Collection, Use and Disclosure of Personal Information
You or your staff or patients may choose to provide your name and e-mail address to us by contacting us through this website or using our online questionnaires. R-Outcomes will not sell, share or rent your personal information to others except with your consent; when we need to share the information to provide a service you have requested; or to enable a third party to provide services to us and then only to provide those services. We also will disclose personal information to enforce our rights, to prevent fraud or when required by law, judicial process or other legal order to do so.
Where is information held?
Data will be stored in a range of different places, including our web server and on other IT systems (including email). This includes our website, supported by DaySix Ltd in Scotland, our data collection engine (survey.r-outcomes.com), which is provided by Alchemer Inc. in Germany, our reporting portal (portal.r-outcomes.com), which is supported by DaySix in Scotland, Microsoft Office 365 and Xero accounting systems. The GDPR regulations apply throughout. R-Outcomes is certified to Cyber Essentials Plus. Your data, and that of your patients, will only be used for the intended purposes.
You will receive email correspondence from us if you have contacted us and we also may send you periodic email communications on matters that you may find of interest.
A cookie is a piece of data stored on your hard drive. Our cookies contain no personal information about you. Among other things, cookies help keep track of data you have entered during the session for your convenience. Accessing and Updating Your Personal Information You can ask us what information we hold about you by contact us via firstname.lastname@example.org. Please keep your information up-to-date by letting us know of any changes.
As a data subject, you have a number of rights. You can:
access and obtain a copy of your data on request;
• require the organisation to change incorrect or incomplete data;
• require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
• object to the processing of your data where we are relying on legitimate interests as the legal ground for processing.
If you would like to exercise any of these rights, please contact us via email@example.com. If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner.
Changes to this policy
This policy will be reviewed every three years (or sooner if new legislation, codes of practice or national standards are introduced).