Privacy and Information Security Policy
Personal data is:
‘Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;’
‘Special categories’ of personal data (sensitive personal data) relate to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Why does NowMe collect and store data?
NowMe needs to collect, process and store personal information about you in order to deliver efficient and effective services.
Legal basis for processing: We often have two main legal bases for processing personal data.
- Firstly, where it is necessary for the purposes of the legitimate interests pursued by NowMe or by a third party to process your information. We can do that so long as we do not interfere with your fundamental rights or freedoms.
- Secondly, because we have your consent (i.e. agreement) to us processing your personal information. Our Users are asked to give consent when signing up to use NowMe. Under the GDPR, consent is a legal basis for processing personal information. You can withdraw your consent at any time. This is explained further below in the section entitled ‘Your rights under GDPR’.
To process personal data about criminal convictions or offences, we must have both a lawful basis for the processing and either legal authority or official authority for the processing.
The other reasons we can rely upon to process your personal information under GDPR is as follows:
- Where we are under a legal obligation or an obligation under a contract to process/disclose the information.
- Where we need to protect the vital interests (i.e. the health and safety) of you or another person.
- Some personal information is treated as more sensitive. The legal basis for processing these special categories of personal information is more limited. To lawfully process
- special categories of personal data, we must identify a lawful basis for the processing and meet a separate condition for the processing. The basis we can use these are:
- With your consent;
- Where we need to protect the vital interests (i.e. the health and safety) of you or another person;
- Where you have already made your personal information public;
- Where we or another person needs to bring or defend legal claims; and/or
- Substantial public interest grounds
What data we collect from users of the site?
We may collect the following personal data (“User Data”) from you when you use our online services:
- Information you provide by filling in forms on the Site;
- Information you provide when you report a problem with the Site;
- If you contact us, we may keep a record of that correspondence;
- Detailed personal information such as age, sex, date of birth, contact details (telephone numbers and email addresses).
Who the personal information relates to?
We collect and hold personal information about:
- Users – This includes current and former Users who have signed-up to the Site
- Specialists- This includes current and former specialists who have signed-up to the Site
- Others – This includes staff, suppliers, business contacts and professional advisers
We will minimise our holding and use of sensitive categories of personal information.
What use do we make of user data?
We will use your data for the following purposes:
- Provide you with our services
- Dealing with your enquiries and requests
- Administering your account
- Monitoring to improve or tailor the services we provide
- Provide you with information and offers from us that we believe you may find useful or interesting, such as marketing or promotional materials, if you have opted-in to receive such information.
Protecting and sharing information
We sometimes need to share the personal information we process with other organisations.
- We will share your information with carefully selected third parties outside NowMe, including Medical Specialists and Financial Organisations, with whom you have requested specific products and services.
- We may engage third party companies and individuals to facilitate our services, to provide the services on our behalf and to perform services related to administration of the services or the Site (including, without limitation, payment processing, maintenance, hosting and database management services). These third parties may have access to or be provided with your Data only to perform these tasks on our behalf. These third parties that operate through websites may have their own privacy policies. We encourage you to read the privacy policies and other terms of such websites before using the services.
- Our staff only have access to your personal information when and if they need to use it to provide the service to you.
- NowMe may make User Data available to successors in title to our business.
- We will also disclose information as required by law.
How long do we hold your data for?
In most cases, we hold the majority of your data for up to  years.
Your rights under GDPR
- Right to be informed: We will provide you with a privacy notice to tell you how we are using your personal data.
- Right of access: You have the right to obtain access to your own personal data at any time so you are aware of and can verify the lawfulness of processing. Information will be supplied within one month of receipt of the request. This can be extended by a further two months where requests are complex or numerous. This will be provided free of charge unless you ask for multiple copies or the request is manifestly unfounded or excessive. We can also refuse your request if it adversely affect the rights and freedoms of others or is manifestly unfounded or excessive. You can make a subject access request by contacting [email protected]
- Right of rectification: You have the right to have your personal data rectified if it is inaccurate or incomplete. If we have disclosed this to third parties, we will tell you if this is appropriate and we will inform them of the rectification where possible. We must respond within one month, extendable by two months where the request for rectification is complex.
- Right of erasure: You have the right to request the deletion of personal data where there is no compelling reason for its continued processing or if we are processing it in an unlawful manner – for example if we are using it for a different purpose than originally stated.
- Right to restrict data processing: Under certain circumstances, you have a right to ‘block’ or suppress processing of personal data. When processing is restricted, we are permitted to store the personal data, but not further process it. We can retain just enough information about you to ensure that the restriction is respected in future.
- Right to data portability: You can obtain and reuse your personal data for your own purposes across different services. This right applies where the processing is based on your consent or for the performance of a contract; and when processing is carried out by automated means.
- Right to object: You have the right to object to:
- Processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
- Direct marketing (including profiling); and
- Processing for purposes of scientific/historical research and statistics.
If we process personal data for the performance of a legal task or our organisation’s legitimate interests, you must have an objection on “grounds relating to your particular situation”.
We must stop processing the personal data unless:
- We can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or
- The processing is for the establishment, exercise or defense of legal claims.
- The Personal Data is essential to the continuation of the service or is in the ‘vital interests’ of the user.
- Right to Withdraw Consent at any Time: You may contact NowMe to request this. Although we may not be able to accept your request for certain types of data, please contact us if you wish to discuss this further.
- Right to complain: about any matter relating to our service, including how we use your personal data:
While it is unlikely, we may be required to disclose your User Data by a court order or to comply with other legal requirements. We will use all reasonable endeavours to notify you before we do so, unless we are legally restricted from doing so.
No commercial disposal to third parties
We will not sell, rent, distribute or otherwise make User Data commercially available to any third party without your prior permission.
Storage of user data
It may sometimes be necessary to transfer personal information overseas. When this is needed, information is only shared within the European Economic Area (EEA). Any transfers made will be in full compliance with all aspects of the data protection act.
- What is a cookie: A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
- Essential cookies. These are cookies that are required for the operation of our website
- Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it.
- Functionality cookies. These are used to recognise you when you return to our website.
- Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed.
- Managing Cookies: You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Site.
Given that the internet is a global environment, using the internet to collect and process User Data necessarily involves the transmission of data on an international basis. Therefore, by browsing our Site and communicating electronically with us, you acknowledge and agree to our processing of your User Data in this way.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your User Data, we cannot guarantee the security of your User Data transmitted to our Site; any transmission is at your own risk. Once we have received your User Data we will use procedures and security features to try to prevent unauthorised access.
Please contact us at the following email address with any questions and/or complaints about our service to you [email protected].
NowMe Infinity Limited registered offices are:
NowMe Infinity Limited,
34 Kings Orchard,