recordmyheath.care Privacy Notice

Privacy Notice

Accessibility Statement

Privacy Notice

This privacy notice applies to any personal data collected by recordmyhealth.care

What is recordmyhealth.care

recordmyhealth.care is a web application developed by Bloomsbury Health Limited, a company based in the United Kingdom. recordmyhealth.care is used by private and public healthcare or ‘Treatment Providers’ to record their patients’ healthcare decisions and is part of the delivery of direct care.

Looking after your personal information

Bloomsbury Health Limited is committed to protecting your privacy and the data we collect. We are required to comply with the laws and regulations that apply to protecting your data and how it is used. They are the General Data Protection Regulation 2016 (GDPR) and the Data Protection Act 2018.

This privacy notice explains how we use information about you and how we keep it safe, and protect your privacy.

It will tell you:

what information do we collect about you, and where do we get your information from
why we collect your information
how we keep your information safe
how long can we keep your information
why are we allowed to process your information
your rights as a data subject
when we may pass your information on to other people or organisations
do you transfer my information to other countries
where to get further advice

What information do we collect and where we get your information from?

Personal Data is processed by recordmyhealth.care on behalf of your Treatment Provider to record your healthcare decision. Your Personal Data is provided by your Treatment Provider.

The following data is entered by your Treatment Provider’s healthcare team:

Your Name,
Your telephone number
Your email address
The name of your proposed treatment, its risks, benefits, alternatives.
Pre-treatment and post-treatment instructions
Your opinions about your health after your treatment

Some information we hold about you will be provided directly by you through the use of our software recordmyhealth.care

Your medical history and social circumstances
Any medications you are taking
Details about your physical or mental health
Your family details (for example, your next of kin)
Your ethnicity
Your religious beliefs
Your lifestyle and social circumstances
Your sexual life.

Text in bold is Special Category Data (data describing your health).

In certain circumstances, we may also receive your personal data from:

Parents, relatives or carers
General Practitioners (GPs)
Other Treatment Providers
Local authorities

You have the right to receive a copy of your medical records via a Subject Access Request sent to your Treatment Provider.

Why we collect your information?

We collect your information to record your healthcare decisions on behalf of your Treatment Provider. Your Treatment Providers needs to keep an accurate and up to date record about your healthcare decisions.

Your Treatment Provider may also need to use some information about you to:

manage the healthcare services they provide
help investigate any complaints, claims or incidents
help them to plan new services
help them keep track of spending on their services
prepare performance statistics for the Department of Health and other regulatory bodies
assist in clinical audits of the quality of their services

How we keep your information safe

Everyone working for Bloomsbury Health Limited has a legal duty to maintain the highest levels of confidentiality, and all Bloomsbury Health Limited staff receive training in how to handle your information securely. Except in certain specific circumstances, your records will generally only be seen by those involved in providing or administering your care.

Your electronic record is held on computer systems and are protected by appropriate technology (such as data encryption and access controls).

If you decide to send or receive personal information by email, please be aware that Bloomsbury Health Limited cannot be responsible for the security of the information during its transfer to or from our email system, or for any loss or compromise of the information due to technical or security issues occurring outside our computer networks.

How long we keep your information

We keep your information for as long as instructed by your Treatment Provider who is the Data Controller. If your Treatment Provider stops using our services your data will be returned to them. There is a legal reason for keeping your personal information for a set period of time.

Why are we allowed to process your information?

Under the Data Protection Act 2018 (the UK’s implementation of the General Data Protection Regulation, or GDPR), organisations can only process personal data if there is a lawful basis for doing so. Your Treatment Provider (the ‘Data Controller’) will determine whether there is a legal basis for processing your personal data, and Bloomsbury Health (the ‘Data Processor’) acts on their behalf with regard to that data processing. There will be a data processing agreement between your Treatment Provider and Bloomsbury Health. Generally, the following apply:

Treatment Providers in the private sector

Article.6(1)(b) - processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract

Article.9(2)(h) - processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services

Treatment Providers in the public sector

Article.6(1)(e) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

Contact your Treatment Provider for details regarding the legal basis.

What are your rights as a data subject?

Under the General Data Protection Regulation you have a number of rights as a data subject. These are:

The right to be informed

We are required to inform you about how we collect and use your personal information (for example, by the information given in this Privacy Notice).

The right to access

By law you are entitled to request a copy of the information we hold about you from your Treatment Provider. This is known as a Subject Access Request. Your Treatment Provider will aim to provide the requested information to you within 30 days, but if they are unable to do so then they will explain the reasons to you. In most cases they will provide a copy of the information to you for free but there are some circumstances where they will need to charge.

At times they may not be able to share your whole record with you, particularly if the record contains confidential information about other people, information which could cause harm to your or someone else’s physical or mental wellbeing, or which might affect a police investigation.

More information about making a request can be found on your Treatment Providers website under ‘Health Records’.

The right to rectification

You may request that your Treatment Provider make changes to any data we hold about you that is incorrect or incomplete. They will take action to rectify inaccuracies in the personal information we hold about you when it is drawn to our attention. Sometimes it may be necessary to add an explanatory note to your information (an addendum) rather than change the original record. They would do this to ensure that they have all necessary information available to provide your care.

The right to erasure

In most cases you are not able to request that your Treatment Provider erase the medical information that we hold about you for your direct care and public health purposes, under their lawful basis for processing your data as set out in the GDPR.

The right to restrict processing

You may request your Treatment Provider restrict the processing of your information in certain circumstances, for example if you believe it to be inaccurate. In most cases a restriction of processing is a temporary measure while they investigate your concerns. The right to restrict processing is not an absolute right, and they may decide not to restrict the processing of your information if they consider that processing to be necessary for the purpose of the public interest or for the purpose of your legitimate interests.

The right to object to us processing your personal information

In addition to your other rights as a data subject, you have the right to object to us processing your personal information, although you must give specific reasons for your objection based upon your particular concerns. This is not an absolute right and depending on the circumstances your Treatment Provider may decide that there are compelling and legitimate grounds for us to continue to process your information. If they do decide to continue processing your information with us they will let you know and explain the reasons for their decision to you. You would also have the right to challenge their decision, for example, with the Information Commissioner’s Office (ICO).

If you wish to object to the processing of your personal information by Bloomsbury Health Limited then please get in touch with your Treatment Provider’s Data Protection Officer (their contact details are normally on their website).

The right to data portability

Your Treatment Provider’s basis for processing your data under the GDPR means that they are not legally required to provide your information in a machine-readable form, although they will try to provide information that you have asked for (such as under a Subject Access Request) in the format you prefer if it is practical for them to do so.

Rights related to automated decision making (including profiling)

Bloomsbury Health Limited does not make automated decisions about you or carry out evaluations based on any automated processes (profiling).

Do we pass your information on to other people or organisations?

No, Bloomsbury Health do not pass your information on to other people or organisations other than your Treatment Provider.

Your Treatment Provider sometimes may need to share your personal information with other organisations. When they do this they are required to comply with all aspects of the General Data Protection Regulation. Where necessary they will also have data sharing agreements in place with their partner organisations which will state the specific ways in which the shared data can be used.

The organisations they share your information with may include:

other public and private healthcare, social and welfare organisations
central and local government organisations
police forces and security organisations
public and private service providers, suppliers of medical equipment and support systems
public and private auditors and audit bodies
legal representatives
survey and research organisations
professional advisers and consultants

The reasons why they would share your information can include:

notification of births and deaths
an emergency (when there is risk of loss of life or limb)
to control infectious diseases (such as meningitis or tuberculosis)
child protection
when required by a formal court order
for the prevention or detection of a crime

Contact your Treatment Provider to find out who they share your information with.

Do you transfer your information to other countries?

No. Your data is stored on datacenters in the UK and never transferred to other countries.

Data Protection Impact Assessments

Under GDPR regulations your Treatment Provider is required to carry out a Data Protection Impact Assessment (DPIA) when undertaking new projects which involve the processing of personal data. Completing a DPIA helps them to identify any data risks at an early stage and to take steps to minimise these risks as part of the project development process.

Please contact your Treatment Provider’s Data Protection Officer should you require any further information.

Where to get further advice?

We have a data protection officer who makes sure we respect your rights and follow the law. If you have any concerns or questions about how we look after your personal information, please contact us.

Bloomsbury Health Limited (8298089), 1st Floor, The Bloomsbury Building, 10 Bloomsbury Way, WC1A 2SL, London, United Kingdom.

For independent advice about data protection, privacy and data sharing issues, you can contact the Information Commissioner’s Office (ICO) at:

Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow
Cheshire SK9 5AF

Telephone: 0303 123 1113 (local rate) or 01625 545 745 (if you prefer to use a national rate number)

Accessibility Statement

Compliance status

We firmly believe that the internet should be available and accessible to anyone and are committed to providing a website that is accessible to the broadest possible audience, regardless of ability.

To fulfill this, we aim to adhere as strictly as possible to the World Wide Web Consortium’s (W3C) Web Content Accessibility Guidelines 2.1 (WCAG 2.1) at the AA level. These guidelines explain how to make web content accessible to people with a wide array of disabilities. Complying with those guidelines helps us ensure that the website is accessible to blind people, people with motor impairments, visual impairment, cognitive disabilities, and more.

This website utilizes various technologies that are meant to make it as accessible as possible at all times. We utilize an accessibility interface that allows persons with specific disabilities to adjust the website’s UI (user interface) and design it to their personal needs.

Additionally, the website utilizes an AI-based application that runs in the background and optimizes its accessibility level constantly. This application remediates the website’s HTML, adapts its functionality and behavior for screen-readers used by blind users, and for keyboard functions used by individuals with motor impairments.

If you wish to contact the website’s owner please use the following email help@bloomsburyhealth.org

Screen-reader and keyboard navigation

Our website implements the ARIA attributes (Accessible Rich Internet Applications) technique, alongside various behavioral changes, to ensure blind users visiting with screen-readers can read, comprehend, and enjoy the website’s functions. As soon as a user with a screen-reader enters your site, they immediately receive a prompt to enter the Screen-Reader Profile so they can browse and operate your site effectively. Here’s how our website covers some of the most important screen-reader requirements:

Screen-reader optimization: we run a process that learns the website’s components from top to bottom, to ensure ongoing compliance even when updating the website. In this process, we provide screen-readers with meaningful data using the ARIA set of attributes. For example, we provide accurate form labels; descriptions for actionable icons (social media icons, search icons, cart icons, etc.); validation guidance for form inputs; element roles such as buttons, menus, modal dialogues (popups), and others.

Additionally, the background process scans all of the website’s images. It provides an accurate and meaningful image-object-recognition-based description as an ALT (alternate text) tag for images that are not described. It will also extract texts embedded within the image using an OCR (optical character recognition) technology. To turn on screen-reader adjustments at any time, users need only to press the Alt+1 keyboard combination. Screen-reader users also get automatic announcements to turn the Screen-reader mode on as soon as they enter the website.

These adjustments are compatible with popular screen readers such as JAWS, NVDA, VoiceOver, and TalkBack.

Keyboard navigation optimization: The background process also adjusts the website’s HTML and adds various behaviors using JavaScript code to make the website operable by the keyboard. This includes the ability to navigate the website using the Tab and Shift+Tab keys, operate dropdowns with the arrow keys, close them with Esc, trigger buttons and links using the Enter key, navigate between radio and checkbox elements using the arrow keys, and fill them in with the Spacebar or Enter key.

Additionally, keyboard users will find content-skip menus available at any time by clicking Alt+2, or as the first element of the site while navigating with the keyboard. The background process also handles triggered popups by moving the keyboard focus towards them as soon as they appear, not allowing the focus to drift outside.

Users can also use shortcuts such as “M” (menus), “H” (headings), “F” (forms), “B” (buttons), and “G” (graphics) to jump to specific elements.

Disability profiles supported on our website

Epilepsy Safe Profile: this profile enables people with epilepsy to safely use the website by eliminating the risk of seizures resulting from flashing or blinking animations and risky color combinations.

Vision Impaired Profile: this profile adjusts the website so that it is accessible to the majority of visual impairments such as Degrading Eyesight, Tunnel Vision, Cataract, Glaucoma, and others.

Cognitive Disability Profile: this profile provides various assistive features to help users with cognitive disabilities such as Autism, Dyslexia, CVA, and others, to focus on the essential elements more easily.

ADHD Friendly Profile: this profile significantly reduces distractions and noise to help people with ADHD, and Neurodevelopmental disorders browse, read, and focus on the essential elements more easily.

Blind Users Profile (Screen-readers): this profile adjusts the website to be compatible with screen-readers such as JAWS, NVDA, VoiceOver, and TalkBack. A screen-reader is installed on the blind user’s computer, and this site is compatible with it.

Keyboard Navigation Profile (Motor-Impaired): this profile enables motor-impaired persons to operate the website using the keyboard Tab, Shift+Tab, and the Enter keys. Users can also use shortcuts such as “M” (menus), “H” (headings), “F” (forms), “B” (buttons), and “G” (graphics) to jump to specific elements.

Additional UI, design, and readability adjustments

Font adjustments – users can increase and decrease its size, change its family (type), adjust the spacing, alignment, line height, and more.

Color adjustments – users can select various color contrast profiles such as light, dark, inverted, and monochrome.

Additionally, users can swap color schemes of titles, texts, and backgrounds with over seven different coloring options.

Animations – epileptic users can stop all running animations with the click of a button. Animations controlled by the interface include videos, GIFs, and CSS flashing transitions.

Content highlighting – users can choose to emphasize essential elements such as links and titles. They can also choose to highlight focused or hovered elements only.

Audio muting – users with hearing devices may experience headaches or other issues due to automatic audio playing. This option lets users mute the entire website instantly.

Cognitive disorders – we utilize a search engine linked to Wikipedia and Wiktionary, allowing people with cognitive disorders to decipher meanings of phrases, initials, slang, and others.

Additional functions – we allow users to change cursor color and size, use a printing mode, enable a virtual keyboard, and many other functions.

Assistive technology and browser compatibility

We aim to support as many browsers and assistive technologies as possible, so our users can choose the best fitting tools for them, with as few limitations as possible. Therefore, we have worked very hard to be able to support all major systems that comprise over 95% of the user market share, including Google Chrome, Mozilla Firefox, Apple Safari, Opera and Microsoft Edge, JAWS, and NVDA (screen readers), both for Windows and MAC users.

Notes, comments, and feedback

Despite our very best efforts to allow anybody to adjust the website to their needs, there may still be pages or sections that are not fully accessible, are in the process of becoming accessible, or are lacking an adequate technological solution to make them accessible. Still, we are continually improving our accessibility, adding, updating, improving its options and features, and developing and adopting new technologies. All this is meant to reach the optimal level of accessibility following technological advancements. If you wish to contact the website’s owner, please use the following email help@bloomsburyhealth.org

We request that you read this policy from time to time and keep your personal information up to date at all times.

The Bloomsbury Building, 10 Bloomsbury Way, London , WC1A 2SL, England

Bloomsbury Health Ltd is a company registered in England and Wales 08298089