Plain English Summary
Compass Lifestyle Medicine is committed to protecting your privacy and taking care with your personal data.
As a data controller we are responsible for how your information is used and explaining that to you. We use information systems to store the information we hold about you. These include:
- CHIPHub Litmos learning management system
- Wellbeing 360TM Online Health Assessment
What information we process
We collect personal information from you when you participate in our online health improvement programmes. The information we collect may include, but is not limited to, items such as your height, weight, blood pressure, glucose and information on your health, exercise and lifestyle.
Why we process your information
The lawful basis for processing your personal data is on the basis of your consent. You are not under any obligation to provide us with your personal data, and you can withdraw your consent to your personal data being processed in this way at any time by contacting us, using the contact details below.
If you withdraw your consent, this does not mean that our processing of your personal data before you withdrew your consent was unlawful.
We regularly produce anonymised data and share this with partners, stakeholders and clients. Extra care will be taken to ensure your identity is protected.
Where we process your information
We store and process your data with care and take put in place appropriate technical and security measures in place to protect it.
We may transfer anonymised information to our partner companies (Lifestyle Medicine Institute based in US and Vitality Works based in Australia). This will be used to audit the results of CHIP and further develop and enhance the program. This will be done on an anonymised basis. No personally identifiable data is passed to either of these partners, although the results of certain assessments, as well as information such as your age, gender and other health factors will be provided (on an entirely anonymous basis).
Sharing your personal information
We will not share your information with any third parties for the purposes of direct marketing, or for any other third party for any other purpose (other than as set out below). You may agree to share your information with your doctor or the facilitator of our programme, but this is your choice and is not required in order to participate in the programme.
We use data processors who are third parties who provide elements of our services for us. We have contracts in place with our data processors. This means that they cannot do anything with your personal information unless we have instructed them to do it. This also means that they are held to the standards required by European data protection legislation (GDPR). They will hold your personal information securely and retain it for the period we instruct. However, please note that the personal information provided will never identify you as an individual (it is anonymised).
We have undertaken due diligence of our partner companies to ensure that they comply with GDPR.
Keeping your personal information
Your information will be deleted from our systems as detailed in our Records Management Policy.
The information you provide will be managed as required by GDPR. The rights available to you depend on our reason for processing your information
You have the right to:
- Ask for copies of your personal information, commonly known as making ‘Subject Access Requests’. This right always applies
- Request your information to be changed if you believe it inaccurate or incomplete
- Ask us to erase your personal information in certain circumstances
- Ask us to restrict the processing of your information in certain circumstances
- Object to the processing of your information. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it if are able to process your information because the process forms part of our public tasks, or is in our legitimate interests
There are some exceptions to these rights, for instance if we have a legal obligation to retain your personal information so we cannot delete it. All requests to exercise your rights will be considered on a case by case depending on the circumstances.
How do we look after your information?
We are committed to ensuring that your information remains secure. The information provided is stored on secure databases in secured locations. We take the necessary steps to ensure that our infrastructure performs as expected by running health checks on these systems.
Data Protection Impact Assessments
Compass Lifestyle Medicine uses data protection impact assessments to help us systematically and comprehensively analyse our data processing and help us to identify and minimise data protection risks. These are reviewed regularly as part of our information governance processes.
Our contact details
There are many ways you can contact us, including by phone, email and post.
Queries about this privacy notice should be directed towards our Data Protection Officer.
Our Data Protection Officer function is provided by IG Health. You can contact our Data Protection Officer, Umar Sabat at Umar.firstname.lastname@example.org or via our postal address on the contact us page. Please mark your correspondence for the attention of the Data Protection Officer.
Terms & Conditions of Compass Lifestyle Medicine CIC
Last updated May 2020.
- ACCEPTANCE OF TERMS
This Limited License and Terms and Conditions of Use (the “Agreement”) is an agreement between Compass Lifestyle Medicine CIC, a private company limited by guarantee without share capital, registered in England and Wales under company number 11473290, and with registered address at King Street House, 15 Upper King Street, Norwich, Norfolk NR3 1RB (“CLM”) and the end user recipient (“you” or “your”) of the CHIPHUB through which this Agreement is accessed. You have registered to participate in the Complete Health Improvement Programme (“CHIP”), a proprietary programme of Lifestyle Medicine Institute LLC (“LMI”), which has been licensed to CLM, and is being administered and delivered to you by CLM.
This Agreement governs your access to and use of the contents and functionality offered on or through the CHIPHUB and any websites and applications provided by CLM (collectively, the “Services”), together with any educational, instructional, operational, technical and other materials, videos, manuals, documentation and guides, in any medium, which are owned or licensed by LMI and made available to you by CLM in relation to CHIP (collectively, “CHIP Materials”).
By using the Services or otherwise accepting this Agreement, you represent, warrant and agree that you have the right, power, and authority to create a binding agreement with CLM and fulfill your obligations under this Agreement and will abide by all applicable laws and regulations with respect to your use of the Services and CHIP Materials.
- LICENSE GRANT; RESTRICTIONS
CLM hereby grants you a personal (use only), revocable, limited, non-exclusive, and nontransferable license to access and use CHIP Materials in connection with your participation in CHIP in the form or format made available by CLM.
This Agreement permits you to use the Services and CHIP Materials for your personal, non-commercial use only. You may not copy, transfer, reproduce, distribute, modify, create derivative works of, publicly display, publicly perform, republish or disseminate any part of the Services or CHIP Materials, and you may not remove or alter any or intellectual property notice contained in or on the CHIP Materials. All names, logos, and icons identifying LMI and its programmes, products, and services, including CHIP are proprietary trademarks and/or service marks of LMI, and any use of such marks, including, without limitation, as account identifiers or as domain names, without the express written permission of LMI or CLM is strictly prohibited. Though you have no right to modify or create derivative versions of the CHIP Materials, LMI shall own, and you hereby irrevocably assign to LMI without further action by you or LMI, any and all new versions, updates, upgrades, modifications or improvements to the CHIP Materials, or any portion thereof, whether conceived, suggested, created, developed, or implemented by or on behalf of LMI or you.
3. ACCESSING SERVICES; DELIVERY OF INFORMATION
To begin using the Services and participate in CHIP, CLM requires that you provide certain information and fully complete the registration and data submission procedures prompted by the Services in order to create a CHIP Health account. You agree to: (a) provide true, accurate, current, and complete registration information about yourself as prompted by the Services; and (b) maintain and promptly update the registration information to keep it true, accurate, current, and complete. If CLM has a reasonable basis to suspect that any such information or your expressions of consent are untrue, inaccurate, not current, or incomplete, CLM has the right to suspend or terminate your account and deny your use of the Services.
You are responsible for maintaining the confidentiality of your password and account and are fully responsible for all activities that occur under your password or account. You agree to immediately notify LMI of any unauthorised use of your password or account or any other breach of security.
CLM may use information you submit to the Services to:
- Operate and administer the Services (including all software, websites, and applications) to support CHIP;
- Perform certain permitted management and administration functions, including protection of its security systems or analysis of aggregated or de-identified data; and
- Comply with the law, such as responding to subpoenas and search warrants.
CLM is committed to protecting your personal information and employs a variety of security technologies and procedures to help protect your data from unauthorised access, use and disclosure. This includes, but is not limited to, storing personally identifiable information on secure services, using robust encryption technology, and requiring comprehensive security training for CLM’s employees and workforce members.
In order to provide the Service to you, we may need to provide you with certain communications. If you do not wish us to communicate with you in this way, in order to perform our obligations under this Agreement, please do not proceed to use the Service. This does not apply to marketing communications, which you must actively opt-in to receive.
- CONFIDENTIALITY & NON-DISCLOSURE
You understand that as part of your participation in CHIP, you may be provided with confidential information relating to CLM, CHIP, participants in CHIP, or other materials related to CHIP, including, without limitation, the CHIP Materials, CHIP training sessions and any other nonpublic data and information which relate to CHIP and/or CLM (collectively, the “Confidential Information”). In consideration of disclosure of the above-described Confidential Information to you, you agree to safeguard and keep confidential the Confidential Information and not to disclose such Confidential Information to any third party. You further agree to use such Confidential Information only in your participation in CHIP and in furtherance of the purposes of this Agreement and not for the benefit of any third party. You further agree that all documents, samples and other information in tangible form relating to the Confidential Information will be returned to CLM upon request. Except as expressly provided by this Agreement, this Agreement shall not be construed as granting or promising to grant any further license under the Confidential Information to you or to any other party.
- MEDICAL WAIVER AND RELEASE
CHIP is a wellness and health support programme that is intended to help participants improve their overall health. The content of CHIP is not intended to replace medical advice, and CLM and its employees, representatives and contractors do not, directly or indirectly, practice medicine, provide medical care or treatment, or render medical advice or services. You should consult your doctor prior to enrolling with CHIP, or if you have any questions or concerns about your participation in the Programme, a specific medical condition (including preexisting conditions), or medical treatment. CLM expressly disclaims responsibility, and shall have no liability, for any damages, loss, injury, or liability whatsoever suffered as a result from your reliance on the information accessed through the Services, or otherwise from your participation in CHIP. Nothing in this Agreement shall limit CLM’s liability for death or personal injury caused by negligence.
CLM does not endorse specifically any test, treatment, doctor, medical advice, product, procedure, opinion or other information referenced through the Services. Never disregard professional medical advice or delay in seeking it because of anything you see or read or hear through the Services. CLM does not endorse, warranty, or guarantee positive outcomes or the effectiveness of CHIP or any doctor, medical professional, tool, product, service, process, or methodology accessed through the Services.
If you think you may have a medical emergency, call your doctor or 999 immediately. Reliance on any information provided by CLM, its employees, or others appearing on the Services is solely at your own risk.
- BLOOD TESTING
Finger prick blood tests/venous blood draws performed as part of CHIP are conducted by third party laboratories contracted by CLM. By providing your blood sample as a part of CHIP, you grant permission to these laboratories to perform testing on the sample and understand that the laboratories will either send you the results directly or upload the results directly to the Services’ application for your review and for the review of those you specifically authorize. As a part of the blood testing, you may be asked to authorize the release of your results to the Services’ application or CLM in order to comply with applicable law. You understand that failures or errors may occur in the laboratory testing process and you may be asked to resubmit a sample or may not be able to receive results. CLM does not make any warranty or representation related to the laboratory testing services, and you hereby indemnify and hold harmless CLM for any and all liability that may arise directly or indirectly in connection with laboratory testing and/or receipt of your blood test results.
You understand that CLM cannot and does not guarantee or warrant that files available for downloading from the internet or the Services will be free of viruses or other destructive code. You are responsible for implementing sufficient procedures and checkpoints to satisfy your particular requirements for anti-virus protection and accuracy of data input and output, and for maintaining a means external to our site for any reconstruction of any lost data.
CLM WILL NOT BE LIABLE FOR ANY LOSS OR DAMAGE CAUSED BY A DISTRIBUTED DENIAL-OF-SERVICE ATTACK, VIRUSES OR OTHER TECHNOLOGICALLY HARMFUL MATERIAL THAT MAY INFECT YOUR COMPUTER EQUIPMENT, COMPUTER PROGRAMMES, DATA OR OTHER PROPRIETARY MATERIAL DUE TO YOUR USE OF THE SERVICES OR TO YOUR DOWNLOADING OF ANY MATERIAL THROUGH THE SERVICES.
YOUR USE OF THE SERVICES AND CHIP MATERIALS AND YOUR PARTICIPATION IN CHIP ARE AT YOUR OWN RISK. THE SERVICES AND CHIP MATERIALS ARE PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. CLM HEREBY DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT, AND FITNESS FOR PARTICULAR PURPOSE. CLM MAKES NO WARRANTY OR REPRESENTATION WITH RESPECT TO THE COMPLETENESS, SECURITY, RELIABILITY, QUALITY, ACCURACY OR AVAILABILITY OF THE SERVICES OR CHIP MATERIALS, OR THAT THE SERVICES AND CHIP MATERIALS WILL BE ACCURATE, RELIABLE, ERROR-FREE OR UNINTERRUPTED.
- LIMITATION OF LIABILITY
IN NO EVENT WILL CLM, ITS AFFILIATES OR THEIR LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS OR DIRECTORS BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL OR PUNITIVE DAMAGES ARISING OUT OF OR IN CONNECTION WITH YOUR USE, OR INABILITY TO USE, THE SERVICES OR CHIP MATERIALS, WHETHER CAUSED BY TORT (INCLUDING NEGLIGENCE), BREACH OF CONTRACT OR OTHERWISE, EVEN IF FORESEEABLE.
TO THE FULLEST EXTENT ALLOWED BY LAW, IN NO EVENT WILL THE COLLECTIVE LIABILITY OF CLM, ITS AFFILIATES OR THEIR LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS OR DIRECTORS (REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT, OR OTHERWISE) EXCEED THE AMOUNT YOU HAVE PAID TO CLM FOR THE SERVICES AND CHIP MATERIALS OUT OF WHICH LIABILITY AROSE.
You agree to defend, indemnify, and hold harmless CLM and all of its affiliates, employees, agents, directors, officers, shareholders, attorneys, successors, and assigns, from and against any and all claims, proceedings, damages, injuries, liabilities, losses, costs, and expenses (including reasonable attorneys’ fees and litigation expenses), relating to or arising from your breach of this Agreement, including, without limitation, your unauthorised reproduction or dissemination of the Services or CHIP Materials or your permitting third parties to access the Services through your username and password.
- GOVERNING LAW
This Agreement, and any non-contractual obligations arising hereunder, is governed and construed in accordance with English law, and the courts of England and Wales shall have exclusive jurisdiction to deal with any dispute arising hereunder.
If you fail to comply with any of the terms and conditions of this Agreement, your rights to use the Services and CHIP Materials will immediately cease without further notice and you must return, destroy, or delete from your system all copies of the CHIP Materials (and any associated materials and data) in your possession or control.
No third party shall have any rights under this Agreement, except LMI where specifically referenced in this Agreement.
If any provision of this Agreement is held by a court of competent jurisdiction to be unenforceable, the remaining provisions of this Agreement will remain in full force and effect and the unenforceable provision shall be changed and interpreted so as to best accomplish the objectives of the original provision to the fullest extent allowed by law. This Agreement and any of your rights hereunder may not be assigned or transferred by you without the prior express written consent of CLM.