Bloombridge Wellness Privacy Policy
At Bloombridge Wellness, we are committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how our company, Bloombridge Wellness, collects, uses, discloses, and protects information gathered through our site and through the provision of our services, including digital therapeutics development, remote patient monitoring platforms, AI-powered diagnostic tools, health data analytics, and telemedicine solutions.
We process personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and other relevant regulations.
1. Information We Collect
- Information You Provide to Us: This includes personal data you submit when contacting us via our site, registering for our services, or interacting with us. This may include your name, contact details (such as email address and phone number), professional information, and any other information you choose to provide in your communications.
- Information Collected Automatically: When you visit our site, we may automatically collect certain information about your device and browsing activity. This may include your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This information is primarily used for site analytics and to improve the user experience.
- Health and Clinical Data (Processed on Behalf of Clients): In the course of providing our core services (e.g., Remote Patient Monitoring, AI-Powered Diagnostic Tools, Digital Therapeutics), we may process health-related and other sensitive personal data. It is crucial to understand that in these instances, Bloombridge Wellness acts primarily as a data processor on behalf of our clients (healthcare providers, pharmaceutical companies, etc.), who are the data controllers. Our processing of such data is governed by strict contractual agreements and adheres to industry-specific regulations and standards, including those related to health information privacy and security. We do not use this data for our own direct marketing purposes.
2. How We Use Your Information
We use the information we collect for various purposes, including:
- To provide and maintain our services, fulfil requests, and manage our relationship with you.
- To respond to your inquiries and provide customer support.
- To analyse and improve our site, services, and overall user experience.
- To send you relevant updates, newsletters, or marketing communications, where you have provided consent or where there is a legitimate interest and lawful basis to do so.
- To ensure the security and integrity of our systems and services.
- To comply with legal obligations and enforce our terms and conditions.
- For research and development purposes, to innovate and enhance our healthcare technology solutions. Where possible, data used for these purposes will be anonymized or aggregated.
3. Lawful Basis for Processing
We will only process your personal data when we have a lawful basis to do so. The lawful bases we rely on include:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Contract: Where the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legal Obligation: Where the processing is necessary for us to comply with the law (not including contractual obligations).
- Legitimate Interests: Where the processing is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not overridden by your rights and interests. Examples include improving our services, preventing fraud, and direct marketing where permitted.
- Vital Interests: In rare cases, where processing is necessary to protect someone's life.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. We may share your information in the following circumstances:
- Service Providers: We may share information with third-party service providers who perform services on our behalf, such as hosting, analytics, IT support, and marketing services. These providers are obligated to protect your data and only use it for the purposes for which it was disclosed.
- With Your Consent: We may disclose your information if you provide us with explicit consent to do so.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.
- Clients (as Data Processor): As a data processor, we share processed health and clinical data back with our clients (the data controllers) in accordance with our contractual agreements and their instructions.
5. International Data Transfers
Your personal data may be transferred to, and stored at, a destination outside the United Kingdom and European Economic Area (EEA). This may occur if our service providers operate in countries outside these regions. Where personal data is transferred internationally, we will ensure appropriate safeguards are in place to protect your data, such as relying on adequacy decisions, Standard Contractual Clauses (SCCs), or other legally recognised mechanisms for data transfer.
6. Data Security
We implement robust technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and employee training. While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The precise retention period will vary depending on the type of data and the purpose of processing.
8. Your Data Protection Rights
Under applicable data protection laws, you have certain rights concerning your personal data. These may include:
- The right to access: You have the right to request copies of your personal data.
- The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
- The right to withdraw consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before responding to your request.
9. Cookies and Similar Technologies
Our site may use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and for marketing purposes. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this site may become inaccessible or not function properly.
10. Third-Party Links
Our site may contain links to third-party websites. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any changes on this page and, if the changes are significant, we may provide more prominent notice (including, for certain services, email notification of Privacy Policy changes).
12. Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please contact us:
Bloombridge Wellness
2847 Alderley Road, Suite 315,
Manchester, Greater Manchester, M23 9LT, United Kingdom