of interest to you. If you have consented to receive marketing you may opt out at a later date.

You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please [click on the unsubscribe options in our communication] or contact us using the details provided above.

Lawfulness of processing:

We are only allowed to process your personal data where we have a lawful basis for doing so. We will only process your personal data where:

• it is necessary to perform our contract with you
• it is necessary to comply with our legal obligations
• it is in our legitimate interests to do so
• in rare circumstances, the processing is necessary to protect your vital interests
• if no other lawful basis is applicable, we may request your consent 

Where we process your “special category data”, which is more sensitive personal information (such as health data) which benefits from a higher degree of protection under the GDPR, we only do so where:

• it is necessary in order for us to provide health services
• it is necessary for the establishment, exercise or defence of legal claims
• it is necessary for the performance of a task carried out in the public interest
• we have obtained your explicit consent

When you come to the Clinic to obtain hyperbaric oxygen therapy and agree to the terms of our medical consent, we will process your health data as required in order to provide you with the health services you have requested.

If you would like more information in respect of the lawful bases upon which we are processing your personal data, please contact us using the details provided above.

Who we share your data with:

We will not disclose your personal data other than as set out in this privacy policy without your permission, unless in exceptional circumstances (i.e. life or death situations) or we are required to do so by law.

If you have been referred to us by another medical or allied professional, we may disclose details of your treatment and clinical progress to them where appropriate. We will discuss any disclosure with you in advance. You can ask for some information not to be shared but this may result in the delivery of your care being less efficient.              

In order for us to provide our services, we may share your information with selected third parties including; clinical facilities, suppliers and sub-contractors.

We may share certain of your information with analytics and search engine providers that assist us in the improvement and optimisation of our site. 

We will share information about your treatment with us with your insurance company in line with the terms of the policy that you have in place with them.

We may share your data if all or substantially all of our assets are acquired by a third party, in which case personal information held by it about you will be one of the transferred assets. 

Your Rights:

Access to your information:

You have the right to request a copy of the information that we hold about you (“Right of Access”). If you would like a copy of some, or all, of your personal information please contact us using the details set out above or write to us at the following address: 6 York Street, London, W1U 6QD. 

Right of rectification:

If your personal details change, or it comes to your attention that the information we hold about you is inaccurate in any way please let us know and we will make the appropriate corrections.

Right to Object:

You have the right to object to our processing of your personal information where:

• we are using it for the purposes of direct marketing
• in certain circumstances, where our processing is carried out on the basis of our legitimate interests

Your other rights:

In certain circumstances, you may also have the right to:

• request erasure of your personal data
• request restriction of processing your personal data
• request transfer of your personal data
• withdraw your consent

Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under the applicable law apply.

If you have concerns about the way in which we have handled your data, please contact us using the details provided above. 

Whilst we would welcome the opportunity to resolve any concerns you have in relation to our handling of your personal data in the first instance, you can also lodge a complaint at any time to the Information Commissioner’s Office at: https://ico.org.uk/concerns/.

Where we store your personal information:

Where we collect personal information from you, it may be necessary for us to transfer your personal information outside of the UK or the European Economic Area (“EEA”) to our service providers and business partners located outside the UK or the EEA.

Where personal information is transferred to and stored in a country not determined by the European Commission as providing adequate levels of protection for personal information, we take steps to provide appropriate safeguards to protect your personal information, including entering into standard contractual clauses approved by the UK or the European Commission, obliging recipients to protect your personal information.

Security:

When medical records are shared with third parties electronically, this is done through an encrypted file sharing service.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Cookies:

Our website uses cookies to distinguish you from other users of our website.  A “cookie” is a small amount of data which often includes a unique identifier that is sent to your computer, tablet or mobile phone (referred to here as a “device”) browser from a website’s computer and is stored on your device’s hard drive, mobile or other device.

There are different types of cookies which are used to do different things such as allowing you to navigate between pages on a website efficiently, remembering your preferences on certain web pages, or improving your overall experience.

Most web browsers automatically accept cookies, but you can disable this function by changing your browser settings if you so wish. To find out more about cookies including what they are, how to control them or how to delete them, please visit www.aboutcookies.org.

We ask for your consent to place cookies on your device, except where these are essential for us to provide you with a service that you have requested.

Other websites:

Our site may, from time to time, contain links to and from the websites of our partner networks and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites

Data Retention:

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.  In general, health records of patients are kept for 8 years after conclusion of treatment (children’s records are to be retained until they are 21 years old).  Other specialised categories of data are retained according to the NHS retention schedule.

Changes to our Privacy Notice:

We regularly review our Privacy Notice and will update this page when necessary. This Privacy Notice was last [ 18/07/2020 ]. 

Acknowledgement of Notice of Privacy Practices 

“I hereby acknowledge that I have read and understood this clinic’s NOTICE OF PRIVACY PRACTICES. I understand that if I have questions or complaints regarding my privacy rights that I may contact the person listed above. I further understand that the clinic will offer me updates to this NOTICE OF PRIVACY PRACTICES should it be amended, modified, or changed in any way.”