GDPR Privacy Policy

Effective Date: 20th August 2024

1. Introduction
Sunion Health ltd ("we," "our," or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and share information about you when you visit our website https://sunionhealth.com/ (the "Site") and interact with our services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller
Sunion Health is the data controller responsible for your personal data. This means we determine the purposes and means of processing your personal data.

3. What Information We Collect
We may collect and process the following personal data about you:

• Contact Information: Name, email address, phone number, and postal address.
• Health Information: Details related to your health, medical history, and treatment preferences (collected only when necessary for providing our services).
• Financial Information: Payment details, including credit/debit card information.
• Technical Data: IP address, browser type, device information, and browsing behavior on our Site.
• Marketing and Communications Data: Your preferences in receiving marketing communications from us.

4. How We Use Your Data
We may use your personal data for the following purposes:

• To Provide Services: To manage and deliver the health services you request, including consultations and treatments.
• To Process Payments: To manage payments, fees, and charges.
• To Communicate with You: To send you important notices, updates, and other information related to our services.
• To Improve Our Services: To analyze and enhance the quality of our services and Site.
• To Comply with Legal Obligations: To fulfill legal and regulatory requirements.

5. Legal Basis for Processing
We rely on the following legal bases for processing your personal data:

• Consent: Where you have given us explicit consent to process your data (e.g., for marketing purposes).
• Contractual Necessity: Where processing is necessary for the performance of a contract with you.
• Legal Obligation: Where we need to comply with a legal or regulatory obligation.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.

6. Data Sharing and Disclosure
We may share your personal data with:

• Service Providers: Third-party vendors who assist us in delivering our services (e.g., payment processors, IT services).
• Health Professionals: Other health professionals involved in your care.
• Legal and Regulatory Authorities: When required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets.

7. International Transfers
Your personal data may be transferred to and processed in countries outside the UK. We will ensure that any such transfers are compliant with UK GDPR and that adequate safeguards are in place to protect your data.

8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. These measures include encryption, access controls, and secure storage.

9. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or reporting requirements.

10. Your Rights
Under the UK GDPR, you have the following rights:

• Access: To request access to your personal data.
• Rectification: To request correction of inaccurate or incomplete data.
• Erasure: To request the deletion of your data where there is no lawful basis for retention.
• Restriction: To request the restriction of processing your data under certain circumstances.
• Data Portability: To request the transfer of your data to another organization.
• Objection: To object to the processing of your data based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at:
Sunion Health
28 Fitzroy Square, London W1T 6DD, United Kingdom
Email: info@sunionhealth.com
Phone: +44 (0) 203 475 7881

11. Marketing Communications
We may send you marketing communications if you have consented to receive them. You can opt-out of these communications at any time by clicking the unsubscribe link in the emails or contacting us directly.

12. Cookies
Our Site uses cookies to enhance user experience and analyse site usage. For more details, please refer to our Cookie Policy.

13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page, and we will notify you where appropriate.

14. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Sunion Health
28 Fitzroy Square, London W1T 6DD, United Kingdom
Email: info@sunionhealth.com
Phone: +44 (0) 203 475 7881

15. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection issues.