Privacy Policy
Introduction
- MyBridge International (MBI) is committed to protecting your personal data and ensuring transparency in how we collect, use, and share it.
- This Privacy Notice explains how we process your data through our Medical Portal, in compliance with the UK General Data Protection Regulation (UK GDPR) and the NHS Data Security and Protection Toolkit (DSPT).
Who We Are
- Data Controller: MyBridge International
- Contact: info@mybridge.org
- Data Protection Officer (DPO): dpo@mybridge.org
What Data We Collect
- Identity Data: Name, date of birth, NHS number
- Contact Data: Email, phone number, address
- Health Data: Medical history, prescriptions, clinical notes
- Professional Data: Role, qualifications, affiliations (for healthcare professionals)
- Usage Data: Portal activity, device information, IP address
Purpose of Processing
- Provision of healthcare services and digital tools
- Clinical support and telemedicine
- Research, training, and mentorship
- Community health and philanthropy matching
- Regulatory compliance and audit
Lawful Basis for Processing
- Article 6(1)(e): Public task
- Article 6(1)(f): Legitimate interests
- Article 9(2)(h): Health or social care provision
- Article 9(2)(i): Scientific research (where applicable)
Sharing Your Data
- NHS organisations for direct care and referrals
- Academic institutions for research and training
- Third-party service providers (e.g., hosting, analytics) under strict data processing agreements
- Regulatory bodies (e.g., ICO, NHS England) for compliance
- Manufacturers and partners for equipment and drug-related services, only with explicit consent
- All third-party sharing is governed by Data Sharing Agreements and follows the ICO's Data Sharing Code of Practice.
Data Security
- We implement the National Data Guardian's 10 Data Security Standards, including:
- Role-based access controls
- UK-based secure hosting
- Encryption and pseudonymisation
- Regular audits and penetration testing
Your Rights
- Access your data.
- Rectify inaccuracies.
- Erase data (where applicable)
- Restrict or object to processing.
- Data portability
- Withdraw consent (where applicable)
- Lodge a complaint with the ICO: www.ico.org.uk
How Long We Keep Your Data
- We retain personal data only as long as necessary for the purposes outlined above, in line with NHS retention schedules and legal obligations.
Changes to This Notice
- We may update this notice to reflect changes in law or our practices.
- Significant changes will be communicated via the portal and email.
Contact Us
- For any queries or to exercise your rights, please contact:
- Email: dpo@mybridge.org
