Privacy Notice 

Last updated: 6th September 2022

 

Facilitating the sharing and discussion of different ideas and approaches in medicine is the cornerstone of what we do. In providing this service, we are committed to maintaining your trust and confidence with respect to your privacy. 

This privacy notice explains how Wondr Medical (“We, “Us” or “Our”) collects, uses and shares your personal data when you use this Wondr Medical website www.wondrmedical.com (the “Services”). It does not apply to the WondrMedical.net website, a separate privacy notice for which is available here. 

​

1. About our privacy notice 

2. Personal information we collect 

3. How we use your personal data 

4. How we share your personal data 

5. How we store your personal data 

6. Your data protection rights 

7. How to contact us 

​

1. About our Privacy Notice 

 

For the purposes of any data you provide, or that is collected by us for or in connection with the Services, Reachora Limited trading as Wondr Medical will be the controller of your data. 

It is important that you read this Privacy Notice, and any other documents referred to in this Privacy Notice, so that you are fully aware of when and how we are collecting or processing your personal data, and why we are using your data.  

Historic versions of our privacy notices can be obtained by contacting us at hello@wondrmedical.net. 

 

2. Personal information we collect 

 

We collect information about you in multiple ways; directly from you, from third-party sources, and through automated technologies. 

 

2.1 Data you provide to us 

 

Most of the personal information we collect and process is provided to us directly by you when complete surveys, subscribe to our newsletter or correspond with us by phone, e-mail or otherwise. The personal data you provide may include your name, email address, company, timezone, phone number and address. 

​

2.2 Data collected from automated technologies 

 

We use technologies such as: 

​

• Cookies which are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognised by our web server. We use both “session cookies” (which expire and are deleted once you close your browser) and “persistent cookies” (which stay on your device for a specified period of time or until you delete them).  

 

We do not use non-essential cookies (such as those used for analytics or for advertising) on our website.  We only use essential cookies that are strictly necessary to the functioning of our services, such as allowing you to navigate and use key features on our site. As such you will not be able to turn off/ reject these cookies. You can however block cookies through settings on your browser that allow you to refuse the setting of all or some cookies. Please be aware though that if you use your browser settings to block all cookies, including strictly necessary cookies, you may not be able to access all or parts of our site. 

 

How we use data obtained from these cookies is documented in Section 3. 

 

• Web beacons, which let us know whether an email was delivered or opened 

 

2.3 Data from third parties 

 

We collect data from third parties who support us in delivering the services to you. These include: 

• Information about your interactions with our electronic mailings from Mailchimp, such as whether an email was delivered and whether you opened it. 

• Should you choose to complete a survey, we will receive information from our survey providers, like Survey Monkey. This may include personal information that you add to the survey, like your name, email address, speciality, role and also automatically collected information like your IP address.  Please note that Survey Monkey will collect information via cookies when you participate in a survey.  These cookies are used to ensure that the full functionality of their survey service is operational, to ensure that the survey operates appropriately and optimally. For more information, please refer to their Respondent Cookies Notice. 

​

3. How we use your personal data 

 

We will only collect and process your data where we have a lawful basis for doing so. Lawful bases include consent (where you have provided it to us), contract (where processing is necessary for the performance of a contract, such as the Terms of Service under which we provide the Services to you), and “legitimate interests”.  

 

Where we rely on your consent to process your data (such as for newsletter sign-up) you have the right to withdraw or decline your consent at any time. Where we rely on legitimate interests, you have the right to object to those legitimate interests. If you have any questions around what basis we are processing any of your data, please contact us at hello@wondrmedical.net.  

​

  We use your personal data for the following purposes:  

 

• Data you provide via the contact email (sales@wondrmedical.net) is used to communicate with you about the information you have requested. 

• To provide you with regular updates and newsletters where you have opted-in. You can ask us to stop sending you these communications by following the opt-out links in the emails or by contacting us at any time. 

• Where you have opted in to receive newsletters by email, we may also obtain information from our emails to you, such as whether an email has been delivered and if you have opened an email. This helps us develop our Services, improve engagement with our email communications and provide you with better content. 

• We use any feedback that you provide to us, including surveys that you voluntarily complete, to develop our Services in order to encourage better future engagement and to provide you with an improved experience going forward.   

• As part of our effort to keep the Services safe and secure.  

• We use your data to investigate, respond to and resolve complaints from users and for Service issues.  

• To maintain our database of customers on our Salesforce platform.  

     

4. How we share your personal data  

 

4.1 Suppliers and Service Providers 

 

We share data with our suppliers and service providers as necessary to provide the Services, fulfill your request or otherwise on your behalf based on our instructions. We have contracts in place with our data processors. You need to be aware that your personal data may be accessed, stored or processed by these services.  

 

• If you sign up to receive newsletters, your email address will be shared with our email service provider (Mailchimp). 

• We store personal information collected through contact us email options on the website, from newsletter subscriptions, from surveys and other communications, on the Salesforce customer platform. You should be aware that should you provide us with your personal data, you are consenting for Salesforce to use, hold and disclose your personal information as described in their Privacy Policy.  If you do not want your personal data to be used in this manner, then you should not provide us with your personal data. 

 

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.  

 

4.2 With regulators or where required by law 

  

In some circumstances, we may be legally required to use or disclose information about you. We disclose your personal information if we determine that such disclosure is reasonably necessary to comply with the law, protect our or others’ rights, property or interests (such as enforcing our Terms of Service or any other agreements we have with you or others) or prevent fraud or abuse of our Services or our Users. 

 

We may also be required to disclose your personal information in response to lawful requests by public authorities, such as to meet national security or law enforcement requirements. 

 

Where we need to use your personal data for one of the reasons listed above, we will attempt to notify you of such, unless prohibited by law or court order or in case of emergency.  

 

4.3 If we are acquired by another company  

 

We will share your data with other companies as part of any sale process, merger, or change of control of our business. Any entity that purchases us or part of our business will have the right to continue to use your data only in the ways set out in this privacy notice, unless you agree otherwise.  

 

5. How we store your personal data  

 

5.1 Security 

 

Although no service can guarantee complete security, we make reasonable and sincere efforts to protect your personal data by implementing industry standard security safeguards. These administrative, technical and physical safeguards are intended to protect against accidental or unlawful destruction, accidental loss, unauthorised alternation, disclosure or access, misuse and any other unlawful form of processing of the personal information in our possession. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know, and they are subject to a duty of confidentiality.  

 

In the rare event of any reportable data breach, we will notify you as soon as possible and in accordance with regulatory requirements.  

 

5.2 Cross-border transfers of data  

 

We process and store data inside the European Union, the United Kingdom and the United States.  We rely on legally provided mechanisms to lawfully transfer data across borders.  

 

5.3 Data retention  

 

As a general rule, we retain your data as long as we require to provide you with the Services or for the purposes set out in this Privacy Policy. This is subject to your exercise of rights (set out in section 6). 

 

Please note that in the course of providing the Services, we collect and maintain aggregated or anonymised information which we may retain indefinitely. 

​

6. Your data protection rights  

 

You have rights under data protection law, namely the Data Protection Act 2018, GDPR (United Kingdom General Data Protection Regulation)  (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003 and any legislation implemented in connection with these. Where data is processed by a controller or processor established in the European Union or comprises the data of people of the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). These rights include:  

 

• Your right of access – You have the right to ask us for copies of your personal information   

• Your right to rectification – You have the right to ask us to rectify personal data you think is inaccurate and the right to ask us to complete information you think is incomplete.  

• Your right to erasure – You have the right to ask us to delete your personal data in certain circumstances.   

• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstance, e.g. if we have no legal right to keep using it, or if your data is inaccurate or unlawfully held.  

• Your right to data portability – You have the right to ask that we transfer all or specified personal data you gave us to another organisation, or to you, in certain circumstances, by means of a copy of the data provided in a machine-readable form (e.g. pdf, word, excel etc.).  

  

You are not required to pay any charge for exercising your rights. If you wish to exercise any of these rights, please contact us using the details in Section 7. We will respond to your request consistent with applicable laws. To protect your privacy and security, we may require you to verify your identity.   

 

7. How to contact us 

  

Reachora Limited trading as Wondr Medical is a company registered in England (company number 10413945) with its registered office at Finsgate 5-7, Cranwood Street, London, EC1 9EE (collectively referred to as “Wondr Medical, “we”, “our” and “us” in this privacy notice).  

 

If you have any questions about this privacy notice, concerns how your personal data is used by us, or wish to make a request to exercise your legal rights, you can contact our Data Protection Office (DPO) using the details below:  

 

Name: Elisa Voros  

E-mail: dpo@wondrmedical.net 

Registered Address: Finsgate 5-7, Cranwood Street, London. EC1 V9EE  

 

If you are not satisfied with our response, or if we cannot resolve your complaint you can also contact the Information Commissioner’s Office (“ICO”). Please note that nothing prevents you from taking a matter to the ICO before having spoken to us, nor does anything prevent you from taking a matter to the relevant data protection regulator in your home country.  

 

The ICO’s address:              

Information Commissioner’s Office  

Wycliffe House  

Water Lane  

Wilmslow  

Cheshire  

SK9 5AF  

Helpline number: 0303 123 1113  

ICO website: https://www.ico.org.uk  

 

Our EU Representative 

 

If you are based in the EU or EEA, we have appointed a representative based in the EU for you to contact with any issues or queries you may have relating to our processing of your Personal Data. Our EU representative is Mike Morrissey who can be contacted directly by emailing EURep@wondrmedical.net.