Monmedical Ltd is a company registered in England and Wales whose company number is 09488206 and whose registered address is of Red House Cemetery Pales, Brookwood, Woking, England, GU24 0BL. Cinapsis is a trading name of Monmedical Ltd. Any use of the name “Cinapsis” and the terms “us” or “we” refer to Monmedical Ltd.

This privacy policy explains how we will use the data you provide to us when using the Cinapsis platform. There are three separate privacy notices for:

patients
primary care healthcare professionals and
secondary care healthcare professionals.

Privacy Notice – Patient Data

Your personal data – what is it?

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation 2016/679 (the “GDPR”).

This Privacy Notice tells you what to expect in relation to personal information about you which is collected, handled and processed by Monmedical Ltd.

Who are we?

We are Monmedical Ltd of Red House Cemetery Pales, Brookwood, Woking, England, GU24 0BL. Cinapsis is a trading name of MonMedical Ltd.

Cinapsis is a Data Processor, holding and processing Patient Data on behalf of Data Controllers who will typically be one of: individual GP Practices (or clinical Commissioning Groups on their behalf), Acute Hospital Trusts, Mental Health Trusts or District Nursing Providers.

Cinapsis is the provider of communications systems to the NHS and Private Health Providers that facilitate easier and faster patient-specific discussions between different teams of clinicians. The overall objective is to ensure patient pathways are not delayed unnecessarily on account of clinicians being unable to contact each other.

We acknowledge and agree that any personal data of yours that we handle will be processed in accordance with all applicable data protection laws in force from time to time. Currently, the Data Protection Act 2018 applies and the General Data Protection Regulation 2016/679 (the “GDPR”).

The information we may collect – Patient Data

The information about you that we may collect, hold and process is set out below:

NHS Number – Your 10-digit NHS Number;
Photo Images – relevant photos taken by your GP or other healthcare professional facilitating a request for specialist advice;
Call Recording – a recording of an advice conversation between your GP and a healthcare specialist (e.g. an NHS hospital consultant) which could on occasion include your name;
Associated Notes – any notes or advice request sent by one clinician to another to support the clinical advice discussion.

We validate your NHS number by querying NHS Digital’s Personal Demographic Service (PDS) so that the GP can confirm the NHS number entered is correct. This information will have been provided, or will be provided, by you, your GP or other clinician from whom you are requesting healthcare advice/services in order to provide you care to the highest possible standard.

How we use the information

The above information is used/retained, upon the instruction of the Data Controller, as part of your medical records and serves as a record of advice given should any healthcare organisation need to access it in the future with regard to providing high quality care to you.

How we hold the information

All the personal data we have is stored on our databases in the UK.

Disclosure of your information

Your personal data will be treated as strictly confidential and will be not be shared with any organisation other than those involved in the advice discussion unless required so by law or upon your explicit consent.

Legal basis for processing the information

The legal basis upon which the Data Controller will hold and process your data is Consent.

Consent: the individual has given clear consent for their personal data to be processed for a specific purpose.

Retention of your data

Your data will be retained in accordance with Department of Health guidelines and in accordance with our Data Retention Policy.

Your rights

You currently have the right at any time to ask for:

Access to your data – a copy of the information about you that we hold.
Erasure of your data – removal of data
Restriction of processing – restriction in the way data is processed
Objection – Correction of erroneous data
Data Portability – Transfer of your data to another provider of services
Complaint – you can complain to the Information Commissioners Office (0303 123 1113 or via ico.org.uk\concerns)

If you would like to make a request for any of the above, please email Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org.

Withdrawal of consent (Opt Out)

If you have provided consent to the Data Controller to process your data you have the right to withdraw this and opt out at any time. In order to do so you should contact us by emailing Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org.

Concerns

If you have a concern about the way we are collecting or processing your personal data, you should raise your concern with us in the first instance or directly to Information Commissioners Office at www.ico.org.uk\concerns.

Contact

Please address any questions, comments and requests regarding our data processing practices to Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org

Changes to the Privacy Notice

This Privacy Notice may be changed by us at any time.

Privacy Notice – Primary Care Healthcare Professionals (HCP) (e.g. GPs, dentists, optometrists etc).

Your personal data – what is it?

This Privacy Notice tells you what to expect in relation to personal information about you which is collected, handled and processed by Monmedical Ltd.

Who are we?

We are Monmedical Ltd of Red House Cemetery Pales, Brookwood, Woking, England, GU24 0BL. Cinapsis is a trading name of MonMedical Ltd.

Cinapsis is the Data Controller for the purposes of retaining data relating to Primary Care Healthcare Professionals (e.g. GP’s, dentists, opticians ect.)

Cinapsis is a secure unified communication platform delivering secure messaging, video and telephony. It was built to improve management of referrals between healthcare services - social, primary, secondary and tertiary care. It works on any device – mobile, desktop, and web and is cloud based so it is easy to deploy and manage for organisations of any size. All meetings - calls and video – are recorded, encrypted and securely stored. Users can easily share images, videos, and radiology from their desktop or using our secure mobile applications. Schedule telephone and video consultations at convenient times using our booking system. Enables you to build Advice & Guidance, referral management, triage and Virtual Clinics at different points along your care pathways. All data stored at rest on the N3 network. The Cinapsis platform promotes more efficient communication between clinicians so that patients receive higher quality care and the next step in the care plan is the right one.

The information we may collect – Data relating to Primary Care Healthcare Professionals (e.g. GP’s, dentists, opticians.)

The information about you that we may collect, hold and process is set out below:

Name
Job title
Employing organisation
GMC number (or equivalent)
Email address
Your image
Mobile phone number
Photograph

This information will have been provided, or will be provided, by you or a third party who we work with, such as your employing organisation.

How we use the information

The above information is used to facilitate clinician to clinician contact via the Cinapsis system, for the purposes of providing high quality care to patients.

How we hold the information

All the personal data we have is stored on our database in the UK.

Disclosure of your information

Your personal data will be treated as strictly confidential and will be not be shared with any third-party organisation other than with your explicit consent.

Legal basis for processing the information

The legal basis upon which we hold and process your data is Public Task.

Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

Retention of your data

Your data will be retained for no longer than is necessary and in accordance with our Data Retention Policy.

Your rights

You currently have the right at any time to ask for:

Access to your data – a copy of the information about you that we hold.
Erasure of your data – removal of data
Restriction of processing – restriction in the way data is processed
Objection – Correction of erroneous data
Data Portability – Transfer of your data to another provider of services
Complaint – you can complain to the Information Commissioners Office (0303 123 1113 or via ico.org.uk\concerns)

If you would like to make a request for any of the above, please email Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org.

Withdrawal of consent (Opt-Out)

If you have provided us with your consent to process your data, for the purpose of using our services you have the right to withdraw this and opt out at any time. In order to do so you should contact us by emailing Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org.

Concerns

If you have a concern about the way we are collecting or using your personal data, you should raise your concern with us in the first instance or directly to Information Commissioners Office at www.ico.org.uk\concerns.

Contact

Please address any questions, comments and requests regarding our data processing practices to Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org.

Changes to the Privacy Notice

This Privacy Notice may be changed by us at any time.

Privacy Notice – Secondary Care Healthcare Professionals (HCP) (e.g. hospital consultants).

Your personal data – what is it?

This Privacy Notice tells you what to expect in relation to personal information about you which is collected, handled and processed by Monmedical Ltd.

Who are we?

We are Monmedical Ltd of Red House Cemetery Pales, Brookwood, Woking, England, GU24 0BL. Cinapsis is a trading name of MonMedical Ltd.

Cinapsis is the Data Controller for the purposes of retaining data relating to Privacy Notice – Secondary Care Healthcare Professionals (e.g. Hospital Consultants).

The information we may collect relating to Secondary Care Healthcare Professionals (e.g. Hospital Consultants)

The information about you that we may collect, hold and process is set out below:

Name
Job title
Employing organisation
GMC number (or equivalent)
Email address
Your image
Mobile phone number
Photograph

This information will have been provided, or will be provided, by you or a third party who we work with, such as your employing organisation.

How we use the information

The above information is/will be used to facilitate clinician to clinician contact via the Cinapsis system, for the purposes of providing high quality care to patients.

How we hold the information

All the personal data we have is stored on our databases in the UK.

Disclosure of your information

Your personal data will be treated as strictly confidential and will be not be shared with any third-party organisation other than with your explicit consent.

Legal basis for processing the information

The legal basis upon which we hold and process your data is Public Task.

Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.

Retention of your data

Your data will be retained for no longer than is necessary and in accordance with our Data Retention Policy.

Your rights

You currently have the right at any time to ask for:

Access to your data – a copy of the information about you that we hold.
Erasure of your data – removal of data
Restriction of processing – restriction in the way data is processed
Objection – Correction of erroneous data
Data Portability – Transfer of your data to another provider of services
Complaint – you can complain to the Information Commissioners Office (0303 123 1113 or via ico.org.uk\concerns)

If you would like to make a request for any of the above, please email Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org.

Withdrawal of consent (Opt-Out)

Concerns

Contact

Please address any questions, comments and requests regarding our data processing practices to Dr. Owain Rhys Hughes, Data Protection Officer at support@cinapsis.org.

Changes to the Privacy Notice

This Privacy Notice may be changed by us at any time.