Data Protection

In Health Information

Data Collection and Processing

Six Degree Health is committed to maintaining the highest standards of data protection and privacy for all users within the United States of America. In accordance with applicable data protection laws, including federal and state privacy mandates, we collect and process personal information only when necessary for the provision of our services. This information may include, but is not limited to, names, email addresses, IP addresses, and browsing behavior on our platform. All collected data is obtained through lawful means, with explicit notice provided to users regarding the purpose for its collection. We utilize technical and organizational measures to safeguard your information against unauthorized access, alteration, disclosure, or destruction. Data is processed only by authorized personnel bound by confidentiality obligations. Our data collection activities are conducted transparently, with comprehensive details available to users at the time of data submission. No personal information is sold or traded to third parties. We also track aggregate, non-personal information for analytics and service improvement, ensuring such data cannot be linked to individual users.

Legal Basis for Data Handling

All processing activities related to personal information conducted by Six Degree Health are based on lawful grounds as required by United States law. These lawful bases may include the necessity of processing for the performance of a contract with users, compliance with legal obligations, protection of vital interests, and legitimate interests pursued by Six Degree Health or third parties, provided that such interests do not override user rights and freedoms. We seek user consent when required for specific data processing activities, such as marketing communications or the storage of cookies that go beyond necessary functionality. Furthermore, our processing procedures are continuously reviewed to ensure ongoing compliance with evolving legal standards and best practices in information privacy and security.

Users' Rights Related to Personal Data

Users of the Six Degree Health website possess several rights regarding their personal data, including the right to access, rectify, erase, restrict, or object to processing, as permitted under U.S. law. Individuals may also have the right to request data portability or withdraw consent for specific data uses at any time without affecting the lawfulness of prior processing. We provide accessible means for users to exercise their rights by contacting our Data Protection Officer. Any such requests will be addressed in a timely and consistent manner, with clear information provided on the status and outcome of the request. Our team is dedicated to ensuring that users can easily understand and control the handling of their personal information through our website's privacy interfaces and support channels.

Data Retention Policy

Six Degree Health retains personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal and regulatory requirements. Once data is no longer required, it is securely deleted or anonymized in accordance with industry best practices. Records of user interactions, account activities, and consents are maintained for a reasonable period to ensure regulatory compliance, to resolve disputes, or to enforce our policies. Retention schedules are reviewed periodically to determine whether continued storage is justified. Upon expiration of retention periods, all identifiable personal data is irretrievably erased from our systems and archives, ensuring privacy and minimizing risk. Detailed retention timelines are available upon request from users who wish to learn more about our specific practices.

Data Security Measures

We employ a comprehensive suite of physical, technical, and administrative security measures to protect user data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include advanced encryption techniques, regular security audits, intrusion detection systems, secure server environments, and robust access controls. All staff members receive ongoing security awareness training and are expected to follow stringent procedures when handling user data. Third-party service providers engaged by Six Degree Health are carefully vetted and must agree to comparable data protection standards. In the event of a data breach, we will take immediate action to mitigate risks, investigate the cause, and notify affected users and authorities as required by law.

International Transfers of Personal Information

Although Six Degree Health is based in the United States of America, some processing activities may involve the transfer of data to trusted partners or affiliates in other jurisdictions. Before any such transfer occurs, we take steps to ensure that the recipient provides an adequate level of protection for personal information, in accordance with relevant U.S. legal requirements and contractual safeguards. Users will be informed whenever their data is subject to international transfer, and mechanisms such as standard contractual clauses are implemented as necessary. It is our policy to prioritize the privacy and security of data, regardless of where it is processed or stored.

Third-Party Services and Data Sharing

Six Degree Health may rely on third-party service providers to enhance the functionality of our platform, such as hosting services, analytics, or email communication systems. These partners are contractually obligated to treat all user information as confidential and to use it solely for the purposes agreed upon. We conduct regular audits to assess the data protection measures of all vendors and partners. User data is not disclosed to third parties for marketing or advertising purposes without explicit consent. Any sharing of information with public authorities or law enforcement agencies will be conducted only when required by law and with due process.

Children’s Privacy Protection

We recognize the importance of safeguarding the privacy of children and do not knowingly collect personal information from individuals under the age of 13, in compliance with the Children’s Online Privacy Protection Act (COPPA). If we discover that we have inadvertently received such information, we will promptly take steps to delete it from our records. Parents and guardians are encouraged to monitor and participate in their children’s online activities. If you believe a child has provided personal data to Six Degree Health, please contact us immediately so we can take the appropriate remedial measures.

Contact Information for Data Protection Inquiries

Users who have questions, concerns, or requests regarding the handling of their personal data are encouraged to contact our Data Protection Officer, Evelyn Ashcombe. You can reach her via email at [email protected] or by post at Clifton Suspension Bridge, Bridge Road, Leigh Woods, Bristol BS8 3PA, United Kingdom. We are committed to responding to all inquiries in a professional and timely manner, and we take every user concern seriously. Additionally, users have the right to seek recourse or lodge complaints with the relevant regulatory authority should they believe their privacy rights have been infringed.

Share Tweet Linkedin Reddit
Write a comment