MBI Health Privacy Policy
This website is operated by MBI Health, whose registered address is 30, Stamford Street, London.
MBI are committed to protecting and preserving the privacy of our visitors when visiting our site or communicating electronically with us.
This policy sets out how we process any personal data we collect from you or that you provide to us through our website. We confirm that we will keep your information secure and that we will comply fully with all applicable UK data protection legislation and regulations. Please read the following carefully to understand what happens to personal data that you choose to provide to us, or that we collect from you when you visit this site. By visiting our website you are accepting and consenting to the practices described in this policy.
Types of information we may collect from you
We may collect, store and use the following kinds of personal information about individuals who visit and use our website:
Information you supply to us. You may supply us with information about you by filling in forms on our website or sending us a request using our email address supplied on the website. This includes information you provide when you submit a contact/enquiry. The information you give us may include your name, address, e-mail address and phone number.
Information our website automatically collects about you. With regard to each of your visits to our website we may automatically collect information including the following:
- Technical information, including a truncated and anonymised version of your Internet protocol (IP) address, browser type and version,operating systemand platform;
- Information about your visit,including what pages you visit, how long you are on the site, how you got to the site (including date and time); page response times, length of visit, what you click on, documents downloaded and download errors.
Use of MBI Products and Services
In addition to operating this website, MBI Health provides digital health technology products and services to NHS organisations and authorised healthcare providers (our “Clients”). Depending on how the service is deployed, these products may support clinical and operational workflows, data quality, analytics, reporting, and other health-related functions.
These systems may process personal data including, but not limited to:
- Patient details and clinical information
- Appointment, care pathway or referral information
- User account information (such as name, work email address, job role and access permissions)
- System activity and audit logs for security and compliance
Our Role
For most deployments, MBI Health acts as a Data Processor and processes personal data on behalf of the Client, who acts as the Data Controller. In these situations, we only process personal data as instructed by the Controller, in accordance with contractual terms and applicable data protection laws.
Where a product is deployed and hosted directly by an NHS Trust or other Client, they remain responsible for hosting, safeguarding and managing the personal data processed within the platform.
In limited cases where MBI Health hosts the service environment on behalf of a Client, personal data is stored securely within UK cloud infrastructure, or within the European Economic Area (EEA) where appropriate safeguards are in place. Even in these cases, MBI Health continues to act as a Data Processor and processes data strictly on the Client’s lawful instructions.
How We Use Service-Related Data
Where MBI processes personal data within our products or services, it is used for the following purposes:
- To operate, maintain and support the platform
- To manage authorised user access, security controls and auditing
- To respond to support requests and technical issues
- To ensure service reliability, performance and business continuity
- To comply with legal, regulatory and NHS assurance requirements
We do not use this data for marketing, profiling, or any unrelated purpose.
Your Rights When Using an MBI Service
If you are a patient or user accessing a service deployed by an NHS organisation or other Client, any request to access, correct, delete or restrict processing of your personal data should be directed to that organisation as the Data Controller. Where required, MBI Health will support them in responding to your request.
Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site.
How we may use the information we collect
We use the information in the following ways:
Information you supply to us. We will use this information:
- To provide you with information and/or services that you request from us;
Information we automatically collect about you. We will use this information:
- To administer our site including troubleshooting and statistical purposes;
- To improve our site to ensure that content is presented in the most effective manner for you and for your computer;
- Security and debugging as part of our efforts to keep our site safe and secure.
This information is collected anonymously and is not linked to information that identifies you as an individual.
Disclosure of your information
Any information you provide to us will either be emailed directly to us or may be stored on a secure server. We use a trusted third party website and hosting provider to facilitate the running and management of this website. They meet high data protection and security standards and are bound by contract to keep any information they process on our behalf confidential. Any data that may be collected through this website, is kept secure and only processed in the manner we instruct them to. Our hosting provider cannot access, provide, rectify or delete any data that they store on our behalf without permission.
We do not rent, sell or share personal information about you with other people or non-affiliated companies.
We will use all reasonable efforts to ensure that your personal data is not disclosed to regional/national institutions and authorities, unless required by law or other regulations.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Third party links
Our site may, from time to time, contain links to and from the third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites
Your rights – access to your personal data
You have the right to ensure that your personal data is being processed lawfully (“Subject Access Right”). Your subject access right can be exercised in accordance with data protection laws and regulations. Any subject access request can be made in the following ways:
- In writing:
Email to: [email protected]
Via Contact Us form: Contact MBI Health
- Post to:
Data Protection Officer
MBI Health Limited,
5th Floor Vivo Building,
30 Stamford Street,
London SE1 9LQ
We will provide your personal data to you within the statutory time frames. To enable us to trace any of your personal data that we may be holding, we may need to request further information from you. If you have a complaint about how we have used your information, you have the right to complain to the Information Commissioner’s Office (ICO).
Changes to our privacy policy
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
Contact
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected].
Version 3. 20th November 2025