When Mednetiks hosts and maintains your website, the website may process personal data from your visitors, customers, patients and staff. In that situation you are the data controller and Mednetiks is your data processor.
The data protection terms are part of our Client Terms. This page is a plain-English summary.
What we process
Hosting, maintenance and the services you order, for the length of your contract. This can include names, contact details, enquiries, bookings, sign-ups, accounts and chats. Health information is not requested unless separately agreed, but visitors may volunteer it. Websites and assistants are not clinical record systems.
Your responsibilities
You arrange your privacy notices and make sure data is collected lawfully.
Our commitments
- We process data only on your documented instructions.
- Authorised staff keep it confidential.
- We use appropriate security: encrypted connections, access controls, updates, monitoring and backups.
- We help with individual rights requests, security, breach response and impact assessments.
Our service providers
You authorise the providers on our current provider list, available on request. We give 30 days’ notice before adding or replacing one. Transfers outside the UK only take place with appropriate safeguards.
If there’s a breach
We notify you without undue delay, and at most 48 hours after becoming aware.
When the agreement ends
You can request a copy of your personal data within 30 days. We then delete it from live systems within 30 days; backups are overwritten within a further 30 days.
The full, binding terms are in our Client Terms.