Privacy Policy

Last Updated October 2021

This Privacy Statement may be updated from time to time - the "last updated" date is included at the top of the Privacy Statement. We encourage you to review this Privacy Statement periodically to stay informed about how we may use and disclose your Personal Information. Any ‘material’ changes – those that affect the way your data is processed – will be notified to you directly.

M2JN Ltd & Your Information

M2JN Ltd takes your privacy very seriously. We are registered with the Information Commissioner as a Data Controller and our registration number can be found by searching at https://ico.org.uk/ESDWebPages/Search under reference ZB062726. If you have any questions or wish to make a request in relation to your information, please contact the Data Protection Lead at: datagovernance at warnerpatch dot com

M2JN Ltd provides a system to healthcare providers that allows them to upload, access and store patient information. To provide this system, M2JN Ltd collect, use, store and share information about you as a professional user of the software.

Is M2JN Ltd collecting my Information?

M2JN Ltd will collect through two main routes:

• Directly when you create an account and enter login credentials or amend your profile
• Indirectly when we collect cookies or device information about your use of the software

M2JN Ltd collects only the device or cookie information necessary to allow the system to run properly and ensure we can investigate any security issues. We can do this lawfully because these reasons form the ‘legitimate interests’ of a system provider. The information we collect will be stored on computer and electronic systems. The information includes Personal Data:

• Basic details about you, such as name, role
• Information about your use of the system including when you accessed the system and what actions you took and your location (via your device)

How does M2JN Ltd uses my information?

M2JN Ltd will use your information to:

• Maintain your account and allow you to log in each time
• Provide evidence of access activity so that we can support your employer’s legal obligations
• Investigate security incidents or potential incidents

Who does M2JN Ltd share my information with?

M2JN Ltd works hard to ensure that only the right people have your information and that they are only given the information they need.

M2JN Ltd uses other companies to help us deliver some of our services such as Amazon Web Services – they provide the storage space for your data and are based in the UK. We have contracts in place with these organisations that prevent them from using it in any other way that how we tell them to. These contracts also require them to maintain good standards of security to ensure your confidentiality.

Will M2JN Ltd share without asking me?

Sometimes we will be required by law to share your information and will not always be able to discuss this with you directly. Examples might be:

• Supporting your employer to undertake security or incident investigations
• Sharing with the police or tax authorities for the detection or prevention of crime
• Where it is in the wider public interest – to keep the public safe, for example
• To safeguard children or vulnerable adults
• Because the court has told us we must share.

What are my information rights?

Data protection law provides you with a number of rights that M2JN is committed to supporting you with. For more information, see https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

Complaints: You also have the right to make complaints and request investigations into the way your information is used. Please contact our Data Protection Officer via datagovernance at warnerpatch dot com or visit the link above for more information.

Does M2JN Ltd use profiling or automated decision making?

No, M2JN Ltd does not undertake automatic profiling or automated decision making in relation to your information. Our Data Protection Officer will be happy to speak to you about this if you have concerns or objections.

How does M2JN Ltd protect my information?

M2JN Ltd is committed to ensuring the security and confidentiality of your information. There are a number of ways we do this:

• Staff receive regular training about protecting and using personal data
• Policies are in place for staff to follow and are regularly reviewed
• We check that only the minimum amount of data is shared or accessed
• We use controlled access to systems; this helps to ensure that the right people are accessing data – people with a ‘need to know’
• We use encrypted emails and storage which would make it difficult for someone to ‘intercept’ your information
• We report and manage incidents to make sure we learn from them and improve
• We put in place contracts that require providers and suppliers to protect your data as well

How long does M2JN Ltd store my information?

User records are kept in the system until your employer, our customer, asks that we return or destroy them.