New Medicine Partners Ltd (“New Medicine Partners”, “we”, “us”, or “our”) are responsible for your personal data and are the designated “data controller”. We also provide services to clients for whom we are the “data processor”.
New Medicine Partners is a limited company registered in England.
Registration Number: 10415571
Registration Address: 45 Pall Mall, London, England, SW1Y 5JG, UK
If you have any questions about this privacy statement or how and why we process personal data, please contact our Data Privacy Manager at the above address.
Personal Data or Information
Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data which we have grouped together as follows:
Data We Collect
- Identity Data: includes first name, last name, username or similar identifier, date of birth and gender etc.
- Contact Data: includes billing address, service delivery address, email address and telephone numbers etc.
- Financial Data: includes bank account and payment card details.
- Transaction Data: includes details about payments to and from you and other details of services you have purchased from us.
- Communications Data: includes your preferences in receiving marketing from us and your communication preferences (more information in the ‘Your communication preferences’ section below). This includes:
- Email communications: If you contact us by submitting a message through our website Contact form, we will record your name, phone number, email address, company name, job title and any message you send.
We also collect, use and share website usage data, using Google Analytics (more information in the ‘Website analytics’ section below)
New Medicine Partners do not intentionally collect any special categories of personal data (sensitive personal information) about you. The exception to this is the recruitment processes, where sensitive data may be collected, to ensure meaningful equal opportunity monitoring and reporting, and to ensure adjustments may be made in the recruitment process for disability status. Recruitment data will be anonymised within four months of recruitment unless explicit consent is received for New Medicine Partners to keep your personal data. More detail of our candidate privacy notice is located here.
If you fail to provide personal data where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with our services). In this case, we may have to cancel the service you have with us but we will notify you if this is the case at the time.
We use Google Analytics to track and analyse web traffic in order for us to improve our website and provide us with essential marketing data (e.g. number of page views to our site in a month). Only anonymous data is stored and we take care to avoid any personal data being sent to Google Analytics. We collect this data under the “legitimate interest” lawful basis.
Collecting And Sharing Third Party Data
We use third parties in other countries to help deliver our services. We may receive personal data about you from various third parties (both within and outside the EU) set out below:
- Contracts with our clients.
- Contact, Financial and Transaction Data from providers to us of technical, payment and delivery services.
- Identity and Contact Data from publicly availably sources such as Companies House.
- HM Revenue & Customs, regulators and other relevant financial auditing authorities acting as processors or joint controllers.
How We Use Personal Data
We will only use the personal data when the law allows us to do so:
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. Our legitimate interests include responding to requests and enquiries from you or a third party, optimising our website and customer experience, informing you about our services and ensuring that our operations are conducted in an appropriate and efficient manner.
- Where we need to comply with a legal or regulatory obligation.
- Where you have consented to provide you with information that we think will be of interest to you about us and our services.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so, and you have the right to restrict or object to our use of your personal data at any time.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
How The Data Is Protected
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
How Long We Keep The Data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
We will actively review the information we hold and when there is no longer a customer, legal or business need for us to hold it, we will either delete it securely or in some cases anonymise it.
You have the right to request access to, and update or correct, personal data held by us as a data controller. You can email us at email@example.com to exercise this right. We aim to respond to any requests for information within one month and will make corrections based on your updated information.
Where we process personal data based on consent you have the right to withdraw your consent at any time by clicking on the unsubscribe link which we include in all our marketing emails.
As well as rights of access and amendment referred to above, you may have other rights in relation to the personal data we hold, such as a right to erasure/deletion, to restrict or object to our processing of personal data and the right to data portability.
Changes To This Privacy Statement
This Privacy Statement will be kept under regular review and was last updated on March 24 2020.