Introduction

As is true of most companies, Referral Management Services Limited needs to collect and use your personal information for various purposes.

Referral Management Services Limited (RMSL) t/a FDS Consultants is a company registered in England and Wales under the registration number 11362661. Our registered address is 61a King Street, Knutsford, Cheshire, England, WA16 6DX. All references to ‘RMSL’, ‘we’, ‘us’, ‘our’ are references to Referral Management Services Ltd t/a FDS Consultants.

We understand that you care about your privacy, and we take that seriously.

This Privacy Notice describes RMSL’s policies and practices regarding its collection and use of your personal data.

2. Data protection officer

RMSL has appointed an external data protection officer for you to contact if you have any questions or concerns about RMSL’s personal data policies or practices. RMSL’s data protection officer’s name and contact information are as follows:

Gemserv Limited

d.referrals@nhs.net

How we collect and use your personal information

We collect your personal information through various channels including, but not limited to, the following:

• Business cards
• Face to face meetings when conducting our business
• Forms you fill in
• Where we engage with our partners that enable you to register to visit our site, we may receive your personal data relevant to the visit
• directly from you such as when:
  • you register to use our software
  • let us know how you want to hear from us and what you hear from us about
  • you contact us directly
• indirectly from you, such as when you interact with our website. When you do this we collect and use technical data automatically about your equipment, browsing actions and patterns. We collect and use this personal data by using cookies and other similar technologies. We also receive technical data about you if you visit other websites employing our cookies (for more details, go to our Cookie Policy).

When we are a data processor only

This privacy policy does not apply where we are processing personal information strictly as a data processor on behalf of a third party as we do not collect personal data directly. In this case, you should look to that third party, who will be answerable for how we process that personal information and its privacy policy.

The types of data we collect

Personal Data for Online Learning Packages: When you register to undertake online training, we may collect your first name, last name, job title, GDC number, employer name, work address, work email, work phone number and content of communications. In some instances, only when appropriate, we may ask you for other personal data, although this will always be optional, for example, your dietary requirements.

Personal Data for Software Registration: When you register for the referrals service, we will collect your first name, last name, job title, GDC number, employer name, work address, work email, work phone number.

Personal Data for Service Communications: When you register for our services we may send you service messages if there is planned or unexpected service outage which affect the services we provide to you. We may collect your first name, last name, job title, employer name, work address, work email and work phone number.

Personal Data for Feedback purposes: When you submit a feedback form/user survey via our website about our services. We will collect first name, last name and email address and may also collect the Practice Name, personal/work telephone number and a Unique Reference Number if your feedback relates to a particular referral.

Personal Data for Patient Experience purposes: When you consent to the registered practice sharing information with us. We may collect your first name, last name and mobile number.

For more information, please see the Appendix below.

Why we collect your information

Purposes

As is true of most companies, RMSL needs to collect and use your personal information for various purposes, namely the following:

• Registration: Personal information we collect to access our training packages
• Security:Personal information we collect to ensure security is maintained for services being provided to you
• Legal reasons:Personal information we are required to collect by law
• Patient Experience: Personal information we collect from practices to gain feedback on the services provided to you as a patient where RMSL has received a referral from a practice but only if you have explicitly consented to receive SMS messages to your provider for this specific purpose.

Legal Basis for collecting and using your data

The legal basis for collecting and using your personal information for the above purposes are legitimate interests, consent and legal obligation.

For more information on RMSL’s legal bases and legitimate interests please refer to the Appendix below or contact us at d.referrals@nhs.net

Automated decision making

We do not make any automated decision-making or profiling using your personal information.

How long we keep your personal information

The information we collect will be stored for the duration of your interest in RMSL’s services, for the duration of events, and in some instances longer, if required by regulatory authorities. Please see the Appendix for more information.

Our communications policy

We will always exercise restraint and send you materials that we feel are relevant as a patient or customer.

We may also include forms on our website which enable you to sign up for specific events if you wish to or download content such as insights or information about our services. Any data we collect from these specific forms will only be processed and used for purposes relating to the event or topic that the form relates to. It will not be used as consent to send you any other unrelated content.

Appendix 1 – Further details on your information

The following details the information we may collect (depending on a processing activity), the appropriate legal basis and justification and the retention period for such data.