Website and direct marketing — privacy policy

This privacy policy gives information on how we collect and process personal data, including any data you may provide through our website. Our website is not intended for children and we do not knowingly collect data relating to children.

Please read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them.

The Virti Group is made up of VirtiHealth Ltd and Virti Inc. This privacy policy is issued on behalf of the Virti Group, so when we mention “we”, “us” or “our” in this privacy policy, we are referring to the relevant company in the Virti Group responsible for processing your data. VirtiHealth Ltd is the controller and is responsible for this website.

We have appointed a data privacy manager who is responsible for dealing with questions about our privacy policy. You can contact our data privacy manager at privacy@virti.com or by writing to VirtiHealth Ltd, 1 Brassey Road, Old Potts Way, Shrewsbury, Shropshire, SY3 7FA.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We collect, use, store and transfer different kinds of personal data about you, grouped as: identity data, contact data, technical data, usage data, marketing and communications data, and profile data.

We do not collect any Special Categories of Personal Data about you. Nor do we collect any information about criminal convictions and offences.

We use different methods to collect data from and about you, including direct interactions (when you fill in a form or correspond with us), automated technologies (cookies, server logs and similar tools when you visit our website), and third parties or publicly available sources (analytics, advertising and search providers).

We will only use your personal data when the law allows us to. Most commonly we will use your personal data to perform a contract with you, where it is necessary for our legitimate interests, or where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications.

We may share your personal data with other companies in the Virti Group and selected third parties — such as service providers, professional advisers, regulators and other authorities — for the purposes set out in this policy. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

We may transfer your personal data outside of the UK or European Economic Area. Where we do, we ensure a similar degree of protection by using specific contracts approved for use in the UK and EEA, or by transferring to countries deemed to provide an adequate level of protection.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

Under data protection laws you have rights in relation to your personal data, including the right to request access, correction, erasure, or restriction of processing, the right to object to processing, the right to data portability, and the right to withdraw consent.

If you wish to exercise any of these rights, please contact our data privacy manager at privacy@virti.com.