Research Privacy Policy

Who collects your personal data  

MDRx is the controller for the personal data we collect for research. “Personal data”, “processing” and “controller” are all used in this notice according to their definitions in the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. 

If you need further information about how MDRx uses your personal data for research, you can contact MDRx at 

What personal data we collect and how it is used  

MDRx may collect your:  

  • Name and contact details  
  • Views and experiences of a topic
  • Internet protocol (IP) address, if recorded
  • Device type 

 We may sometimes ask for more sensitive personal data such as your:  

  • Age education or skills
  • Health or disability
  • Level of income
  • Location
  • Observed behaviour
  • Race and ethnicity  

 Your personal data may be used as part of the research that MDRx carries out.  

MDRx will give details of what personal data is collected and how it is used when it invites you to take part in the research.  

Legal basis  

The legal basis for processing your personal data for research is normally your consent.  

MDRx may also use legitimate interest as a legal basis once incorporated into our analysis.  

The legal basis for processing your special category personal data for research is your explicit consent.  

Consent to process your personal data  

Where the processing of your personal data is based on consent, you can normally withdraw your consent, and have personal data removed. You can do this using the contact details provided by MDRx when you take part in the research. However, you may not be able to withdraw your consent once MDRx has incorporated it into its analysis.  

Who we share your personal data with  

MDRx does not normally share your personal data with third parties. 

 Your anonymised information may be shared in the form of:  

  • academic publications  
  • presentations  
  • processed data reports  
  • video clips  

We may securely store and/or process your data on servers controlled and/or owned by third party providers and whose software or systems we use to provide our services but MDRx does not otherwise normally share your personal data with third parties. 

How long MDRx holds personal data  

Personal data will be deleted if no longer needed for research purposes. Data that has been made anonymous may be kept for longer.  

Transfer of your personal data outside of the UK  

MDRx will only transfer your personal data to another country that is deemed adequate for data protection purposes. 

Your rights  

You have the right to:  

  • request from us access to, and rectification or erasure of, personal data  
  • request that we restrict processing concerning you  
  • object to our processing of the data  
  • data portability, where applicable  

To view our website’s Cookies & Privacy policy please click here

You also have the right to complain to the Information Commissioner’s Office about the manner in which, or otherwise, in which we process your personal data.