Privacy notice
This notice explains what personal data HOME Radiology collects, why, and what rights you have.
Last updated: [DATE]
Who we are
HOME Radiology is a trading name of BLACKJACKET Ltd, company number [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS]. We are the controller for the personal data described in this notice. We are registered with the Information Commissioner's Office (ICO), registration number [ICO REGISTRATION NUMBER].
To contact us about your data, email hello@homeradiology.co.uk.
What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Name, email, phone, organisation and message from the enquiry form | To reply to your enquiry and arrange a call | Legitimate interests |
| Your newsletter choice | To send our monthly newsletter | Consent, which you can withdraw at any time |
| Client contact, billing and contract details | To provide our services, invoice and collect payment | Contract, and legal obligation for tax records |
| Device and support records | To support and secure the equipment we manage for you | Contract |
| Anonymous page-view statistics | To understand which pages are useful | Legitimate interests. No cookies or personal identifiers are used |
Patient data
When we support a workstation used for reporting, we may be able to access patient data held by your reporting provider. In that case, we act as a processor under a written data processing agreement, and we access data only as needed to deliver support.
Who we share data with
We use these service providers to run the business. Each one processes data on our instructions under a contract.
- HubSpot: customer records, enquiry forms and email
- Microsoft: email, documents and booking
- Xero: accounting and invoices
- GoCardless: Direct Debit payments
- Our remote support and monitoring platform: device management and support tickets
- Cloudflare: website hosting and anonymous analytics
Some of these providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to protect it.
How long we keep data
- Enquiries that don't become clients: [PERIOD, for example 24 months] after our last contact
- Client records and invoices: 6 years after the end of the financial year they relate to
- Newsletter subscribers: until you unsubscribe
Your rights
You can ask to see, correct or delete your data, to restrict or object to how we use it, or to receive a copy in a portable format. You can withdraw consent at any time. Email us to make a request. We reply within one month.
If you're unhappy with how we handle your data, you can complain to the ICO at ico.org.uk.
Draft for review. Have a solicitor or data protection adviser check this notice before you publish it, and confirm the retention periods.