WEBSITE POLICY

The use of this website is subject to the following terms of use:
• The content of the pages of this website is for your general information and use only. It is subject to change without notice.
• Neither we nor any third parties provide any warranty or guarantee as to the accuracy, timeliness, performance, completeness or suitability of the information and materials found or offered on this website for any particular purpose. You acknowledge that such information and materials may contain inaccuracies or errors and we expressly exclude liability for any such inaccuracies or errors to the fullest extent permitted by law.
• Your use of any information or materials on this website is entirely at your own risk, for which we shall not be liable. It shall be your own responsibility to ensure that any products, services or information available through this website meet your specific requirements.
• This website contains material which is owned by or licensed to us. This material includes, but is not limited to, the design, layout, look, appearance and graphics. Reproduction is prohibited other than in accordance with the copyright notice, which forms part of these terms and conditions.
• All trademarks reproduced in this website, which are not the property of, or licensed to the operator, are acknowledged on the website.
• Unauthorised use of this website may give rise to a claim for damages and/or be a criminal offence.
• From time to time, this website may also include links to other websites. These links are provided for your convenience to provide further information. They do not signify that we endorse the website(s). We have no responsibility for the content of the linked website(s).
• Your use of this website and any dispute arising out of such use of the website is subject to the laws of England, Northern Ireland, Scotland and Wales.

Privacy Policy

This policy covers handling personal information collected by NOC365 or its customers, including data that is stored, processed, or otherwise shared with NOC365, its systems, employees, and contractors. It covers collecting, processing, storing, and deleting personal information. This policy also governs human resource data as it must be protected in a similar fashion as personal data of users and customers and all other personal information that may be collected, processed, or stored by NOC365.

In applying privacy by design, the following elements must be considered:

• Types of Data Collected
• The Purposes of Processing
• Legal Basis of Processing
• Data Residency and Cross-Border Transfer
• Retention Time
• Data Subject Rights

A privacy impact assessment and a threat risk assessment must be conducted as part of the planning and design phases of the project. They must be updated before launch to factor in changes in scope that occur throughout the product development. Additionally, these assessments must be reviewed at least annually or in the event of a significant change in scope, business use case, architecture, or legal landscape.

Below are the legal bases for NOC365 to collect personal information:

• Users have given their consent for one or more specific purposes.
• Provision of data is necessary for the performance of an agreement with the user.
• Processing is necessary for compliance with a legal obligation.
• Processing is necessary for the legitimate interests pursued by the controller or a third party.

Therefore:

• Personal data collected to perform a contract between NOC365 and a business customer is retained until such contract has been entirely performed or the customer asks for the data to be deleted.
• Personal data collected for NOC365’s legitimate interests shall be retained as long as needed to fulfill such purposes.

NOC365 may be allowed to retain personal information for a more extended period whenever the user has consented to such processing, as long as such consent is not withdrawn. Furthermore, NOC365 may be obliged to retain personal data for a more extended period whenever required to perform a legal obligation or upon order of an authority. Once the retention period expires, the user’s personal data will be securely deleted.

• Withdraw their consent at any time. Users have the right to withdraw consent after they have previously given their consent to processing their personal data.
• Object to processing of their data. Users have the right to object to the processing of their data if the processing is carried out on a legal basis other than consent.
• Access their data. Users have the right to learn if NOC365 is processing their data, obtain disclosure regarding certain aspects of the processing, and obtain a copy of the data undergoing processing.
• Verify and seek rectification. Users have the right to verify their data accuracy and ask for it to be updated or corrected.
• Restrict the processing of their data. Users have the right, under certain circumstances, to restrict the processing of their data. In this case, NOC365 will not process their data for any purpose other than storing it.
• Have their personal data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their data from NOC365.
• Receive their data and have it transferred to another controller. Users have the right to receive their data in a structured, commonly used, machine-readable format, and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the data is processed by automated means and that the processing is based on the user’s consent, on a contract that the user is part of, or on pre-contractual obligations.
• Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

Any requests to exercise data subject rights can be directed to NOC365 through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by NOC365 as early as possible and always within one month.

The NOC365 website and NOC365 web application use cookies. Users must be able to learn more about the use of cookies via a cookie notice that must be available to the user.

How the NHS and care services use your information

NOC365 is one of many organisations working in the health and care system to improve care for patients and the public.

Whenever you use a health or care service, such as attending Accident & Emergency or using Community Care services, important information about you is collected in a patient record for that service. Collecting this information helps to ensure you get the best possible care and treatment.

The information collected about you when you use these services can also be used and provided to other organisations for purposes beyond your individual care, for instance to help with:

• improving the quality and standards of care provided
• research into the development of new treatments
• preventing illness and diseases
• monitoring safety
• planning services

This may only take place when there is a clear legal basis to use this information. All these uses help to provide better health and care for you, your family and future generations. Confidential patient information about your health and care is only used like this where allowed by law.

Most of the time, anonymised data is used for research and planning so that you cannot be identified in which case your confidential patient information isn’t needed.

You have a choice about whether you want your confidential patient information to be used in this way. If you are happy with this use of information you do not need to do anything. If you do choose to opt out your confidential patient information will still be used to support your individual care.

To find out more or to register your choice to opt out, please visit www.nhs.uk/your-nhs-data-matters.  On this web page you will:

• See what is meant by confidential patient information
• Find examples of when confidential patient information is used for individual care and examples of when it is used for purposes beyond individual care
• Find out more about the benefits of sharing data
• Understand more about who uses the data
• Find out how your data is protected
• Be able to access the system to view, set or change your opt-out setting
• Find the contact telephone number if you want to know any more or to set/change your opt-out by phone
• See the situations where the opt-out will not apply

You can also find out more about how patient information is used at:

https://www.hra.nhs.uk/information-about-patients/ (which covers health and care research); and

https://understandingpatientdata.org.uk/what-you-need-know (which covers how and why patient information is used, the safeguards and how decisions are made)

You can change your mind about your choice at any time.

Data being used or shared for purposes beyond individual care does not include your data being shared with insurance companies or used for marketing purposes and data would only be used in this way with your specific agreement.

Health and care organisations have until 2020 to put systems and processes in place so they can be compliant with the national data opt-out and apply your choice to any confidential patient information they use or share for purposes beyond your individual care. Our organisation is currently compliant with the national data opt-out policy.

Interested? Email your CV to our Recruitment Manager at recruitment@noc365.com