Appointment system- Youcanbookme is our booking system and is fully UK GDPR compliant, we only take enough information to make an appointment and send reminders:

1. Name
2. Email address
3. Telephone number

Wax removal system- Tympa Health is a data processor for several NHS organisations and health organisations and processes the following data:

• Data that identifies you, basic details such as name, gender, date of birth
• Contact data like address, telephone number, and email address
• NHS or health number
• Medical history
• Images/videos/audiograms relating to your hearing/ears

Appointment system- No, not with any third parties.

Wax removal system- We will share your personal data with the NHS organisations and health organisations that have commissioned our services to provide your healthcare.

Pseudonymised images and video (meaning that it is not possible for the specialist to identify the patient) are shared with our ear, nose, and throat specialists (ENTs) in order to improve the product and the quality of care provided to patients.

Appointment system- to send reminder emails and text  messages, you will normally only get one of each, and to send a recall email after 1 year. We might also send an email with offers very occcasionally (a couple a year).

Wax removal system- The personal data we collect on their behalf is used for the following purposes:

• To book and manage your appointments
• To provide your healthcare

Appointment system- 24 months from the last appointment, unless you request it is deleted.

Wax removal system- We keep your identifiable data until the end of our clients/customers contract, at which point all identifiable data is returned to the client/customer or deleted if requested by the client/customer (if there is no legal requirement for the customer to keep the data) or if requested, transferred securely to another provider within the timescales stated within the contract.

Your anonymous images, videos and audiograms will be retained by Tympahealth indefinitely for product development and research purposes.

Data protection law requires organisations to have a legal basis for processing personal data. We process your data for the provision of your direct care and related administrative purposes.

• UK GDPR Article 6 1(e) – Public interest
• UK GDPR Article 9 2(h) – Preventative or occupational medicine

To enable you to volunteer, we collect the following data about you:

• Data that identifies you, basic details such as name
• Contact data like address, telephone number, and email address
• Medical data like allergies

We only share your data with customers/clients involved and do not share your contact details with third parties.

We use your data to fulfil our obligations to you, including communications with you and to arrange meetings and appointments.

We keep your contact data for 8 years.

Data protection law requires organisations to have a legal basis for processing personal data. We process your data for the provision of your direct care and related administrative purposes.

• UK GDPR Article 6 1(e) – Public interest
• UK GDPR Article 9 2(h) – Preventative or occupational medicine

We do not share your data with third parties.

We use your personal data to provide you with the opportunity to benefit from our services and solutions we offer.

You have a right to object to processing at any time by emailing:

dpo@tympahealth.com

Where we are processing your data to provide services to you, we will keep your information for as long as is needed to provide those services.

Where we are processing your information for marketing purposes, we will continue to do so until such a time as you inform us that you wish to be removed from our marketing database.

Data protection law requires organisations to have a legal basis for processing data.

We collect and use data like names and contact details so that we can liaise with you

• UK GDPR Article 6 1(f) – Legitimate interests

We collect and use images and videos of you so that we can promote our product and services

• UK GDPR Article 6 1(a) – Consent