Website Privacy Notice
How we handle information about visitors to curia.health, wherever you are.
This notice explains what we collect when you visit our website, get in touch, subscribe to our writing or apply for a role, and what you can do about it.
Curia Health LLP runs this website and its email, and receives every enquiry that comes through it, wherever in the world you are writing from. Where your enquiry concerns care in the United States, we pass on what is relevant to our US practice. There is a section for US residents further down.
If you are a member, this notice covers your use of the website. Everything to do with your care, your records and your membership is covered by our Privacy Notice for members, which is a separate document. Your care is provided by more than one organisation, and that notice explains which one holds what.
Who we are
Curia Health LLP runs this website. We are registered in England and Wales, number OC447029, with our registered office at Units 3-4, 42 Orchard Road, London N6 5TR. We are registered with the Information Commissioner's Office under ZB545925.
For anything in this notice, contact Jeff Haggard, our Data Protection Lead, at jeff@curia.health.
What we collect
What you give us.
- Your name, email address, telephone number and whatever else you write when you send us an enquiry, request a call back, or ask about membership.
- Your email address if you subscribe to our writing or ask to hear about events.
- Your details and history if you apply for a role with us.
- Your details if you register for an event.
What we collect automatically. When you visit the site we collect your IP address, the type of device and browser you are using, the pages you look at, how long you spend, and where you came from. We use this to keep the site working, keep it secure, and understand which of our writing people find useful. Some of it comes from cookies, which are covered below.
Please do not send us medical details through this website
Our contact forms and email are ordinary business channels. They are not encrypted end to end and they are not a medical record.
If you want to talk to us about your health, tell us that and we will arrange a proper conversation on a secure channel. If you do include health details in an enquiry anyway, which people understandably do, we will treat them in confidence, use them only to answer you and route your enquiry to the right person, and keep them no longer than we need. If you go on to become a member, what you told us becomes part of your record and our members' Privacy Notice takes over. If you do not, we delete it with the rest of the enquiry.
Why we use your information, and our lawful bases
Do you have to give us anything? No. You can read the site without telling us who you are. If you want us to answer an enquiry, send you our writing or consider you for a role, we need your contact details in order to do it, and if you would rather not give them we simply will not be able to reply.
Where your information is held
Some of our suppliers are based in the United States. Where information goes there, it is protected by UK adequacy regulations including the UK Extension to the EU-US Data Privacy Framework, or by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with a transfer risk assessment where one is needed. Ask us and we will tell you which applies to a particular supplier.
How we keep it safe
The site is served over an encrypted connection. Enquiries arrive in a mailbox and contact records that only the people who need them can open. Everyone here is trained on confidentiality and data protection and is bound by written confidentiality obligations, and our suppliers are contractually held to equivalent standards.
If something does go wrong and your information is affected in a way that presents a risk to you, we will tell you, and we will tell the Information Commissioner's Office where the law requires it.
Automated decisions
We do not make decisions about you by automated means, and we do not profile you. No enquiry is sorted, scored or prioritised by a machine; a person reads it.
Children
This site is meant for adults. We do not knowingly collect information through it about anyone under 18.
How long we keep it
Enquiries that do not lead to membership are kept for up to 12 months and then deleted. If you become a member, what you sent us moves into your record and is kept under the terms of our members' Privacy Notice. Subscriber details are kept until you unsubscribe. Unsuccessful applications are kept for 6 months unless you ask us to keep them longer. Website analytics are kept in aggregate.
Your rights
You have the right to be informed, to see the information we hold about you, to have it corrected, to have it erased, to restrict how we use it, to receive a copy in a portable format, to object, and to withdraw consent where we asked for it.
Your right to object. Where we rely on our legitimate interests, you can object to what we are doing at any time. Tell us and we will stop, unless there are compelling grounds for us to continue. Marketing is different: if you ask us to stop, we stop, with no reason needed and nothing to justify.
To exercise any of these, contact us using the details above. We may need to check your identity first. We normally respond within one month, and there is no charge.
If you are in the United States
Curia Health LLP runs this website and receives your enquiry in the first instance, so this notice applies to you as it does to everyone else. Where your enquiry concerns care in the United States, we pass on what is relevant to our US practice, which is named in its own Notice of Privacy Practices.
Once you become a patient of our US practice, that practice's Notice of Privacy Practices governs your health information under HIPAA. It is published on this website and given to you with your Membership Agreement. This notice continues to cover your use of the website.
We do not sell your personal information. We do not share it for cross-context behavioural advertising, and we do not use advertising or retargeting technology on this site. Nothing you read here is passed to an advertising platform.
Your state may give you rights over the information we hold, including to know what we hold and why, to receive a copy, to correct it, to delete it, and to opt out of targeted advertising, sale, or profiling with significant effects. We honour these requests from residents of any US state, without asking which one you live in and without treating you differently for asking.
To make a request, contact us using the details above. We will confirm we have received it, and respond within the time your state allows, normally 45 days. If we turn a request down we will tell you why, and you can appeal by replying to that decision; we will review it and give you a written answer, along with details of your state attorney general if you are still unhappy.
Health information. Some US states treat consumer health data separately from other personal information. Our separate Consumer Health Data Privacy Policy explains what we collect, why, and what you can do about it.
Complaints
If you are unhappy with how we have handled your information, tell us first and we will try to put it right. Our complaints procedure is at curia.health/complaints. You can also complain to the Information Commissioner's Office at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Changes
We update this notice when the site, the law or our suppliers change, and the version published here is always the current one.