- ABOUT US
For the purposes of the applicable UK Data Protection Legislation (which includes the EU General Data Protection Regulation, known as the “GDPR”, and the UK Data Protection Act 2018), we are the controller of your Data (that is, the person responsible for deciding how to hold and use your Data), and you are the data subject.
You must be 18 years or older to download and use the full App and use the HALO™ Service. In some cases an adult may set up and manage an account on behalf of a child.
- THE SERVICE
The App enables us to provide you with access to the HALO™ Service, the world’s most effective screening solution for infectious diseases, including COVID-19 (“HALO™ Service”). General information about the HALO™ Service can be found on our website at www.haloverify.com (“Site”). Further details of how to access, download and register with the App, and how the Service will be delivered, will be confirmed to you by the company or other entity for which we provide the HALO™ Service and by whom you employed or engaged (“Service Participant”).
The HALO™ Service involves us providing you with a testing kit, analysing the sample that you provide once you return it to our testing facility, and providing you with the results of the testing (“Results”) once your sample has been analysed.
Further details of how the HALO™ Service works will be given to you, either by us or by the Service Participant, when you register with the App.
Please note that nothing in the App, the Site or the HALO™ Service constitutes the offer or provision of medical advice or treatment.
- DATA WE COLLECT AND HOW WE USE IT
When you register with the App, we ask you to provide details of:
• your full name;
• your date of birth;
• your e-mail address;
• your phone/mobile phone contact number;
• Your employer;
• A unique ID code for your employer;
• Organisational specific data.
In some cases, we also ask you to provide further means of identification such as:
• your home address and/or other current residential address, including postcode;
• your occupation (if relevant);
• your work/education address (if relevant);
The lawful basis on which we collect this information is that it is necessary to enable us to provide the Service, and also to comply with our legal obligations.
We will ask you to confirm that all information about yourself that you give us is true, complete and accurate. If any of your Data changes while you are using the Service, you may edit your earlier responses in the “my account” section of the App, or inform us at firstname.lastname@example.org
We will also store information that your Device provides to us in connection with your use of the App, such as your type of Device, browser type, and its unique identifiers, operating system, unique reference IDs, network information and requested and referring URLs. The lawful basis on which we collect this information is that it is necessary to enable us to maintain the App and to provide the Service, and also necessary for our legitimate interest in maintaining and improving the functionality of the App.
- HOW WE USE YOUR DATA
We will use the Data primarily to provide you with the App functionality and the HALO™ Service, on the lawful basis that it is necessary for the provision of the HALO™ Service.
We may also use the Data to:
• improve the quality and content of the App;
• in some cases, with your consent and subject to privacy control settings, to allow your organisation to cross-match data for purposes separately disclosed to you; and
• provide you with support and information about the App and/or the HALO™ Service.
We will do so on the basis that it is necessary for our legitimate interests in providing the App and the HALO™ Service, and maintaining and improving their functionality.
- WHO WE SHARE YOUR DATA WITH
Your Data will be kept anonymous when the sample that you provide is sent to our testing facility.
When you register for the HALO™ Service, you will be given the option to:
• share the Results (including the Results of any previous testing) with the Service Participant, or
• share only the latest Results with the Service Participant, or
• not share the Results (or the latest Results) with the Service Participant.
If you later wish to change the option you have chosen, you can do so at any time by using the “my account” section of the App or by contacting us at email@example.com
We will only share the Results with the Service Participant on the legal basis that you have consented to our doing so.
We may also disclose your Data:
• if we are under a duty to do so in order to comply with any legal or regulatory obligation or request, on the legal basis that it is necessary to enable us to comply with our legal obligations; or
Please note that we are required by UK law to notify all Results, whether positive or negative, together with the related personal identifying details, to Public Health England (you can obtain further information at https://www.gov.uk/government/organisations/public-health-england).
Except as set out above, we will never sell, distribute or disclose any of your Data (except anonymised aggregate information) with any third party without your express consent.
- WHERE WE STORE YOUR DATA
We store all Data with third party service providers who provide adequate guarantees of technological and other means of protection.
Our service providers may be based in countries outside the European Economic Area whose laws provide for a different standard of protection for your personal data than that provided under UK law. In these cases, we will ensure that they have provided adequate means of protection in accordance with the applicable Data Protection Legislation, such as by means of the European Union’s standard contractual clauses for transfers of personal data outside the European Economic Area.
- HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
We keep basic information about our customers and website visitors for no longer than necessary. Please feel free to contact us for details of specific retention details. Please be informed that in some cases, our insurers require us to retain some data for seven years to allow for a six-year legal limitation period and additional time to allow for notification and processing of any insurance claim. This also helps us meet our tax record-keeping obligations. In some cases, we need to retain data for up to eight years, in accordance with the Records Management Code of Practice for Health and Social Care 2016, but will dispose of your data sooner if it is appropriate to do so. If you live in Wales, Scotland or Northern Ireland, different country-specific provisions apply on retention of records (see the links on the UK Government notice at https://www.gov.uk/government/publications/coronavirus-covid-19-testing-privacy-information/testing-for-coronavirus-privacy-information-quick-read).
At the end of the periods indicated above, it may not be possible in certain cases to physically delete the data (for instance, where it is stored on a secure external server), in which case we will take appropriate steps to ensure that it is not available for re-use or disclosure to third parties.
- YOUR RIGHTS AS A DATA SUBJECT
As a data subject you have certain rights including:
1. the right to access the information held about you;
2. the right to ask us not to process your personal data for marketing purposes;
3. the right to ask us to rectify inaccurate personal data about you;
4. the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit the data to another controller without hindrance (data portability);
5. the right to ask for the restriction of personal data concerning yourself that is inaccurate, unlawfully processed, or no longer required;
6. the right to ask for the erasure of personal data concerning yourself where processing is no longer necessary, or the legitimate interests we have in processing your data are overridden by your interests, rights and freedoms as the data subject;
7. where the processing of your personal data is based on a consent you have given, the right to withdraw that consent at any time; and
8. to make a complaint to the Information Commissioner’s Office in the UK via the website www.ico.gov.uk or by post to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We request that you allow us an opportunity to resolve any complaint you might have in the first instance.
- FURTHER INFORMATION
If you have any questions or requests regarding our use of your Data, please contact us by email to: firstname.lastname@example.org or by post to:
Volta Technologies Limited, 85 Great Portland Street London W1W 7LT.