CardioScan LTD (“CardioScan”, “we”, “us” or “our”) is committed to protecting your privacy and handling personal information responsibly.

This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, contact us, interact with our marketing activities, or receive certain CardioScan services.

CardioScan provides cardiac diagnostic services to healthcare organisations, including hospitals, clinics, medical practices and other healthcare providers.

For the purposes of applicable UK data protection law, the relevant organisation is:

CardioScan LTD

Registered Address: 54 Portland Place, London, England, W1B 1DY

Company Number: 11746846

For questions about this Privacy Policy or how we handle your personal information, please contact:

Email Address:  info@cardioscan.co.uk

The information we collect depends on how you interact with CardioScan.

When you contact us or submit a form through our website, we may collect:

• your name;
• email address;
• telephone number;
• organisation, clinic or healthcare facility;
• country and location;
• whether you are a patient, healthcare professional or other contact; and
• information you provide in your enquiry or message.

If you contact us as a patient, the information you provide may include information relating to your health or cardiac diagnostic service. Health information is considered special category personal data under UK data protection law and is subject to additional protections.  

When you use our website, we may also collect information such as your IP address, browser and device information, pages visited, interactions with our website, referring website, approximate location and cookie preferences.

Where you receive a CardioScan diagnostic service, we may receive personal and clinical information from the healthcare provider that arranged your test. This information may be processed and stored in BeatBox, CardioScan's cardiac diagnostic reporting platform, for the purpose of providing diagnostic analysis and reporting services.

We may collect, hold, use and disclose your personal information to:

• respond to enquiries and provide support;
• communicate with healthcare organisations, customers and business contacts;
• provide and coordinate CardioScan services;
• manage the delivery and return of diagnostic devices;
• provide cardiac diagnostic analysis and reporting services;
• operate, maintain and improve our website;
• understand website usage and measure marketing performance;
• maintain the security of our systems and services;
• send relevant business and marketing communications where permitted by law; and
• comply with legal, regulatory and contractual obligations.

We only collect, use and disclose sensitive information, including health information, where permitted by applicable law.

We use Tally to provide contact and enquiry forms on our website.

Our forms can be used by healthcare professionals, organisations, prospective customers and patients.

When you submit a form, we use the information you provide to direct your enquiry to the appropriate CardioScan team and respond to your request.

If you contact us as a patient, the information you provide may include health information depending on the nature of your enquiry.

Information submitted through our forms may be processed by Tally as a service provider to CardioScan.

We use Google Analytics to understand how visitors use our website and Google Search Console to monitor our website's performance in Google Search.

We may also use Google Ads and LinkedIn Ads to advertise CardioScan's services and measure the performance of our advertising campaigns.

Where analytics or advertising technologies require consent, they will only operate after the appropriate consent has been provided through our cookie consent tool.

We do not intend to use website advertising technologies to target individuals based on their health information or cardiac diagnostic care.

For more information about cookies and similar technologies used on our website, please see our Cookie Policy.

CardioScan provides cardiac diagnostic analysis and reporting services to healthcare organisations. As part of these services, we may process patient information provided by healthcare organisations and information generated during cardiac diagnostic testing.

This may include identifying and contact information, information about the healthcare provider arranging the test, clinical information and cardiac diagnostic data.

Patient information may be processed and stored in BeatBox, CardioScan's cardiac diagnostic reporting platform, for the purpose of providing diagnostic analysis and reporting services.

We handle health information in accordance with applicable Australian privacy and health information laws.

For some services, including Holter monitoring, a healthcare provider may arrange for CardioScan to send a diagnostic device directly to a patient.

Where this occurs, we may process information necessary to provide the service, including your name, contact and delivery details, healthcare provider and information about the diagnostic service. We may also process information generated during your test to analyse the study and provide a diagnostic report to the healthcare provider that arranged your test.

Where the healthcare organisation determines why and how patient information is processed, it acts as the data controller and CardioScan may process the information on its behalf in accordance with our contractual arrangements and documented instructions.

Our respective data protection responsibilities may vary depending on the particular service and processing activity.

Where necessary, we may share personal information with:

• healthcare organisations involved in providing your diagnostic service;
• companies within the CardioScan group;
• technology, hosting and website service providers;
• form, analytics and marketing service providers, including Tally, Google and LinkedIn;
• delivery and logistics providers where required to provide a direct-to-patient service;
• professional advisers; and
• regulators or public authorities where required by law.

We do not sell personal information.

Some of our service providers or CardioScan group companies may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we use appropriate safeguards as required by UK data protection law.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, regulatory and contractual requirements.

Retention periods vary depending on the type of information, why it is processed and any applicable legal or contractual requirements.

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Further information about our approach to information security is available in our Information Security Policy Statement.

You may request access to personal information we hold about you or ask us to correct information that you believe is inaccurate, out of date, incomplete, irrelevant or misleading.

To make a request, please contact us using the details in Section 1.

There may be circumstances in which we are permitted or required by law to refuse access or correction. Where applicable, we will explain our decision.

Depending on the circumstances, UK data protection law may give you the right to:

• access your personal information;
• correct inaccurate or incomplete information;
• request deletion of your information;
• restrict or object to certain processing;
• request transfer of certain information; and
• withdraw consent where processing is based on consent.

You also have the right to object to the use of your personal information for direct marketing.

To exercise your rights, please contact us using the details in Section 2.

Where CardioScan processes your information on behalf of your healthcare provider, we may work with or refer your request to that healthcare provider.

If you have a question or concern about how CardioScan handles your personal information, please contact us using the details in Section 1.

We will consider and respond to privacy complaints in accordance with our obligations under applicable privacy law.

If you are not satisfied with our response, you may be able to make a complaint to the Office of the Australian Information Commissioner (OAIC). Further information is available at oaic.gov.au.

If you have concerns about how CardioScan handles your personal information, please contact us.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator. Further information is available at ico.org.uk.

We may update this Privacy Policy from time to time. The latest version will be published on our website and the “Last updated” date will be updated accordingly.