Last revision [Nov 25, 2018 ]
At myPatientSpace, we understand that the privacy and security of your information is important to you. To this end, we endeavour to safeguard the privacy of all information you entrust us with in order to protect and respect your privacy.
MyPatientSpace provides services to various types of healthcare providers and in turn these healthcare providers invite their staff and patients to use myPatientSpace during their episodes of care. Patients and staff may also invite extended care takers (e.g. family members). In these circumstances in respect of your personal data provided by your healthcare provider to the MyPatientSpace application, the healthcare provider is the data controller and we are the data processor.
Any reference to “I”, “we”, or “our” is a reference to MyPatientSpace.
Any reference to “HC” is a reference to the healthcare provider who has given you access to myPatientSpace and is the data controller.
1. About MyPatientSpace
We are MyPatientSpace Limited ("MyPatientSpace"). We deliver a mobile application-based service in the form of the app: MyPatientSpace.
2. Data Collection
MyPatientSpace collects data to conduct business and provide you with our services. We collect both personal data and other information for these purposes.
(a) Personal data - "Personal data" is data that can be used directly or indirectly, alone or with other information, to identify you as an individual user of MyPatientSpace. This is first and foremost data about your contact information, your health and information concerning your treatment journey. Some of the information collected will depend on what your HC has configured. The following are examples of personal data that you or your healthcare provider may submit when you create a user account and when you use MyPatientSpace:
(b) Other Information - "Other information" is anonymous, aggregated, de-identified, or other types of information that do not reveal your identity. Some examples are age, sex, browser, operating system, number of PROMS taken or the amount of time spent on our services. We collect and use this information to understand how you, and our users in general, use our services to continuously improve, innovate, and produce products and services that satisfy our users' demands. We generally do not view other information as personal data. If we chain together other information in a way that makes you identifiable as an individual user, we will handle that information as personal data.
3. How We Use Personal Data
MyPatientSpace uses the data we collect to conduct our business, advertise, or deliver our products and services, improve existing products and services, develop new products and services, and to improve and personalize your user experience when you interact with us. We can use this data to:
(3.1) Deliver our services and maintain an effective operation of our IT-structure - We use the data we collect to deliver the services we offer. This includes operating, maintaining, and delivering all content and functions of our services to you.
(3) Communicate with you and respond to your requests
4. How we handle personal data
(4.1) health professionals, independent consultants and hospitals that work with MyPatientSpace and offer the use of this application as part of the provision of medical treatment;
(4.2) IT service providers that either host or have access to our data as part of their product offering;
(4.3) health insurers where the treatment is covered by your private health insurance policy and you have consented to provide information such as patient reported outcomes.
(4.4) regulatory bodies such as national registries if you have consented to participate.
(4.5) As we grow and develop - Business transactions and reorganisations. Should MyPatientSpace ever merge with another company or if MyPatientSpace should decide to buy, sell, or reorganise parts of or all its business(es), we may disclose or transfer to the extent permitted by law and in accordance with applicable requirements to notify you your personal data to prospective or actual buyers or the subsequent business entity in connection with any of these transactions or reorganisations.
(4.6) As required by law and special circumstances We may be forced to disclose your personal data if: (i) it is reasonably necessary to comply with legal proceedings (such as a court order, search warrant, etc.) or other legal requirements of any public authority, (ii) such a disclosure would potentially reduce our liability in a real or potential trial, (iii) it is necessary to protect our legal rights or property, or (iv) it is necessary to protect the legal rights, property, or other parties' physical security or for the prevention or discovery of crime and such a disclosure is legitimate.
(4.7) Exchange of information with other companies We exchange anonymous information about the use of the MyPatientSpace app and website with the following companies: [Oxford University, Aptible, AWS, Stripe, Google, Logentries] These companies help us evaluate and analyse product and consumer trends as well as evaluate the impact of, for example, advertising campaigns through Google and Facebook. We exchange credit card information as well as addresses with Stripe, Inc. This is mainly for providers. Please note that MyPatientSpace does not store information about your credit card, as this information is directly forwarded to Stripe, Inc. We exchange your phone number with AWS, an SMS-messaging service. We exchange the number of questionnaires completed with Oxford but no specifics of your personal data.
(4.8) any member of our group of companies, which means our subsidiaries, our ultimate holding company and its subsidiaries.
5. Information security
MyPatientSpace is committed to protecting the security of your personal data. We use technical and organizational measures designed to protect your information from unauthorized access, theft, and loss. We also recommend that you take additional measures to protect yourself and your information, such as installing antivirus software, closing browsers after use, keeping your login information and passwords secret, and making sure you regularly update software and apps you have downloaded to ensure that you have activated the latest security features on your devices.
6. Storing data
MyPatientSpace stores your personal data as long as you have an Account, or as long as it is necessary to deliver our Services to you. We also keep and use your personal data, as necessary, to comply with legal obligations, resolve conflicts, and enforce our agreements. The duration of how long your data is stored may be specified by the HC who provides you access to our service.
7. Purpose for processing your data
We will process any personal data that you provide to us for the following purposes:
We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data without parental consent, please contact us at info@MyPatientSpace.com. If we become aware that a child under 13 has provided us with personal data without the parents’ consent, we will remove the information and delete the child's account.
10. Country-specific information
Residents of the European Economic Area If you choose not to provide personal data - You may choose not to supply MyPatientSpace with your personal data. To do this, please send an email to info@MyPatientSpace.com. If you choose not to provide your personal data, the app's personalised care journey program will be disabled.
How to request access to your personal data - MyPatientSpace keeps your personal data up to date. If you live in the European Economic Area, you may request access to, as well as modification, opposition, and deletion of the personal data we have collected about you. To access your personal data, please contact MyPatientSpace at info@MyPatientSpace.com. Subject to applicable law, we may charge for this service and will comply with reasonable requests as soon as possible and in any case within the deadlines prescribed by law.
10. How to contact us
If you have any questions, comments or concerns about the way we handle your personal data, please contact us by sending an email to info@MyPatientSpace.com.
12. Access to Information and Updating and Verifying Personal Data
In the event that you would like a copy of your personal data or have it altered for any specific reason please contact your hospital.
13. Our Details
This application is owned and operated by MyPatientSpace Limited.
We are registered in Ireland under Company Registration Number 616748 and our registered office is at
19 The Rise, Malahide, Co. Dublin, Ireland.
Our principal place of business is:
You can contact us:
(a) by post, to the postal address given above;
(b) using our website contact form;
(c) by telephone, on +353860441538; or
(d) by email, using the email address published on our website from time to time.