247Mediplus

Privacy Policy - MyHome BP

This Privacy Policy explains how MyHome BP ("we", "our", "the App", or "the Service") collects, uses, stores, and protects your personal data when you use our mobile application on Android or iOS devices.

We are committed to safeguarding your privacy and complying with all applicable UK data protection laws, including the UK GDPR, the Data Protection Act 2018, and relevant NHS Digital standards.

By downloading or using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Purpose of This Privacy Policy

This policy describes:

  • What data we collect
  • How we use and share your data
  • How we protect your information
  • Your rights under UK data protection laws
  • How to contact us about your data

This Privacy Policy applies only to data collected through the MyHome BP mobile application.

2. Data We Collect

We collect the following categories of data when you use the App:

2.1 Personal Identification Information (PID)

  • Full name
  • Date of birth
  • Email address
  • Phone number (if provided)
  • NHS number (if entered)
  • Any other identifiers you voluntarily provide

2.2 Health and Medical Information

  • Blood pressure readings you manually enter
  • Averaged blood pressure values calculated by the App
  • Notes or symptoms you enter (optional)
  • Information shared with your clinician

2.3 Technical and Device Data

  • Device type (Android/iOS)
  • Operating system version
  • App interactions and usage logs
  • IP address (where applicable)
  • Error or crash analytics

2.4 Marketing and Communication Preferences

  • Consent for receiving marketing materials
  • Purchase interest for health-related products (optional)

We do not collect precise geolocation data.

3. How We Use Your Data

We use your data for the following lawful purposes under UK GDPR:

3.1 Provision of the Service (Legal Basis: Performance of a Contract / Provision of Health Care)

  • To allow you to enter, store, and monitor home blood pressure recordings
  • To calculate your average blood pressure values
  • To transmit summary readings to your selected clinician

3.2 Clinical Care and Safety (Legal Basis: Provision of Health Care / Vital Interests)

  • To provide clinicians with data necessary for clinical decision-making
  • To support continuity of care in NHS or private healthcare settings

3.3 App Functionality and Improvement (Legitimate Interests)

  • To analyse usage patterns
  • To identify errors, improve stability, and enhance user experience

3.4 Compliance with Laws and Regulations (Legal Obligation)

  • Maintaining audit trails
  • Responding to regulatory bodies (e.g., NHS England, ICO), where lawfully required

3.5 Marketing Communications (Consent)

Only if you specifically opt in, we may:

  • Send emails or notifications about health-related services
  • Provide offers to purchase medical devices or equipment
  • Share promotional material relevant to blood pressure monitoring

You may withdraw consent at any time.

4. How We Share Your Data

We only share your data when necessary and lawful.

4.1 Clinicians and Healthcare Providers

With your explicit action and consent, summaries of blood pressure readings may be shared with:

  • Your GP or GP surgery
  • PCNs (Primary Care Networks)
  • NHS healthcare teams
  • Private clinicians

4.2 Third-Party Service Providers

We may use secure third-party processors for:

  • Cloud data storage
  • Encrypted data transmission
  • App performance monitoring

All third-party providers adhere to UK GDPR and NHS Digital requirements.

4.3 Regulatory and Legal Authorities

We may share information if legally required to:

  • Prevent serious harm
  • Respond to lawful requests from regulators
  • Comply with court orders or statutory duties

We do not sell your data to third parties.

5. NHS Digital & Cybersecurity Compliance

We comply with the following standards:

  • NHS Data Security and Protection Toolkit (DSPT)
  • Industry-standard encryption for data at rest and in transit
  • Secure authentication and role-based access controls
  • Cybersecurity compliance aligned with NHS England security guidance

Despite strong protections, no system is 100% secure. We cannot guarantee uninterrupted access or absolute data security.

6. Data Storage and Retention

  • Your data is stored on secure UK-based or UK-GDPR–compliant servers.
  • Clinical data may be retained as required for healthcare purposes.
  • Personal data is retained only for as long as necessary for its purpose.
  • You may request deletion of your data unless there is a legal or clinical reason requiring retention.

7. Your Rights Under UK GDPR

You have the following rights:

  • Right to access – Request copies of your data.
  • Right to rectification – Correct inaccurate or incomplete data.
  • Right to erasure – Request deletion of your data (subject to clinical/legal exceptions).
  • Right to restrict processing – Limit how your data is used.
  • Right to data portability – Request transfer of your data.
  • Right to object – Object to certain data uses.
  • Right to withdraw consent – At any time, for marketing or optional processing.

To exercise any of these rights, contact us using the details below.

8. Children’s Data

The App is intended for users aged 16 and over. We do not knowingly collect data from children below this age.

9. Data Loss, Outages, or System Failures

We take reasonable steps to safeguard your information, but we are not responsible for:

  • loss of data due to technical failure,
  • outages beyond our control,
  • device damage,
  • third-party service interruptions.

You are encouraged to keep independent records of critical health readings.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. You will be notified through the App or by email. Continued use of the App indicates acceptance of the updated policy.

11. Contact Us

For privacy or data protection queries, including exercising your rights, contact:

Email: admin@247mediplus.com