Privacy

HBOT IOM is committed to protecting the privacy of everyone who uses our services; as employees and volunteers, patients and carers, contractors or suppliers and anyone who supports us through fundraising activities or donations. This notice will explain what data we collect and process this, and should there be a need to share it with a third party why we would so this.

We will only process personal confidential data in accordance with the Data Protection Act 2002/General Data Protection Regulation (Isle of Man) Order 2018, the Common Law Duty of Confidentiality and the Human Rights Act 1998.

We may collect and process the following data about you, some of which will include “personal data” and /or “sensitive personal data”as defined by the Data protection Act 2018 as amended (the “Act”). Personal data is information that might allow you to be identifies, such as you name, address, date of birth, phone number, payment credit card details, photo or video image or voice recording.

If you have any questions about our privacy notice or our systems of data processing in general, please contact our Data Protection Officer at hbotiomltd@gmail.com. Tel: 01624 626394.

Who are we?

We are HBOT IOM a registered company and charity operating in the Isle of Man.

Company Number: 132838C

Charity Number: 1274

HBOT IOM is in the process of registering as a data controller for the purposes of the Data Protection Act /General Data Protection Regulation (Isle of Man) Order 2018.

All data controllers must notify the IOM Information Commissioner’s Office (ICO) of all personal information processing activities.

Our ICO Data Protection Register number is R001481 and our entry can be found in the Data Protection Register on the Information Commissioner’s Office website. https://www.inforights.im/

The Data Protection Officer (DPO) is responsible for:

Monitoring compliance with data protection laws, our data protection policies , privacy awareness-raising, training and audits.

Provide advice and information to HBOT IOM directors on our data protection obligations.

A single point of contact for our directors, members, employees, our patients, service users, volunteers, fundraisers, business contacts, (or any other individuals) and the ICO of the Isle of Man.

How does HBOT IOM collect your personal information?

IN events, fundraising and also charitable donors/Givers

The personal information we collect might include name, address, email address, telephone numbers, date of birth, I.P. address, credit card details and bank account details (for setting up regular standing orders or direct debit or payment information). When coordinating events we may need to obtain your next of kin details, if this is the case then you will be made aware and consent will be required. (Please request a form to be sent to you).

Volunteering with us        

If you volunteer with us we will need to collect information such as your name,address, contact details email, and date of birth plus next of kin for emergency reasons. (Please request a form to be sent to you).

Patient information

If you use our clinical services we will need to collect information such as your name, age, address, gender, and possibly sensitive personal information concerning your health. In order to provide complete care we may also collect some information about family members and carers in case of emergency. (You will receive an in depth privacy notice and gdpr consent form at the time of first contact with us).

Working for us

If you apply for or take a job with us, we will store your contact information, bank details, and keep records of your employment history. (You will be required to complete a consent form as part of the employment process).

Closed Circuit Television (CCTV)

You may appear in still images or video footage using Closed Circuit Television (CCTV) that is used on site for security purposes and hyperbaric operational requirements.

What information is used by HBOT IOM

We may use your personal information for:

• Dealing with your enquiries, referrals and complaints
• Processing your donations and orders for merchandise
• Providing you with information about our work, activities, events and services, only if consent given
• Complying with our legal obligations, policies and procedures
• Providing and personalising our services
• Administering patient/volunteer/donation/employee/records
• Fundraising administration

Consent on how personal information is used

We will give you an explanation of the purpose for which personal information is collected and processed.

Where necessary, we will also ask for consent to be given by a positive opt in choice, with the requirements of completing our form.

Sufficient information will be provided for an informed choice to be made. The personal data will not be used for any extra purpose without additional consent being obtained. It will also be made clear how consent can be withdrawn.

Data Security

We have in place physical, electronic and managerial procedures to safeguard and secure the personal information we collect.

Our data processors have provided statements on how they keep your personal data safe and secure in compliance with the General Data Protection Regulation (GDPR) 2018.

All our employee, volunteers and data processors, who have access to, and are associated with the processing of personal data, are legally obliged to respect the confidentiality of the personal data we hold.

No sharing of personal information

Your information and personal data is not disclosed, sold or shared with any other organisations. In the case of a patient, there is data sharing of clinical data with other health care staff such as Isle of Man GPs and Consultants and possibly district nurses who are also involved in your care of your medical condition.

Some information is processed by our Internet Service Provider, but it is only held and processed for our use and held on our dedicated password protected computer on our behalf.

Retention of data

We will follow national guidance and best practice and all retention periods will vary according to the nature of our business.

Our Retention of Records policy can be requested from hbotiomltd@gmail.com

Our Examples

Patient Records                                                 8 Years

Financial Records                                               7 years

Declaration of gifts                                            6 years

Legacy Letters or copies of wills                         14 years

Duty Rosters                                                     4 Years

Incident and Accident                                        3 years

Donation letter/Event Forms/ Tombola Tickets    7 years

Your rights

The GDPR includes the following rights for individuals:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• The right not to be subject to automated decision-making including profiling.

Rights to access, remove or correct personal information

You have the right to request a copy of the information that we hold about you and this is free of charge. If you would like to do this, please complete our “Subject Access Request Form”.

You also have the right for personal data to be erased. The right to erasure is also known as ‘the right to be forgotten’. Individuals can make a request for erasure by contacting hbotiomltd@gmail.com

Using our website

If you use our website, we will store data in the following ways;

Logs & Tracking

Whenever you request a page through your browser data such as:

• your IP address
• browser and version
• operating system
• time and date
• the site from which you came is stored in a log file and/or database. This information is only used for:

• Website and system administration
• Research and development
• Anonymous user analysis

Cookies

Cookies are used to provide certain features or functionality within a website. There are a number of different types of website cookie. Below we outline the cookies used on our website.

Personalisation Cookies

This website does not make use of any cookies used to personalise your user experience.

Analytic​s Cookies

• Google - https://tools.google.com/dlpage/gaoptout

• Facebook - https://www.facebook.com/policy.php
• AddThis - http://www.addthis.com/privacy/privacy-policy
• Twitter - https://twitter.com/en/privacy
• PayPal - https://www.paypal.com/us/webapps/mpp/ua/privacy-full
• JustGiving - https://www.justgiving.com/info/privacy-policy-versions/privacy-policy-v22

Ad Management

How to contact us

Please contact us if you have any questions about our privacy notice and policy at HBOT IOM:

Data Protection Officer
Hyperbaric Medicine Facility
Scholl Building,
Peel Road,
Douglas,
Isle of Man.
IM1 5ED

Telephone: +44 1624 626394 

Email: hbotiomltd@gmail.com