私隱政策

Privacy Notice

1. About this notice

Your privacy and data security are important to us. This privacy notice sets out how and why PatientView collects and stores personal data, and what rights you have. We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the EU’s General Data Protection Regulation (GDPR), and the Data Protection Act 2018.

We have written this notice to be as clear as we can. If anything is unclear, please contact us using the details in section 11.

It covers:

• Why and for what purposes we collect and use personal information

• What kinds and sources of personal information we collect

• Who we share personal information with

• How long we retain personal information for

• How and to whom we might transfer personal information

• The legal rights of anyone whose personal information we hold

• Other relevant information, including how to contact us

When you use this website and/or provide us with personal information you are agreeing that we may use your personal information for the purposes set out in this privacy notice.

This privacy notice was last updated 7th October 2026 and replaces and supersedes all previous privacy notices.

2. Who we are

PatientView Limited ("PatientView", "we", "us") is registered in England, company number 3944382, at One Fleet Place, London EC4M 7WS, UK. We are the data controller of the personal data described in this notice and are registered with the Information Commissioner's Office (ICO), registration number Z7133076.

Our overall purpose in processing personal data is to help the voices of patient and carer groups be heard and considered in healthcare decision-making.

Contact for privacy matters: info@patient-view.com, +44 (0)7960 855 019.

3. Why and for what purposes we collect personal data

We collect, store and use your personal information as set out in this section. The overarching purpose of processing your personal data is to help the voices of patient and carer groups to be heard and considered in healthcare decision-making. Your information may be shared with members of our group and some third parties as is set out in more detail below in the ‘Who we might share personal information with’ section.

The table below sets out each category of personal data, where it comes from, what we use it for, and the lawful basis we rely on under UK GDPR Article 6.

Category of data and source	What we use it for	Lawful basis
Contact and role details (name, contact details, organisation, role), provided by you as a representative of a patient group or organisation, or if you want our reports	Networking with you; inviting you to take part in surveys; sending press releases; offering and sending copies of our reports; providing information you request; notifying you of changes to our service; inviting you to events related to our work	Legitimate interests (building and maintaining relationships with patient organisations, partners and others in the health sector). Where you ask us for something specific, such as a report, we also rely on taking steps at your request.
Marketing and engagement (what we have sent you, whether you opened emails or clicked links, your subscription preferences)	Developing and improving our services; identifying topics that may interest you; personalising our communications and reports; statistical analysis and research	Legitimate interests (understanding how our services are used and making them more relevant to you). Consent where required for electronic marketing (see section 8).
Communications with us (in person, by email, phone, social media or any other route, including your contact details and the content of our messages)	Answering your questions or concerns; monitoring communications for quality and training; developing and improving our services	Legitimate interests (understanding and responding to feedback and improving our services). Taking steps at your request, where you have asked us for something.
Website use data (device information such as operating system and device identifiers, browser and hardware settings, date and time of requests, pages visited, search terms used and IP address). If you accept analytics cookies, this also includes online identifiers such as cookie IDs, information about how you interact with our pages, and your approximate location, collected through Google Analytics 4.	Providing our website; identifying technical issues; improving your experience; monitoring and analysing how the website is used, including through Google Analytics 4.	Consent for analytics cookies and similar technologies, including Google Analytics. Legitimate interests for other website use data (understanding how our website is used).
Information from public sources (media coverage and social media platforms such as LinkedIn)	Networking with you; keeping our records up to date; maintaining awareness of the sector; tracking whether third parties use our research	Legitimate interests (keeping our records accurate and understanding how our research is used).
Survey responses	Producing health sector reports; tracking changing attitudes and running year-on-year benchmark studies	Consent / legitimate interests: confirm per survey. Anonymised results are used in reports.
Legal and regulatory information (as needed)	Complying with legal, accounting and reporting requirements; responding to reasonable requests from law enforcement or regulators; establishing, exercising or defending legal claims	Legal obligation; legitimate interests (defending legal claims).

Legitimate interests. Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights and freedoms and concluded that they are not. You can ask us for more information about this assessment, and you have the right to object (see section 7).

Consent. Where we rely on consent, you can withdraw it at any time by contacting us or, for marketing emails, using the unsubscribe link. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

Providing your data. You are not generally required to give us personal data. If you choose not to provide the contact details we need, we may be unable to send you reports, invitations or other services you have asked for. In some cases we must collect information to meet a legal requirement, and we may be unable to provide a service if it is not provided.

Special category data. We do not intend to collect special category data (such as health information) about individuals. If you share it with us unprompted, please tell us if you would like it deleted.

We use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use our websites. We have not enabled Google Signals or Google's advertising features, so we do not use Google Analytics for advertising or remarketing, or to link your activity across different devices.

4. Who we share personal data with

We share personal data only where necessary, and only with the following:

• Survey and email service providers. To run our surveys and send our communications, we use Campaign Monitor and SurveyMonkey (Momentive), acting as our processors. Their privacy information is at campaignmonitor.com/trust/gdpr-compliance and surveymonkey.com/mp/gdpr.
• Other suppliers and service providers, e.g. IT, hosting and professional advisers. They must meet our standards for processing and security, may use your data only to perform their function for us, and may not use it for their own purposes.
• Google (website analytics). If you accept analytics cookies, Google processes website use data on our behalf through Google Analytics 4, acting as our processor under Google's data processing terms. Google may not use this data for its own purposes except as those terms permit.
• Health-related partner organisations (for example patient advocates, pharma and medtech companies, industry associations, health foundations, charities or government agencies) where we carry out research with or for them. We do not share personal data with them unless you give explicit consent, clearly requested at the start of the relevant project. They receive only anonymised results that contain no personal identifiable data.
• Authorities and legal advisers, if we are required to by law, by a regulatory code we follow or by a public or regulatory authority (for example the police), or to establish, exercise or defend legal claims.
• Buyers or successors. If we discuss or carry out a sale, reorganisation or transfer of all or part of our business, your data may be passed to prospective or actual buyers, under suitable confidentiality terms, so that they can continue to provide services to you. We consider this unlikely in the foreseeable future.

Anonymised and aggregated information (for example in our health sector reports) is no longer personal data and may be shared more widely.

5. Where your data is stored and international transfers

Our servers are located in the UK. Some of our service providers, including Campaign Monitor, SurveyMonkey and Google (Google Analytics) may process data outside the UK, including in [the United States.

Where personal data is transferred outside the UK, we ensure it is protected by an appropriate safeguard. Depending on the provider, this is the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) where the recipient is certified / the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses / UK adequacy regulations: confirm for each provider. You can contact us for more information about these safeguards.

6. How long do we keep your information?

We will keep your information for as long as it is reasonably necessary for the purposes in this notice, and then delete or anonymise it.

It will depend on factors such as whether to the best of our knowledge you remain in your position at your organisation, whether you have interacted with recent communications or if you purchase a report from us, whether you have any outstanding purchases with us. We will also routinely refresh our information to ensure we keep it up-to-date. We will also retain your information as necessary to comply with legal, accounting or reporting requirements.

All survey data, identifiable or anonymous, are stored in our database, so we can track changing attitudes and conduct benchmark studies year on year, where relevant. Personal identifiable data can be deleted at your request, but we may retain an anonymised version of the data for ongoing research purposes.  For more information on requesting deletion of your personal data, please see the ‘Your rights’ section below.

Data	How long we keep it
Contact and role details (including marketing preferences)	While you remain in your role and the details are current, and for [7 years] after your last interaction with us, unless you ask us to delete them sooner
Records of communications with us	7 years from the last communication
Report purchase and accounting records	7 years to meet legal and accounting requirements
Website use data	14 months, matching our Google Analytics 4 data retention setting
Survey data	Personal identifiers are deleted on request or when no longer needed. We may keep an anonymised version indefinitely for year-on-year benchmark research.
Data relevant to an investigation, dispute or legal claim	Until the matter is fully resolved

We routinely review and refresh our information to keep it accurate and up to date.

7. Your rights as the data subject

You have certain rights in relation to your information. The availability of these rights and the ways in which you can use them are set out below in more detail.  Some of these rights will only apply in certain circumstances. If you would like to exercise, or discuss, any of these rights, please contact us at info@patient-view.com.

• Be informed: to be told how we use your data (this notice).
• Access: to ask whether we process your data and to receive a copy and other information about it.
• Rectification: to have inaccurate or incomplete data corrected.
• Erasure: to ask us to delete your data in certain circumstances. We may refuse where, for example, we need it to comply with the law or for legal claims.
• Restriction: to ask us to pause processing, for example while you challenge accuracy.
• Data portability: to request that certain data you gave us be provided to you or transferred to another organisation in a structured, commonly used, machine-readable format.
• Object: to object to processing based on legitimate interests, and to object to direct marketing at any time. We will stop direct marketing immediately. For other objections, we may continue where we have compelling legitimate grounds or where the data is needed for legal claims.
• Withdraw consent: at any time, where we rely on consent.
• Automated decisions and profiling: we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

If you want to exercise any of these rights, please email info@patient-view.com.

You also have a right to lodge a complaint with a supervisory authority, in particular in the Member State in the European Union where you are habitually resident where we are based or where an alleged infringement of Data Protection law has taken place. In the UK you can make a complaint to the Information Commissioner’s Office (Tel: 0303 123 1113 or at www.ico.org.uk).

8. Direct Marketing

We may use the information you give us for direct marketing purposes to provide updates; newsletters; events; or other communications that we think may interest you. Where required by law, we will only do this with your consent. As a result of the rights above, you can opt out of receiving such communications at any time. You can do this by clicking on the “unsubscribe” link included at the end of any marketing email we send to you, or by contacting info@patient-view.com and requesting the same.

9. Cookies and similar technologies

Our websites (www.patient-view.com, www.patientview.com) use cookies and similar technologies, including Google Analytics 4, a web analytics service provided by Google, to understand how visitors use our websites. Google Analytics cookies (such as _ga and _ga_LGWK8WW44Y) are only set if you accept them. We have not enabled Google Signals or Google's advertising features, so we do not use Google Analytics for advertising or remarketing, or to link your activity across different devices. Our emails may also use tracking pixels and link tracking to tell us whether you opened an email or clicked a link. Except for cookies strictly necessary to run the website, we only use these technologies with your consent where the law requires. You can change your cookie choices at any time through cookie settings or your browser settings.

10. Links to other websites, data security and children

Links to other websites. Our websites, newsletters and emails may contain links to third-party sites, such as partner networks, advertisers and social networks. This notice does not cover those sites, and we are not responsible for how they handle your data. Please read their own privacy notices.

Data security. We use physical, technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. If a personal data breach occurs, we will assess the risk to individuals. If it is likely to result in a risk to your rights and freedoms we will notify the ICO, and if the risk is high we will also notify the people affected.

Children. Our services are not intended for anyone under 18, and we do not knowingly collect information from children. If you are under 18, please do not give us any personal data. If you believe we hold information about someone under 18, please contact us and we will delete it.

11. How to contact us

You can contact us by phone on +44-(0)7960-855-019, or by email: info@patient-view.com, or via the ‘Contact Us’ page of our websites: www.patient-view.com, www.patientview.com.

12. Changes to this privacy notice

If we change anything important about this notice, we will highlight those changes at the top of the notice and provide a prominent link to it for a reasonable length of time following the change and prior to the change taking effect. The date at the top shows when it was last updated.