MyPatientSpace's Privacy Policy

Last revision [Nov 25, 2018 ]

Privacy Policy

At myPatientSpace, we understand that the privacy and security of your information is important to you. To this end, we endeavour to safeguard the privacy of all information you entrust us with in order to protect and respect your privacy. 

MyPatientSpace provides services to various types of healthcare providers and in turn these healthcare providers invite their staff and patients to use myPatientSpace during their episodes of care.  Patients and staff may also invite extended care takers (e.g. family members). In these circumstances in respect of your personal data provided by your healthcare provider to the MyPatientSpace application, the healthcare provider is the data controller and we are the data processor.

Our privacy policy describes which personal data we collect and how we use and share this data. We recommend that you read our privacy policy. If you have any questions regarding the way in which we protect your personal data, please contact us by writing to info@MyPatientSpace.com.

Any reference to “I”, “we”, or “our” is a reference to MyPatientSpace.

Any reference to “HC” is a reference to the healthcare provider who has given you access to myPatientSpace and is the data controller.

BY USING OUR SERVICES, YOU COMPLY WITH THE COLLECTION, USE, AND TRANSMITTAL OF YOUR PERSONAL DATA FOR PROCESSING IN THE EU AS DESCRIBED IN THIS PRIVACY POLICY.

1. About MyPatientSpace

We are MyPatientSpace Limited ("MyPatientSpace"). We deliver a mobile application-based service in the form of the app: MyPatientSpace.

2. Data Collection

MyPatientSpace collects data to conduct business and provide you with our services. We collect both personal data and other information for these purposes.

(a) Personal data - "Personal data" is data that can be used directly or indirectly, alone or with other information, to identify you as an individual user of MyPatientSpace. This is first and foremost data about your contact information, your health and information concerning your treatment journey. Some of the information collected will depend on what your HC has configured. The following are examples of personal data that you or your healthcare provider may submit when you create a user account and when you use  MyPatientSpace:

  1. Information about your name, phone number, e-mail address and password.
  2. Information about height, weight, body measurements, age, and other health data as configured by HC.
  3. PROM (Patient Reported Outcome Measures) such as Oxford knee and hip scores or Sleep Data
  4. Information about doctor diagnosis and specific information about the condition and procedures
  5. Data concerning the number of completed daily tasks and how you rated symptoms such your pain levels.
  6. Your address

(b) Other Information - "Other information" is anonymous, aggregated, de-identified, or other types of information that do not reveal your identity. Some examples are age, sex, browser, operating system, number of PROMS taken or the amount of time spent on our services. We collect and use this information to understand how you, and our users in general, use our services to continuously improve, innovate, and produce products and services that satisfy our users' demands. We generally do not view other information as personal data. If we chain together other information in a way that makes you identifiable as an individual user, we will handle that information as personal data.

3. How We Use Personal Data

MyPatientSpace uses the data we collect to conduct our business, advertise, or deliver our products and services, improve existing products and services, develop new products and services, and to improve and personalize your user experience when you interact with us. We can use this data to:

(3.1) Deliver our services and maintain an effective operation of our IT-structure - We use the data we collect to deliver the services we offer. This includes operating, maintaining, and delivering all content and functions of our services to you.

 

(3) Communicate with you and respond to your requests

We can use your personal data to respond to your requests regarding technical support, online services, product information, or any other communication you wish to initiate with us. This includes access to your account to comply with requests for technical support. Please note that regardless of your email settings we can send you messages regarding the performance of services, such as our Terms of Service or this Privacy Policy, or other formal communications regarding our Products or Services that you have purchased or used. You may opt-out from receiving communications from MyPatientSpace (other than those necessary for MyPatientSpace to provide the service for which you have subscribed) at anytime by emailing us at support@mypatientspace.com This will mean your account is no longer active and you will need to set up a new account with us to avail of our service.

4. How we handle personal data

MyPatientSpace will only disclose your personal data with your knowledge and as stated in this Privacy Policy, or as indicated at the time of collection. This includes information that enables us to fulfil our obligations to you and conduct our business. We only share your personal data with third parties in certain individual cases, specifically with your consent, or as necessary to complete a transaction or provide a product, service, or feature that you have requested. We may disclose your personal data as described in this Privacy Policy and as described in the following ways:

(4.1) health professionals, independent consultants and hospitals that work with MyPatientSpace and offer the use of this application as part of the provision of medical treatment;

(4.2) IT service providers that either host or have access to our data as part of their product offering;

(4.3) health insurers  where the treatment is covered by your private health insurance policy and you have consented to provide information such as patient reported outcomes.

(4.4) regulatory bodies such as national registries if you have consented to participate.

(4.5) As we grow and develop - Business transactions and reorganisations. Should MyPatientSpace ever merge with another company or if MyPatientSpace should decide to buy, sell, or reorganise parts of or all its business(es), we may disclose or transfer to the extent permitted by law and in accordance with applicable requirements to notify you your personal data to prospective or actual buyers or the subsequent business entity in connection with any of these transactions or reorganisations.

(4.6) As required by law and special circumstances We may be forced to disclose your personal data if: (i) it is reasonably necessary to comply with legal proceedings (such as a court order, search warrant, etc.) or other legal requirements of any public authority, (ii) such a disclosure would potentially reduce our liability in a real or potential trial, (iii) it is necessary to protect our legal rights or property, or (iv) it is necessary to protect the legal rights, property, or other parties' physical security or for the prevention or discovery of crime and such a disclosure is legitimate.

(4.7) Exchange of information with other companies We exchange anonymous information about the use of the MyPatientSpace app and website with the following companies: [Oxford University, Aptible, AWS, Stripe, Google, Logentries] These companies help us evaluate and analyse product and consumer trends as well as evaluate the impact of, for example, advertising campaigns through Google and Facebook. We exchange credit card information as well as addresses with Stripe, Inc. This is mainly for providers. Please note that MyPatientSpace does not store information about your credit card, as this information is directly forwarded to Stripe, Inc. We exchange your phone number with AWS, an SMS-messaging service.  We exchange the number of questionnaires completed with Oxford but no specifics of your personal data.

(4.8) any member of our group of companies, which means our subsidiaries, our ultimate holding company and its subsidiaries.

5. Information security

MyPatientSpace is committed to protecting the security of your personal data. We use technical and organizational measures designed to protect your information from unauthorized access, theft, and loss. We also recommend that you take additional measures to protect yourself and your information, such as installing antivirus software, closing browsers after use, keeping your login information and passwords secret, and making sure you regularly update software and apps you have downloaded to ensure that you have activated the latest security features on your devices.

6. Storing data

MyPatientSpace stores your personal data as long as you have an Account, or as long as it is necessary to deliver our Services to you. We also keep and use your personal data, as necessary, to comply with legal obligations, resolve conflicts, and enforce our agreements.   The duration of how long your data is stored may be specified by the HC who provides you access to our service.

7. Purpose for processing your data

We will process any personal data that you provide to us for the following purposes:

8. Cookies

How we use data collection tools and online advertising - MyPatientSpace currently does not use cookies but it may use cookies to collect data that helps us to personalize your use of our Services in the future.

 

9. Children

We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data without parental consent, please contact us at info@MyPatientSpace.com. If we become aware that a child under 13 has provided us with personal data without the parents’ consent, we will remove the information and delete the child's account.

10. Country-specific information

Residents of the European Economic Area If you choose not to provide personal data - You may choose not to supply MyPatientSpace with your personal data. To do this, please send an email to info@MyPatientSpace.com. If you choose not to provide your personal data, the app's personalised care journey program will be disabled.

How to request access to your personal data - MyPatientSpace keeps your personal data up to date. If you live in the European Economic Area, you may request access to, as well as modification, opposition, and deletion of the personal data we have collected about you. To access your personal data, please contact MyPatientSpace at info@MyPatientSpace.com. Subject to applicable law, we may charge for this service and will comply with reasonable requests as soon as possible and in any case within the deadlines prescribed by law.

Third parties not under our control - Please note that this Privacy Policy does not apply to practices for companies we do not own or manage or people we do not employ or manage. For example, if you download one of our applications on your smartphone, the manufacturer of your smartphone may have a policy that applies to its own practices for collecting information through that smartphone. We recommend that you read the privacy policies for each device, website, and service you are using.

10. How to contact us

If you have any questions, comments or concerns about the way we handle your personal data, please contact us by sending an email to info@MyPatientSpace.com.

11. Updates to Privacy Policy

We may update this Privacy Policy from time to time without notice. You can see when this Policy was last modified by checking the Effective Date. We advise you periodically to review this privacy policy to be sure you understand our privacy practices. If you have a registered account, we may notify you of changes to our privacy policy by email and we may ask you to confirm, acknowledge, and agree to the changes the next time you use our Services.

12. Access to Information and Updating and Verifying Personal Data

In the event that you would like a copy of your personal data or have it altered for any specific reason please contact your hospital. 

13. Our Details

This application is owned and operated by MyPatientSpace Limited.

We are registered in Ireland under Company Registration Number 616748 and our registered office is at
19 The Rise, Malahide, Co. Dublin, Ireland.

Our principal place of business is:
Malahide, Ireland.

You can contact us:

(a) by post, to the postal address given above;

(b) using our website contact form;

(c) by telephone, on +353860441538; or

(d) by email, using the email address published on our website from time to time.