This site is operated by Medvivo Group Limited, a company registered in England under registration number 05146354 with its registered offices at Fox Talbot House, Bellinger Close, Chippenham, Wiltshire SN15 1BN.
As a valued visitor to our website, we are committed to ensure clear and concise privacy statements are available and communicated to our staff, patients, service users and visitors to our website.
We are Medvivo Group Ltd, a provider of integrated urgent care services including clinical access service, out of hours GP services, access to care, high intensity user service and crisis response services.
This privacy notice explains how we use any personal data we collect about you as an employee of Medvivo Group Ltd or an individual contractor providing a service for Medvivo Group Ltd.
Medvivo Group Ltd is a Data Controller for the information processed by us unless otherwise stated and is registered as such with the UK Information Commissioner's Office under registration reference ZA001340.
We may collect your personal data in a number of ways, for example:
We may collect the following types of personal data:
We may use your personal data in the following ways:
Any medical or health related personal data will be treated with confidence in line with the Common Law Duty of Confidence.
Dash cam footage is captured to help us ensure the safety and security of our staff and members of the public.
CCTV footage is captured for the purposes of prevention of crime, safety and good.
Dash cam and CCTV footage is managed in the same way as all other personal data processed by us and in line with current legislation.
All calls made from and received by Medvivo are recorded and may be used to support the learning and development of our staff. They may also be used when reviewing incidents, compliments or complaints.
Call recordings are managed in the same way as all other personal data processed by us and in line with current legislation.
We may use the services of a data processor to assist us with some of our data processing, but this is done under a contract with direct instruction from us that controls how they will handle employee information and ensures they treat any personal data in line with the Data Protection Act, the UK General Data Protection Regulation, confidentiality, privacy law, and any other laws that apply.
If your role requires a standard or enhanced DBS check, we will share your personal data entered on the DBS form with the Disclosure and Barring Service.
Further details on how the DBS will process your personal data are available here:
www.gov.uk/government/publications/dbs-privacy-policies
As a member of the HealthHero group, Medvivo will share your personal data with other companies within the HealthHero group.
HealthHero use Workplace by Facebook to communicate with employees within the HealthHero group. Further details about how Facebook will process your personal data are available here: Workplace Privacy Policy
As an employee of Medvivo you can access employee benefits via SimplyHealth. Medvivo will share your name, email address and date of birth with SimplyHealth to enable you to access their services.
SimplyHealth has recently become a client of HealthHero (May 2023) being responsible for their virtual GP service provision.
Further details regarding how SimplyHealth will process your personal data are available here: Simplyhealth Privacy Policy
As an employee of Medvivo, you can access employee benefits via Symbio. Symbio is a digital wellbeing platform and smartphone app. Medvivo will share your name, email address, date of birth, job role and department with HealthHero to enable you to create an account with Symbio. The Data Privacy Terms and Conditions can be found in the settings page of the Symbio app.
We will not share your information with third parties without your consent unless the law allows or requires us to.
If you register to use Workable as part of a recruitment process, Workable may process your personal data in the EU and US.
Workplace by Facebook will process your personal data across Facebooks data centres located in the EU and US.
We will retain your personal data held in our HR systems for six years after you leave the employment of Medvivo Group Ltd.
We will retain your personal data used for the delivery of inoculations for eight years after the inoculation.
The processing of your personal data is required in order that we can fulfil our obligations under the contract of employment between Medvivo Group Ltd and yourself.
We will use your sensitive personal information, such as that relating to your race, ethnic origin, and health for the purposes of the performance or exercise of our or your rights and obligations under employment law or where the processing is necessary for the purpose of preventative medicine or an assessment of your fitness for work.
It is in our, yours and the public's legitimate interests to ensure the safety and security of our staff and members of the public. The processing of your personal data from the dash cam footage is necessary for this purpose.
In some circumstances, we may process your personal data on the basis that:
As a provider of front-line patient facing services, we offered COVID-19 lateral flow tests to all applicable staff.
We collected your personal data via an online form when you reported back the results of your test.
Your personal data was used in the following ways:
Any medical or health related personal data will be treated with confidence in line with the Common Law Duty of Confidence.
Any reporting (such as the number of tests completed) will be completely anonymous.
The results of the test were not recorded on your employment record but we will retain a record of who completed a COVID-19 lateral flow test, and this will be kept for 6 years after your last completed COVID-19 lateral flow test.
When requested by NHS England and NHS Improvement, we offered COVID-19 antibody tests to all staff.
We collected your personal data via an online form when you agreed to have a COVID-19 antibody test and when we arranged an appointment for the COVID-19 antibody test.
We processed the following additional personal data as part of the test:
Your personal data was used in the following ways:
Any medical or health related personal data will be treated with confidence in line with the Common Law Duty of Confidence.
Any reporting (such as the number of tests completed) will be completely anonymous.
We shared your personal data with the hospital laboratory to enable them to process your COVID-19 antibody test.
The results of the test were not recorded on your employment record but we will retain a record of who completed a COVID-19 antibody test, and this will be kept for 6 years after your last COVID-19 antibody test.
Following instruction from NHS England and Improvement, your antibody test results may have been automatically added to your patient clinical record held by your registered GP practice.
The hospital laboratories will retain your personal data contained in their systems as per their own retention schedules.
You have a right to:
You can exercise these rights by contacting us as detailed below.
If you have any questions about our privacy notice, the personal data we hold about you, or our use of your personal data then please contact our Data Protection Officer at:
Data Protection Officer
Medvivo Group Ltd
Fox Talbot House
Bellinger Close
Chippenham
Wiltshire
SN15 1BN
Or
uc-dataprotection@healthhero.com
You also have the right to raise any concerns about how your personal data is being processed by us with the Information Commissioners Office (ICO):
0303 123 1113
We keep our privacy notice under regular review and will inform you of any updates. This privacy notice was last updated on 27th March 2024.
We are Medvivo Group Ltd, a provider of integrated urgent care services including clinical access service, out of hours GP services, access to care, high intensity user service and crisis response services.
This privacy notice explains how we use any personal data we collect about you as a prospective employee of Medvivo Group Ltd.
Medvivo Group Ltd is a Data Controller for the information processed by us unless otherwise stated and is registered as such with the UK Information Commissioner's Office under registration reference ZA001340.
We may collect your personal data in a number of ways, for example:
We may collect the following types of personal data:
We may use your personal data in the following ways:
To facilitate the recruitment process
To comply with legal obligations
Any medical or health related personal data will be treated with confidence in line with the Common Law Duty of Confidence.
All calls made from and received by Medvivo are recorded and may be used to support the learning and development of our staff.
Call recordings are managed in the same way as all other personal data processed by us and in line with current legislation.
We may use the services of a data processor to assist us with some of our data processing, but this is done under a contract with direct instruction from us that controls how they will handle prospective employee information and ensures they treat any information in line with the General Data Protection Regulation, confidentiality, privacy law, and any other laws that apply.
We will not share your information with third parties without your consent unless the law allows or requires us to.
We will hold your personal data for 1 year after you apply for a role at Medvivo. If you are successful in applying for a role at Medvivo then your application will form part of your employee record which will be held for 6 years after you leave Medvivo.
The legal basis for us to process your personal data is based on our legitimate interest in processing your personal information because it is necessary in order for us to process your application for the role you have applied for.
We will use your sensitive personal information, such as that relating to your race, ethnic origin, and health for the purposes of the performance or exercise of our or your rights and obligations under employment law.
In some circumstances, we may process your personal information on the basis that we are required to do so in order to comply with legal obligations to which we are subject.
You have a right to:
You can exercise these rights by contacting us as detailed below.
If you have any questions about our privacy notice, the personal information we hold about you, or our use of your personal information then please contact our Data Protection Officer at:
Data Protection Officer
Medvivo Group Ltd
Fox Talbot House
Bellinger Close
Chippenham
Wiltshire
SN15 1BN
Or
DataProtection.Officer@Medvivo.com
You also have the right to raise any concerns about how your personal data is being processed by us with the Information Commissioners Office (ICO):
0303 123 1113
We keep our privacy notice under regular review and we will place any updates on this webpage. This privacy notice was last updated on 5th July 2022.
Medvivo Group Ltd is a company commissioned by the BaNES, Swindon and Wiltshire Integrated Care Board (ICB) to provide the integrated urgent care services including clinical access service, out of hours GP services, access to care, high intensity user service and crisis response services. This privacy notice explains how we use any personal information we collect about you as a patient of health care services provided by Medvivo Group Ltd.
Medvivo Group Ltd is a Data Controller for the information processed by us unless otherwise stated and is registered as such with the UK Information Commissioner's Office under registration reference ZA001340.
We collect your personal information:
Depending on the service we provide to you we may collect the following types of personal information:
We will use your personal information in the following ways:
If you have provided your mobile telephone number, we may use this to send SMS messages confirming details of appointments, prescriptions, care advice, or requests to complete patient experience surveys. If we are unable to contact you via telephone call, we may also use the mobile telephone number recorded for you to send a ‘failed contact’ SMS message.
Recordings of calls made and received by Medvivo may be used to support the learning and development of our staff and to improve the service we provide to our patients.
They may also be used when reviewing incidents, compliments or complaints.
Call recordings will be managed in the same way as all other personal information processed by us and in line with all current legislation.
We may use the services of a data processor to assist us with some of our data processing, but this is done under a contract with direct instruction from us that controls how they will handle patient information and ensures they treat any information in line with the General Data Protection Regulation, confidentiality, privacy law, and any other laws that apply.
We may share your personal information with other health and care professionals and members of their care teams to support your ongoing health and care and achieve the best possible outcome for you. This may include:
We use a facility called GP Connect to support your direct care. GP Connect makes patient information available to all appropriate clinicians when and where they need it, to support direct patients care, leading to improvements in both care and outcomes.
GP Connect is not used for any purpose other than direct care.
Authorised Clinicians such as GPs, NHS 111 Clinicians, Care Home Nurses (if you are in a Care Home), Secondary Care Trusts, Social Care Clinicians are able to access the GP records of the patients they are treating via a secure NHS Digital service called GP connect.
The NHS 111 service (and other services including Medvivo) will be able to book appointments for patients at GP practices and other local services. Further details about GP Connect are available here:
Any medical or health related personal information will be treated with confidence in line with the common law duty of confidentiality and the Confidentiality NHS Code of Practice. We may be required to share information with people other than health and care professionals and members of their care teams in order to comply with our legal and regulatory obligations.
We will not share your information with people other than health and care professionals and members of their care teams without your consent unless the law allows or requires us to.
We will process your personal information to see if you may be suitable to participate in medical research studies. If you are identified as being potentially suitable, we will contact you to provide you with information about the research and invite you to participate in the study. We will not share your information with any research organisations without your explicit consent.
Confidential information about your health and care is collected by Medvivo and shared with other organisations for the purposes of your individual care.
Confidential patient information about your health and care can be used and provided to other organisations for purposes beyond your individual care where allowed by law.
Medvivo does not share your confidential patient information for purposes beyond your individual care. When sharing data for planning and reporting purposes, we use anonymised data so that you cannot be identified in which case your confidential patient information isn’t required.
Health and care organisations that process confidential patient information have to put systems and processes in place so they can be compliant with the national data opt-out. They must respect and apply your opt-out preference if they want to use or share your confidential patient information for purposes beyond your individual care.
Medvivo are currently compliant with the national data-out policy as we do not share your confidential patient information for purposes beyond your individual care.
To find out more or to register your choice to opt out, please visit www.nhs.uk/your-nhs-data-matters
*NB If you choose to opt out, your confidential patient information will still be used to support your individual care.
You can change your choice at any time.
We follow the Records Management Code of Practice for Health and Social Care 2016 records retention schedule published by the Information Governance Alliance for the Department of Health which states that patient records should be retained for 8 years from last contact with the service. At that point, all personal data we hold on you will be securely deleted.
We keep recordings of our calls for six years.
We keep recordings of Video Consultations for eight hours.
We have been commissioned by your local clinical commissioning groups to provide the Integrated Urgent Care service across BaNES, Wiltshire and Swindon, the Success and Children’s & Young people’s clinic in Swindon and the High Intensity User service across BaNES and Swindon and it is necessary us to process your personal data for the performance of this task in the public interest.
We will use your special categories of personal data, such as that relating to your race, ethnic origin, and health for the purposes of providing you with health or social care or the management of health or social care systems and services. Such processing will only be carried out by a health or social work professional or by another person who owes a duty of confidentiality under legislation or a rule of law.
In some circumstances, we may process your personal information on the basis that:
You have a right to:
You can exercise these rights by contacting us as detailed below.
If you have any questions about our privacy notice, the personal information we hold about you, or our use of your personal information then please contact our Data Protection Officer at:
Data Protection Officer
Medvivo Group Ltd
Fox Talbot House
Bellinger Close
Chippenham
Wiltshire
SN15 1BN
Or
uc-dataprotection@healthhero.com
You also have the right to raise any concerns about how your personal data is being processed by us with the Information Commissioners Office (ICO):
0303 123 1113
We keep our privacy notice under regular review and we will place any updates on our website. You can also ask the clinician to show you a copy of the privacy notice during your consultation. This privacy notice was last updated on 30 January 2024.
Medvivo Group Ltd is a company that provides NHS healthcare services in the Bath and North East Somerset, Swindon and Wiltshire areas
This privacy notice tells you what personal information (information that identifies who you are) Medvivo collects about you and what we do with that personal data.
Medvivo Group Ltd is known as a Data Controller for the information processed by us unless otherwise stated and is registered as such with the UK Information Commissioners Office under registration reference ZA001340.
You or your parent or guardian can also read our detailed patient privacy notice available on our website here: http://www.medvivo.com/privacy-notices
We collect your personal information:
Depending on the service we provide to you we may collect the following types of personal information:
We will use your personal information in the following ways:
We will share your personal information with our doctors and nurses who will look after you and members of their care teams. There may be times when we need to share your information outside of Medvivo to support your healthcare and this may include:
We follow the NHS rules which require us to keep personal information for 8 years after your last contact with Medvivo. At that point, all personal data we hold on you will be securely deleted.
We take protecting your personal data very seriously. All personal data is held securely, and we have safeguards in place to make sure that only the people who need access to your personal data can access it. Also, we make sure that if anyone at Medvivo uses your personal data, they are trained in using it carefully. If we share your personal data with other people or organisations, we make sure it is done in a safe and secure way.
We only collect and use your personal information for the purpose of providing you with healthcare and only when we are allowed to do so according to the law.
You have quite a few rights in respect of your personal data. For example, if you would like to see what personal data we hold on you, you can either make a subject access request or ask your parent or guardian (if you are under 18 and they are responsible for you) to make a subject access request and contact Medvivo, who will provide you or your patient or guardian with a copy of that personal data.
You can also ask us to correct personal data we hold about you if it is wrong, or even delete it (although we don't always have to do so). You can also tell us if you do not want us to use your personal data in any particular way, but this may mean that in some cases, we cannot treat you.
If you would like to talk to us about your data rights, you can contact our Data Protection Officer (whose contact details are below). If you're under 18, you can ask your parent or guardian to help you if you like, or simply contact us and we will be as helpful as possible.
Please either send your question, or ask your parent or guardian (if you are under 18 and they are responsible for you) to pass your questions, to our Data Protection Officer via email at DataProtection.Officer@Medvivo.com who will be able to help.
You or your parent or guardian can also read our detailed patient privacy notice available on our website here: https://www.medvivo.com/privacy-notices
You also have the right to raise any concerns about how your personal data is being processed by us with the Information Commissioners Office (ICO):
0303 123 1113
We keep our privacy notice under regular review and we will place any updates on our website. You can also ask the clinician to show you a copy of the privacy notice during your consultation. This privacy notice was last updated on 15th October 2021.
This appendix has been added to include any additional data processing completed by us during the Coronavirus (COVID-19) pandemic.
In light of the current emergency, the Department of Health and Social Care has removed the requirement for your explicit consent prior to sharing additional information as part of the summary care record.
You can read more about the changes to your Summary Care Record here:
Summary Care Record Supplementary Transparency Notice - NHS Digital
Medvivo have been commissioned to provide the COVID-19 Oximetry at Home service across BaNES Swindon and Wiltshire.
NHS Digital has agreed to share the following patient information about patients resident or registered in the BaNES Swindon and Wiltshire areas:
Medvivo will use the disclosed patient information for the purpose of identifying patients who will be suitable for the COVID-19 Oximetry at Home service.
Whilst providing the COVID-19 Oximetry at Home service to you, we will add information relating to your health directly into your clinical record controlled by your registered GP practice.
We may contact you via telephone, text message or email about the COVID-19 Oximetry at Home service using your contact details recorded in your clinical record controlled by your registered GP practice.
If Medvivo provide the COVID-19 Oximetry at Home service to you, we will retain access to your personal medical information for 8 years from last contact with the service.
We will retain your details in our GoodSAM system for 6 months from your last contact with the service.
The details of any patients provided to Medvivo from NHS Digital who are not suitable for the COVID-19 Oximetry at Home service will be securely deleted.
You can read more about the COVID-19 Oximetry at Home service here: COVID-19 Oximetry at Home
This privacy notice Appendix was last updated on 1st July 2022.
We are Medvivo Group Ltd, a provider of integrated urgent care services including clinical access service, out of hours GP services, access to care, high intensity user service and crisis response services.
This privacy notice explains how we use any personal information we collect about you when you access the Medvivo website. Our website is operated by Medvivo Group Ltd, as a Data Controller for the information processed by us unless otherwise stated and is registered as such with the UK Information Commissioners Office under registration reference ZA001340.
We collect:
We collect information about you to enable us to process and respond to your enquiry or interest.
The information you provide to us when you complete a survey or provide feedback will be used to improve the services we provide.
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work more efficiently, as well as to provide information to the owners of the site. Click on the “Cookie Settings” button at the bottom right corner of your screen to learn more
You can change your cookie preferences at any time by clicking the “Cookie Settings” button on the bottom right corner of your screen. You may need to refresh your page for the settings to take effect.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, please visit: www.aboutcookies.org or www.allaboutcookies.org.
Find out how to manage cookies on popular browsers:
To find out information relating to other browsers, visit the browser developer's website.
Some of our web pages may contain electronic images known as web beacons (sometimes known as clear gifs) that allow us to count users who have visited these pages. Web beacons collect only limited information which includes a cookie number, time and date of a page view, and a description of the page on which the web beacon resides. We may also carry web beacons placed by third party advertisers. These beacons do not carry any personally identifiable information and are only used to track the effectiveness of a particular campaign.
Our website may contain links to other websites over which we have no control. We are not responsible for privacy policies or practices of other websites to which users choose to link from our website. We encourage users to review the privacy policies of those other websites to understand how they collect, use and share personal information.
Only Medvivo staff will have access to your information submitted via our website and will not share your data with any other third party. Medvivo will not use or share your information for automated decision making, profiling or marketing purposes.
We will hold the information you submit to us for 6 months after the last contact.
Details on cookie retention can be viewed by clicking on the "Cookie Settings" button on the bottom right corner of your screen.
We, and you, have a legitimate interest in us providing you with the information you ask us for. It is necessary for us to process your information in order to do this.
We, and users of our services, have a legitimate interest in seeking to better understand how we can better improve our services. In order to do this it is necessary for us to process your information provided when you complete customer surveys and feedback questionnaires.
When you entered the website you will have been asked to consent to the use of cookies. You can withdraw your consent at anytime by clicking the "Cookie Settings" button on the bottom right corner of your screen.
You have a right to:
You can exercise these rights by contacting us as detailed below.
If you have any questions about our privacy notice, the personal information we hold about you, or our use of your personal information, then please contact our Data Protection Officer at:
Data Protection Officer
Medvivo Group Ltd
Fox Talbot House
Bellinger Close
Chippenham
Wiltshire
SN15 1BN
Or
DataProtection.Officer@Medvivo.com
You also have the right to raise any concerns about how your personal data is being processed by us with the Information Commissioners Office (ICO):
0303 123 1113
We keep our privacy notice under regular review and we will place any updates on this webpage. This privacy notice was last updated on 5th July 2022.
If you would like additional information regarding your rights as a data subject, please click on the link below:
Your login details have been used by another user or machine. Login details can only be used once at any one time so you have therefore automatically been logged out. Please contact your sites administrator if you believe this other user or machine has unauthorised access.