Privacy Policy

1. Why we process your data

We process personal information about you as we have a contract with you to make the i-GP service available to you. We require the personal information (including sensitive health data) to carry out our obligations under that contract. This information is processed in accordance with the Privacy Policy and only where you have given your explicit consent and agreed to our Terms and Conditions at the time of registration. To contact you with updates about our services, we request your consent separately for this and you have the right to opt in or opt out. 

---

2. Information we may collect

All medical and other health information collected and supplied to i-GP will be treated as strictly confidential and all such data will be held strictly in accordance with, and as long as required, under UK regulatory codes of practice on records management and data privacy laws.

Personal information

Before you can use the i-GP services you are required to register and create an account. At registration you are asked for your personal details to include gender, name, date of birth, registered home address, email address, telephone number and GP details. This will also include any details regarding your previous medical history and medications you may be on. You then set up a private password to gain access to your personal account from which you will receive your management plan and any prescriptions. During the assessment, we collect information that you submit about your ailment. You are under no obligation to provide any such information. However, if you should choose to withhold requested information, we will not be able to provide you with the service.

We collect and retain information when you contact us and all communications you send to us, for example, to report a problem or to submit queries, concerns or comments regarding the Platform or its content. We may send surveys from time to time to help improve our products, and we collect and retain the information you send if you choose to respond.

Technical information

i-GP may use aggregate data sets of unidentifiable, non-personal information for statistical analysis to help improve the service. We will gather and process data resulting from your interactions such as visit time, frequency, log-in times, recurrence of visits and other interaction information which we will use for a range of services delivery and improvement.

We will also collect and process demographic information about you when available such as your age, location, and gender. You cannot be identified from this information, and it is only used to assist us in providing an effective service on the Website.

We have a legitimate interest in using your personal information for these purposes so that we can continuously improve our Platform and our services.

---

3. Financial information

When you use i-GP your debit and credit card information is processed via our billing partner SagePay (sagepay.co.uk). The contact details are Head Office, Sage Pay Europe Limited, North Park, Newcastle upon Tyne, NE13 9AA.

You will be providing your credit or debit card details directly to SagePay which operates a secure server to process payment details, encrypting your credit/debit card information and authorising payment. Information which you supply to Sage Pay is not within our control and is subject to Sage Pay’s own strict privacy policy and terms and conditions which can be found at  https://www.sagepay.co.uk/policies/security-policy

i-GP does not receive or have access to this information, and your debit/credit card information is not stored by i-GP.

---

4. How we may use your information

We use the information you give to us about you in the following ways:

• To provide the products and services offered through the Platform and which you request from us and to perform our contract with you.
• To provide such information to any member of our team, suppliers and sub-contractors of the Company where reasonable or necessary about the provision of the products and services including provision of your information to your i-GP doctor, your dispensing chemists, and suppliers used in relation to our service provision.
• To verify your identity and age.
• To process your payment for such products and services.
• To review and improve the quality of our services and products, including monitoring compliance with clinical care standards.
• To make disclosures as required by or in compliance with reasonable requests by regulatory bodies including the General Medical Council or Care Quality Commission, or as otherwise required by law or regulation.
• Where you consent to it, to provide information to your registered GP.

Information that you provide forms your i-GP Medical Record, which we hold and may contain relevant and pertinent information. We need the personal information we collect to provide you with the Services and to send you essential information about the Services (where you ask us to send you such information) and to help us with the operation of the Platform. i-GP creates a secure record of the online assessments you complete, the care/advice and services you receive.

i-GP will use your email address to validate your account. Your email address, mobile telephone number and other contact information that you provide via your Account may also be used by i-GP to assist you in your use of the Services. i-GP will use your email address as the primary means to reset your password. Your email address and mobile telephone numbers can be shared with third parties working with i-GP in the direct delivery and development of the services to you.

Sharing information for identity verification

We will share specific identification information (which will include name, date of birth and address) with our identity checking partner, Lexis Nexis. By accepting the Terms, you accept and agree to be bound by the Privacy Policy of Lexis Nexis.

Sharing information with your i-GP Doctor

Your information will be viewable by your i-GP doctor who will be trained and based in the UK and registered with the GMC (General Medical Council), and any associated i-GP members of staff who will have been appropriately checked to ensure they meet the requirements of data protection including DBS checked in accordance with UK law. We share your information with the i-GP doctors and any associated i-GP members of staff to enable them to assess your health conditions, advise you and deliver the services that you request (as per our terms and conditions). Your sensitive health information remains in the UK.

Sharing information with your pharmacist

To process a prescription for medication on the Platform (as offered by a doctor or requested by you in accordance with our Terms and Conditions), it may be necessary to share essential identification data that is on your prescription (such as your name, date of birth, postal address, prescribed medication and phone number) with your chosen dispensing pharmacy. This is for the purpose of dispensing your medication.

Sharing information with your GP

While in certain circumstances we may strongly encourage you to inform your regular registered GP of any health concerns you may have discussed with your doctor, we will not share information with your regular GP unless we have your express permission or there is an overriding public interest in disclosing the information without your consent.

We will not disclose, sell or rent your personal information to any third party over than those used to directly provide our services to you, which you have requested. We will never share your information with any third parties for marketing, advertising or any purposes other than fulfilling your request.

However, if we undergo re-organisation or are sold to a third party, you agree that any personal information we hold about you may be transferred to that re-organised entity or third party.

---

5. Disclosing your personal information

We may disclose your personal information if we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation, or in order to enforce or apply our Terms and other agreements; or to protect the rights, property, or safety of i-GP, our customers, or others. For example, we may share your information (this list is not exhaustive): to prevent or control disease, injury or disability; to report child abuse or neglect; to report reactions to medicines or problems with products; if a Doctor believes that you may have been exposed to a disease or may be at risk of spreading a serious disease or condition.

We may also disclose your personal information if required to do so by law or if we believe that such action is necessary to prevent fraud or cyber crime or to protect the Platform or the rights, property or personal safety of any person.

---

6. Optional use of information

If you opt in, then we may use your name and email address to send you newsletters about our services. We, however, do not use any sensitive or health information for these purposes. We may send you email feedback forms to complete regarding us or any aspect of the website and the Services. We do not pass this information on to any third parties for any marketing purposes.

You can opt out of this by changing your settings in the My Account section after logging in.

If you agree to be included on our mailing list, we will keep your personal information for that purpose unless and until you tell us that you want to unsubscribe. If you advise that you do not want to be added to our mailing list or you ask to be removed, we will delete your personal data (aside from keeping a record that you have asked us not to send you marketing information).

---

7. Security and where we store your data

The importance of security for all Personal Information including, but not limited to, personal health information associated directly or indirectly with you is of great concern to us. At i-GP, we have gone to great lengths to ensure the security and integrity of our service and that we use best in class services when providing secure transmission of your information from your PC or mobile device to us. Health information collected by our Platform is stored in secure private UK based servers that are not available or accessible to the public. Only those duly authorised people, suppliers or employees of i-GP who need access to your information to directly do their jobs are allowed access. Anyone who violates our privacy or security policies is subject to disciplinary action, including possible termination of the contract with i-GP and civil and/or criminal prosecution.

All health records are retained in digital form by i-GP in a secure and encrypted environment and are confidentially stored in accordance with the retention periods set out in the NHS code of practice on records management, which may be updated from time-to-time.

We place great importance on the security of all personally identifiable information associated with our users. We have security measures in place to attempt to protect against the loss, misuse, and alteration of personal information under our control. Our security and privacy policies are periodically reviewed and enhanced as necessary, and only authorised personnel have access to personal information. By submitting your personal data, you agree to this transfer, storing or processing. While we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it from happening.

i-GP uses the latest technologies to ensure utmost security, including Secure Socket Technology and Advanced Site Lock to provide the highest level of protection. i-GP is the sole owner of the information collected.

When you interact on our site, all of your personal information, including but not limited to your debit or credit card number(s) and addresses, is transmitted through the Internet using Secure Socket Layer (SSL) technology. SSL technology causes your browser to encrypt your entered information before transferring it to our secure server. SSL technology, an industry standard, is designed to prevent someone other than operators of our service from capturing and viewing your personal information.

You should bear in mind that submission of information over the internet is never entirely secure and whilst we take appropriate technical and organisational measures to safeguard the personal information you provide to use, we cannot guarantee the security of information you submit via the Platform whilst it is in transit over the internet, and any such submission is at your own risk. You should always close your browser when you have finished your user session to help ensure others do not access your personal information, particularly if you use a shared computer or a computer in a public place. You are responsible for keeping your password secure, which enables you to access your i-GP account. We ask you not to share the password with anyone.

---

8. Cookies

Cookies do not contain information such as medical information, credit/debit card or personal contact details. We set all cookies used on our Website.

Essential cookies are required for the operation of our services, and without them, the services can’t operate properly.

Performance cookies allow us to see and count the number of visitors to our site and what they do during their visit. We use the information from these cookies to improve the Platform’s performance. The data from these cookies doesn’t allow us to identify you.

Marketing cookies track and record your visits to the Platform and are used by our analytics systems. We use this data to make the content of our site more relevant for you based on what we know about you, to monitor and enhance the Platform’s user-friendliness.

We have a legitimate interest in using any personal information collected through performance and measurement cookies so that we can continuously improve our Platform and our services.

You can Refuse cookies, by activating settings of your chosen browsers. If you alter your browser settings to refuse cookies, you cannot access our services.

For more information about cookies or if you would like to learn how to remove cookies set on your device, visit: https://www.aboutcookies.org.

Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our site.

---

9. Accessing Your Personal Information

We believe that you should have access to your health information without charge where possible. We believe this as it promotes and enables patients to take a more positively active role in their health. We do not charge customers for releasing their notes. Please contact us to initiate this request.

---

10. External links

If you click on a link to a third party site, you will leave the site and go to the site you selected. Because i-GP cannot control the activities of third parties, we cannot accept responsibility for any use of your personal information by such third parties, and we cannot guarantee that they will adhere to the same privacy practices as i-GP. We advise you to review the privacy policies of any other service provider from whom you request services. If you visit a third party website that is linked to our site, you should read that site's privacy policy before providing any personally identifiable information.

Our site includes some Social Media Features, such as the Facebook button and Widgets, such as the ‘Share This’ button. These Features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly on our site. Your interactions with these Features are governed by the privacy policy of the company providing it.

---

11. Your rights

You have the following legal rights in respect of your personal information; a right to:

• request from us access to your personal data
• request rectification of your personal data
• request erasure of your personal data; (however there is a regulatory requirement for i-GP to retain your i-GP medical records if you have received medical treatment from us)
• ask us to restrict processing of your personal data and a right to object to our processing of your personal data (but if you do either of these, it may impact on your use of the Services and Platform and we may not be able to provide you with information about the Service that you have requested us to provide to you)
• ask us for a copy of any personal data you have provided about yourself and to have a copy of it from us
• complain how we treat your personal data with the Information Commissioner’s Office

If you wish to discuss or make a request in respect of any of the above rights, please Contact Us.

---

12. Changes to our Privacy Policy

i-GP may revise this Notice to reflect any changes in our privacy practices. We reserve the right to make the revised Notice effective for personal information we already have about you. It also will be valid for any information we receive in the future. We will post a current version of the Notice on our site before the change becoming effective. If we make any material changes, we will notify you through a notice on the website. The then-current privacy policy will apply to any transaction or use of the Website, and it is your responsibility to ensure that you are content to contract on the then-current privacy policy at the point of any transaction or use.

---

13. Contact Us

Please submit any questions, concerns or comments you have about this privacy policy or any requests concerning your personal information by email to support@i-gp.uk or by mail to i-GP, 26 King’s Hill Avenue, King’s Hill, West Malling, Kent, ME19 4AE.

If you have any complaints, please Contact Us using the details above.

---

14. Acceptance

By using the i-GP service, you acknowledge your acceptance of our Privacy Policy and agree to these terms. If you do not agree with this policy, you should not use i-GP. We recommend that you read this Privacy Policy each time you consider or choose to use the services to ensure that you have not missed any changes. Your ongoing use of the i-GP services following any changes to the Privacy Policy signifies your acceptance of those changes.