Data Protection Rights

Data Controller and Data Collection Practices

MedSearch, operated by Elara Gresham and located at the University of Bristol, Beacon House Queens Rd, Bristol BS8 1QU, United Kingdom, is committed to protecting the privacy of its users. As a part of this commitment, we act as the data controller and determine the purposes and means of processing personal data. We may collect various types of personal information from users of our platform, including but not limited to names, email addresses, and browsing behavior. This information is gathered to provide accurate and up-to-date health information and improve user experience. The data collection is performed in a lawful, fair, and transparent manner, adhering to the applicable data protection laws in the United States of America. Users are informed of the specific data being collected and the intended purposes at the point of collection to ensure transparency and garner consent where required.

Purpose and Legal Basis for Data Processing

We process personal data to enhance and deliver our services effectively. This includes, but is not limited to, responding to user inquiries, personalizing user experience, conducting research and analysis, and improving the functionality of our platform. The legal basis for processing personal data primarily depends on the consent of our users, which can be withdrawn at any time. Additionally, we rely on the necessity of processing for the performance of a contract or for compliance with a legal obligation. In some cases, the processing is based on our legitimate interests, such as ensuring the security and integrity of our services. Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

User Rights and Access to Personal Data

Users have the right to access their personal data, request correction of inaccuracies, object to processing, and request deletion of their data, subject to certain legal restrictions. To exercise these rights, users can contact us via email at [email protected]. MedSearch is committed to responding to requests for access to personal data in a timely manner. Users also have the right to lodge a complaint with a supervisory authority if they believe their data protection rights have been violated. In responding to these requests, we may require additional information to verify the identity of the requester to protect the confidentiality of personal data. All requests will be handled in compliance with applicable data protection laws to ensure the privacy and security of our users.

Data Retention and Security Measures

MedSearch retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws or regulations. Once personal data is no longer needed, it is securely deleted or anonymized. MedSearch employs a variety of security measures, including encryption and access controls, to safeguard personal data against unauthorized access, disclosure, alteration, and destruction. Regular audits and reviews are conducted to ensure continued effectiveness of these measures. Our commitment to data security is underscored by ongoing employee training and awareness programs, ensuring that all personnel are well-versed in data protection and security protocols.

Third-Party Data Sharing

MedSearch does not sell or rent personal data to third parties. In certain circumstances, we may share information with trusted partners who assist us in operating our website, conducting our business, or serving our users. These third parties are obligated to keep the information confidential and use it solely for the purposes for which it was provided. We may also disclose personal data when required by law, or to protect our rights, property, or the safety of our users or others. Before sharing any personal data, we ensure that appropriate contractual safeguards are in place to provide the necessary level of protection for the shared information.