Privacy Policy

Our company is Vinehealth Digital Limited ("Vinehealth"); company number 11672175.

Your Privacy

At Vinehealth, your privacy is important to us. This privacy statement explains what personal data Vinehealth ("Vinehealth", "we", "us", "our", “App”, “Services”) collects from you, through our products and how we use that data.
Vinehealth serves a number of groups of users in different ways. References to products in this statement include Vinehealth services, which are offered through our websites and app.
Please read product-specific details in this privacy statement, which provide additional information about some Vinehealth products.
This policy applies to any users of the Services of Vinehealth or its affiliates anywhere in the world, and to anyone else who contacts or otherwise submits information to Vinehealth, unless noted below.

1. Data Protection Principles

We are committed to complying with data protection law and principles, which means that your data will be:

Processed lawfully, fairly and in a transparent way;
Collected for specific, explicit and legitimate purposes stated in this policy and not used in any way that is incompatible with those purposes;
Adequate, relevant and limited to what is necessary for those purposes;
Accurate and, where necessary, kept up to date;
Kept for no longer than is necessary for those purposes; and
Processed securely.

2. Collection of Personal Information

Vinehealth acts as the data controller for the information you provide or that is collected by Vinehealth or its affiliates. Vinehealth collects data to operate effectively as a business and to provide you, the user, with tailored services and products.

You have choices about the data we collect. When you are asked to provide personal data, you may decline. But if you choose not to provide data that is necessary in order for us to provide services to you, you may not be able to use that product.

We provide further information, below, on the types of personal data we obtain and how we use them, throughout your use of our service and products.

2.1 - Collection of Personal Information

Information you give to us:

We will collect and process the personal data from you that you give to us by filling in forms on our website or App or by corresponding with us by phone, email or otherwise. It includes information you provide when you register to use the site or App, subscribe to our service, search for a product, participate in discussion boards or other social media functions on or via the site or App, enter a competition, promotion or survey, submit a query, and when you report a problem with the site or App.

The (“Personal Information”) you give us may include your name, address, email address, phone number, date of birth, personal description and photograph, login and password details. We keep this Personal Information private and do not share it without your prior express consent.

When you are prompted to provide this express consent, we will clearly and unambiguously explain to you what Personal Information we will be sharing, with whom and for what purpose.

Personal Information that we will only share with your express consent includes:

your name;
your email address;
your telephone number (if required).

The personal information we collect may also include:

your demographic information;
your date of birth;
your gender;
your ethnicity.

To interact fully with our services, we also collect information about your existing medical conditions. We ask for details of your diagnosis, the course and cycle of treatment that you are currently on and the name and contact information of your healthcare provider(s) and other important contacts so that we can provide a more tailored experience.

We record information about the medications that you are taking and planned appointments so that you can log when you have taken medications and see a schedule of upcoming medications and appointments.

You will also be able to log information on your physical and mental health; the severity of your side-effects, the severity of your symptoms, mood, activity levels, sleep, nutrition and hydration. You can also input notes so that you can journal your overall experience electronically and share this with others.

You can also choose to import metrics on things such as your heart rate, blood pressure, temperature, weight, levels of activity either directly from wearable devices or via third party databases. Please note that when using third party devices or websites, those third parties' privacy policies will also apply.

Any information about your health is classed as sensitive personal data and we ensure that additional safeguarding measures are in place to protect this information. Our lawful basis for processing this sensitive personal data is your consent. You can withdraw your consent at any time - for more information please email privacy@vinehealth.ai.

Part of this information is necessary to complete your user registration and for you to use our App and Services (for more information on what we use your data for, see section 3) If you decline to provide this information during the registration process you will not be able to create an account on the App and use our Services.

Information we receive from other sources:

If you input an access code that you have received from a Patient, Caregiver, Charity or a Healthcare Provider when you download the Vinehealth app, we will be able to tell which third party has provided you with this code.

We will receive information from anyone that you give permission to enter information into the App on your behalf (such as a Caregiver or a Healthcare Provider) ("Permitted Third Party/Parties"). If you allow your Permitted Third Parties permission to edit your information, then they will give us information about your symptoms, medications and treatments. You can change your Permitted Third Parties under your settings in your account and change the permissions allocated to each Permitted Third Party.

If you are a Permitted Third Party, we may receive information about you from the patient. This information includes your name, telephone number, email address, relationship to the patient, job title and location.

If you decide to allow any third party wearable devices to connect with our Services, we will receive information about you such as your exercise, activity, heart rate, temperature, sleep, weight and blood pressure from these devices via Bluetooth.

2.2 - Engagement Data, Cookies and other data collection technologies

When you begin to use our App or services, we monitor engagement and feature usage on our platform by recording every interaction you have with products you are registered on. This includes, but is not limited to, page visits, content viewed and logs made on our platform.

We also infer your location based on your IP address during registration and for opt-ins. In addition to IP address, our platform automatically collects data about your device, including the model, platform, locale code and UUID (universally unique identifier) every time you visit the Vinehealth website or app. This information may also be collected in combination with an identifier associated with your device to enable us to recognise your mobile browser or device when you return to the site or the App.

Vinehealth uses cookies and similar technologies on our online services to allow us to store your personal preferences and settings; optimise login processes; maintain a high level of security and to monitor and analyse performance of our online services. On our website, we may use traffic log cookies to track pages you view. The purpose of this is to analyse web page traffic in order to further optimise the journey users must undertake to access content that is relevant to them. You may adjust the settings on your browser to refuse cookies, however, this may lead to limited access to our online services.

In addition to cookies, we may log information about your device, including the existence of cookies, your IP address and information about your browser. The purpose of this information collection is to diagnose service issues and to administer and track your usage of our platforms.

Information about your visit may include the full Uniform Resource Locators (URL), clickstream to, through and from the site, and any phone number used to call our customer service number or social media handle used to connect with our customer service team.

2.3 - Third party aggregate data

Our third parties may gather non-personal digital properties to enrich aggregate analytics, including Google Analytics.

All of Vinehealth’s third-party service providers and other entities in the group are required to take appropriate security measures to protect personal data in line with our policies. Vinehealth only allows service providers to process personal data for specified purposes and in accordance with Vinehealth’s instructions.

3. How Vinehealth uses your Personal Information

3.1 - To operate effectively as a business and to perform essential business operations, including developing and providing products optimised for patients and clinicians.

We are motivated to provide products which offer outstanding resources for people living with long-term health conditions ("patients"), including content and resources tailored to a users specific need, stage of disease, medications, appointments, location, current condition and treatment (as detailed in section 2). We will show you and/or a Permitted Third Party this information.

To enhance your enjoyment and productivity on our platform, we endeavour to identify and recommend the most relevant features through personalised notifications, based on your profile, medications, symptom tracking, health condition(s) and recent activities. To ensure your experience with our products is seamless, we continuously re-examine and iteratively optimise user journeys on our platform.

Vinehealth uses your personal information to identify you and notify you about changes to our service. We infer your location from your device IP address in order to geo restrict certain content on our platform.

Product issues, identified by users and communicated through customer support, are effectively diagnosed and resolved using data collected from interactions on the platform. Decisions on product development and evaluations of product performance are based on aggregate analysis and business intelligence based on non personal data.

All our third-party service providers and other entities in the group are required to take appropriate security measures to protect your personal data in line with our policies. We only allow them to process your personal data for specified purposes and in accordance with our instructions.

In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

We will disclose your personal information to third parties in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets subject to the terms of this privacy policy.

We will disclose your personal information to third parties if Vinehealth Digital Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

3.2 - To deliver communications of personal interest including product and content releases, motivational prompts and in response to product queries or support requests.

Direct communications
Communications sent by Vinehealth come in the form of emails to the email address provided by you during the registration process and through notifications delivered to your device. Vinehealth may send you communications relating to new and existing product and content releases and updates. We send such communications so that you are aware of changes we are making to the content or features of our products, or new releases, which could affect the usefulness of our core services to you.

Third party communications
We will ask you during registration whether you want to receive third party communications such as promotional material related to furthering your training outside of our platform. You, of course, have the right to opt out of such email communication at any time by using the unsubscribe link, found at the bottom of every email, or by updating your account setting in the app. Vinehealth will not send you communications unrelated to its core services, unless you specifically tell us you are interested in receiving them.

3.3 - Anonymised & aggregated information for commercial partners

The purpose of Vinehealth is to create a future in which people living with cancer are able to manage their care more effectively but also have access to more life-saving drugs; we want to further our partners knowledge of cancer.

We can only achieve our purpose if we share anonymised and aggregated (non-personal) information about our users’ conditions with our strategic partners: oncologists, research institutions, pharmaceutical companies and other organisations in the medical sector. The information that we share with our strategic partners is fully anonymised and aggregated unless you are part of a Vinehealth Care Program (see section 3.4) or if you are part of a Clinical Trial (see section 3.5).

We may also share with our commercial partners aggregated data that does not personally identify you, but which shows general trends, for example, the number of users of our service.

3.4 - To track and report your Vinehealth data and insights with your doctor or care provider within a Vinehealth Care Program, with your prior knowledge and consent

By signing up our platform as a member of a Vinehealth Care Program (“VCP”) you agree to share your Vinehealth data and insights with your doctor or care provider; we will provide useful insights and notifications to improve your care from home. Owners of a VCP include, but are not limited to, doctors, nurses, clinicians, academic institutions, and other care providers. Data and insights shared are limited to content on the platform that belongs to the Vinehealth Care Program. You have the right at anytime to opt out of this sharing by sending a written request to privacy@vinehealth.ai.

3.5 - To track and report your Vinehealth data and insights within a Vinehealth Clinical Trial Partnership, with your prior knowledge and consent

By signing up and agreeing to share your Vinehealth data and insights with a Vinehealth Clinical Trial Partner (“VCT”), we will provide useful insights and notifications to improve your care from home whilst you are part of a clinical trial. Owners of a Vinehealth Clinical Trial Partnership include, but are not limited to: academic institutions, clinical research organisations and pharmaceutical companies. Data and insights shared are limited to content on the platform that belongs to the specific Clinical Trial Partner. You have the right at anytime to opt out of this sharing by sending a written request to privacy@vinehealth.ai.

4. Transparency and Choices

In this section, we have summarised the rights that you have under data protection law. The information we provide in this section is a brief summary of your rights under data protection law and you should still read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

Your principal rights under data protection law are:

the right to be informed;
the right of access;
the right to rectification;
the right to erasure;
the right to restrict processing;
the right to data portability
the right to object; and
rights in relation to automated decision making and profiling.

You have the right to confirmation as to whether or not we hold or process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply to you a copy of your personal data, or do one of the following:

We may ask you to verify your identity, or ask for more information about your request; or
Where we are legally permitted to do so, we may decline your request, but we will explain why if we do so.

You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.

In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data being unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary, for example: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.

You have the right to request that your personal data is no longer processed for example, due to the inaccuracy of the data or the reason for the data being processed.

If you have given additional consent for your data to be shared to a third party, including academic institutions, medical device companies and pharmaceutical companies, you have the right to withdraw this consent at anytime. You have the right to request that your personal data be transferred to another party.

If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal. If you opted in to third party marketing communications when you registered, you may opt-out at any time within the app, or by emailing privacy@vinehealth.ai.

Lastly, you will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

You may exercise any of your rights in relation to your personal data by written notice to us or by any of the methods specified in section.

To contact us in relation to any of these requests, please use the email address privacy@vinehealth.ai.

5. Duration of Data Retention

Vinehealth retains personal data for as long as necessary to provide our products and fulfil the transactions you have requested, or for other essential purposes such as complying with our legal obligations, and enforcing our agreements. Because these needs can vary for different data types in the context of different products, actual retention periods can vary significantly. The general rule that establishes a baseline for data retention is the length of time required to store and analyse the data for the purpose it was collected (as described in section 3). Moreover, we are required to maintain appropriate business records used for compliance.

6. Information Security and International Transfers

Vinehealth is committed to protecting the security of your data by endeavouring to ensure appropriate technologies and processes are maintained to avoid unauthorised access or disclosure. We utilise, for all data storage and processing purposes, Amazon Web Services ("AWS"), Google’s G Suite and Google Cloud. Specifically, all our AWS storage containers and databases are located in Ireland (EU) (with possible transit through US storage containers).

7. Changes to this Privacy Policy and Further Information

We may revise this Privacy Policy from time to time. The most current version of the policy will govern our use of your information and will always be here. If we make a change to this policy that, in our sole discretion, is material, we will notify you via an app notification or email to the email address associated with your account. By continuing to access or use our services after those changes become effective, you agree to be bound by the revised Privacy Policy.
If you would like further information about privacy at Vinehealth, you will find more information, please contact us at privacy@vinehealth.ai.