PRIVACY POLICY

Privacy Notice This privacy notice as well as all data privacy protocols and actions are in accordance with our data privacy policy and all relevant local laws. Greater details can be provided upon request through the communication channels included herein. What information we collect about you?Angela Healthcare collects, processes, and retains information from you when you interact with our Sites and Services.We collect the following information from you:• We collect basic details about you, but not limited to your full name (including previous names such as your maiden name), address, date of birth, contact details (telephone numbers and email address), Patient Identification number and next of kin contact details.• We collect any information you choose to include in your messages or responses when interacting with us through our Sites and Services, including via online forums, inquiry forms, our support portal, or our messaging service and other messaging services, including any information you provide when you complete a survey administered by us or a supplier acting on our behalf• We collect contacts we have had with you, such as home visits or clinic visits notes and reports about your health and any treatment and care you need;• Details and records about your health, treatment and care, your medical conditions (physical and mental), results of investigations such as X-rays, scans and laboratory tests relevant information from other health professionals, relatives or those who care for you;• Report from bystanders in the event you are unable to do so; and• Information either from us or a delegated third party to provide information on your patient experience with Angela Healthcare. What do we do with your Personal Data?Most of the information collected by Angela Healthcare is provided to us directly by you. We also receive personal data indirectly, from referral details from your physician or any other healthcare provider, or directly from you or your authorised representative.We use the information that you have given us in order to:• Provide direct health care services to you (emergency, diagnostic, surgical, consultation, etc.);• Remind you about your appointments and send you relevant correspondence about our services and/or programmes;• Evaluate the care we provide to ensure it is of the highest standard and quality, e.g., clinical audit, service improvement (via our patient satisfaction survey);• Support the funding of your care with your consent, e.g., with insurance companies, Needs Assessment Unit or any other pay or source.• Help to train and educate healthcare professionals e.g., clinicians and students• Report and investigate complaints, and claims;• Report events to the appropriate authorities if required to do so by law• To comply with legal process, such as warrants, subpoenas, court orders, and lawful regulatory or law enforcement requests and to comply with legal requirements regarding the provision of products and services• Contact you with regards to patient satisfaction surveys relating to services of ours you have used so as to further improve our services to patients;• Provide you with your financial statements for services rendered to you;• Contact you for outstanding financial balance on your account; andWhere possible, we will always look to anonymise/pseudonymize your personal data / sensitive personal data so as to protect your confidentiality and we will only use or share the minimum information necessary. Direct MarketingAccording to the DPL Section 11 direct marketing means the communication, by whatever means, of any advertising, marketing, promotional or similar material, that is directed to particular individuals. (Data Protection Act 2021) Under the regulation of the DPL, individuals have the right to object to the processing of data if it happens in the context of direct marketing. Legal Basis for Processing Personal DataThe legal basis for the majority of our processing is:• The processing is necessary in order to protect the vital interests of the person (referred to as the data subject in Data Protection Law). This would apply in emergency situations such as in the Clinic.• For entering into and managing contracts with the individuals concerned, for example our employees. The legal basis is:The processing is necessary for Angela Healthcare to perform a contract to which the data subject is a party or in order to take steps at the request of the data subject with a view to entering into a contract.• Where we process sensitive personal data, for example; data concerning health, racial or ethnic origin, or sexual orientation, we are required to meet an additional legal basis as defined in the DPL. Where we are processing sensitive personal data for purposes related to the provision of health services, the legal basis is:The processing is necessary for medical purposes and is undertaken by a health professional or a person who, in the circumstances owes a duty of confidentiality equivalent to that which would arise if that person were a health professional; and• Medical purposes as defined above includes the purposes of preventative medicine, medical diagnosis, the provision of care and treatment and the management of healthcare services.• Where we process sensitive personal data for employment purposes, the legal basis is:• The processing is necessary for the purposes of exercising or performing a right, or obligation, conferred or imposed by law on the data controller in connection with the data subject’s employment. Angela Healthcare may also process personal data or sensitive personal data for the purpose of, or in connection with, legal proceedings (including prospective legal proceedings), in the course of an audit, for the purpose of obtaining legal advice, or for the purpose of establishing, exercising or defending legal rights. Where we process personal data for these purposes, the legal basis for doing so is:• The processing is necessary for Angela Healthcare to perform a public function, or a function of a public nature exercised in the public interest;• The processing is necessary for compliance with any legal obligation to which the data controller is subject, other than an obligation imposed by contract; and• The processing is necessary for the purposes of legitimate interests pursued by the data controller or by the third party or parties to whom the data are disclosed, except if the processing is unwarranted in any particular case by reason of prejudice to the rights and freedoms or legitimate interests of the data subject. Use of your Data for Research PurposesAngela Healthcare participates and supports health and care research. Conducting high-quality clinical research helps us keep improving the services provided by Angela Healthcare by finding out which treatments work best. To increase effectiveness we may need to contact you to get your consent to take part in a research.Any research project including personal data would require your consent. In the event where pseudonymized data will be used, research approval needs to be granted by an Ethics Committee. The Ethics Committee safeguards patient’s confidentiality and anonymity of personal and sensitive personal data for the strict purpose of scientific research. Angela Healthcare may share anonymized data for research purposes with third parties. Use of your Data for Patient Satisfaction SurveyAngela Healthcare undertakes patient experience survey, as the data controller or through a delegated trusted third party as a data processor. The personal data may be used to contact patients who use any service provided by Angela Healthcare.Personal data includes your full name, email addresses, location of service such as, but not limited to the district, your address and clinics and phone numbers. The personal data of the next of kin may also be used for patients who are minor or those unable to provide a rational feedback. Angela Healthcare does not use sensitive personal data as a part of our patient satisfaction survey. The data processors or third parties undertaking your patient experience survey do not ask questions pertaining to your sensitive personal data.The legal basis for processing your data for patient satisfaction survey is:• The processing is necessary for the purposes of legitimate interests pursued by Angela Healthcare Children below 18 yearsThe Regulations define a child as a person under the age of eighteen years old.For children below 18 years, parental consent is necessary for the processing of data to be lawful Who we share your data with, and why?We will share information with the following main partner organisations:Other Clinics, Hospitals and organisations that are involved in your care so that you receive good quality care; Clinical Commissioning Groups; General Practitioners (GPs); Health Insurance Companies and other payer sources for processing of payment for medical services; andThe Police or Courts or other legally established entities for matters of an investigatory or evidentiary nature, where required by Law. Sharing with non- Angela Healthcare OrganisationsFor your benefit and with your consent (except as required by a legal basis), we may also need to share information from your records with non- Angela Healthcare organisations who are providing you with care or other services, such as social services or other healthcare organisations and healthcare providers. We may also be asked to share basic information about you, such as your name and parts of your address, which does not include sensitive personal data such as your health records. Generally, we would only do this to assist another organisation to carry out their duties (such as usages of healthcare services, public health or national audits).Non- Angela Healthcare organisations may include, but are not restricted to:• social services;• education services;• local authorities;• the police;• voluntary sector providers; and• private sector providers. How do we protect your data?We only keep your information for as long as it is necessary to fulfil the purposes for which the personal data was collected, or otherwise as required under applicable laws and regulations. This includes for the purpose of meeting any legal, accounting, or other reporting requirements or obligations. Angela Healthcare’s Data privacy policy sets out the minimum retention timescales.We may, instead of destroying or erasing your personal data, anonymise it so that it cannot be associated with or tracked back to you. We reserve the right to retain and use such anonymized data for any legitimate business purpose without further notice to you.We use a range of physical, electronic, and managerial measures to ensure that we keep your personal data secure, accurate and up to date. These measures include:• education and training to relevant staff to ensure they are aware of our privacy obligations when handling personal data;• administrative and technical controls to restrict access to personal data on a ”need to know” basis;• technological security measures, including firewalls, encryption and anti-virus software; and• physical security measuresThe transmission of data over the internet (including by e-mail) is never completely secure. Transfers outside the Cayman IslandsUnless certain exemptions apply or protective measures taken, personal data will not be disclosed or transferred outside the Cayman Islands to a country or territory which does not ensure an adequate level of protection for the rights and freedoms of data subjects. Your Rights Under the Data Protection LawThe DPL grants individuals a number of rights in relation to their personal data. We must respond to requests in relation to your rights within thirty days of receipt; however, there are some exceptions to this.The availability of some of these rights depends on the legal basis that applies in relation to the processing of your personal data, and there are some other circumstances in which we may not uphold a request to exercise a right. Your rights and how they apply are described below:· The right to be informedYour right to be informed is met by the provision of this privacy notice, and similar information when we communicate with you directly – at the point of contact.· Right to Access Information.You have the right to obtain a copy of personal data that we hold about you and other information specified in the DPL, although there are exceptions to what we are obliged to disclose.A situation in which we may not provide all the information is where, in the opinion of an appropriate health professional, such a disclosure would be likely to cause serious harm to your or somebody else’s physical or mental health.· The right to rectificationYou have the right to ask us to rectify any inaccurate data that we hold about you. You also have the right to ask us to complete information you think is incomplete.· The right to stop/restrict processingYou have the right to request that we stop processing, not begin processing, or cease processing for a specified purpose or in a specified way. This is not an absolute right, and, depending on the legal basis that applies, we may have overriding legal bases to continue processing the data.· The right to stop direct marketingYou have the right to stop direct marketing from Angela Healthcare. Be it SMS, postal mail, or emails. If you no longer want to receive such advertising, you can ask Angela Healthcare to stop.Email: info@angela.healthcareSee above the contact information for Angela Healthcare Admin.· The right in relation to automated decision makingYou have the right to object to being subject to a decision based solely on automated processing, including profiling. Should we perform any automated decision-making, we will record this in our privacy notice, and ensure that you have an opportunity to request that the decision involves personal consideration.· The right to complainYou have the right to complain through our internal process if you are not happy with any aspect of Angela Healthcare’s processing of personal data or believe that the rights are not being respected. How to Contact UsPlease contact us by email:info@angela.healthcare How do we maintain your data?Your personal data can be held in a variety of formats, including paper records (when necessary), electronically on computer systems, in video and audio files. We hold and process your data in accordance with the DPL and with the National Archive and Public Records Law.We have a duty to:• maintain full and accurate records of the care we provide to you;• keep records about you confidential and secure; and• provide information in a format that is accessible to you.Your personal data will only be kept for as long as is necessary and will be destroyed in accordance with the National Archive and Public Records Law. How long we keep your data?Angela Healthcare will only retain your personal data for as long as the law requires us to and as long as it is needed. Feedback data will be stored for two years. Changes to this privacy noticeWe will periodically update this Privacy Notice, and we will post notice of any material changes to the Privacy Notice on this website in advance of making those changes. We will notify you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.