Privacy Notice (UK)

Overview

This privacy notice explains how personal data is handled when you:

• Visit the IGCentric website (igcentric.co.uk) or contact us to request a demo/trial, and/or
• Use a SAR360 webform or portal provided by a hospital, NHS Trust, or other organisation to submit or manage a Subject Access Request (SAR).

Because these situations involve different roles under UK data protection law, this notice is split into two parts.

Part A: IGCentric Website Visitors and Business Contacts (IGCentric as Controller)

Who We Are

IGCentric Ltd
Website: igcentric.co.uk
Email: info@igcentric.co.uk
Company number: [Insert company number]
Data protection contact/DPO: Dataprotectionofficer@igcentric.co.uk

For personal data collected via igcentric.co.uk (for example demo/trial enquiries), IGCentric is the data controller.

Personal Data We Collect

• Name
• Organisation/company name
• Work email address
• Message content and any information you choose to provide
• Basic technical logs (server logs, IP address, timestamps)

How We Use This Data

• Respond to enquiries and arrange demos/trials
• Communicate with you about SAR360 at your request
• Maintain business records and customer support
• Protect the website and prevent fraud or misuse
• Comply with legal obligations

Lawful Bases

• Legitimate interests
• Contract / steps to enter a contract
• Legal obligation
• Consent (where specifically requested)

Marketing

If we send marketing emails, you can opt out at any time using the unsubscribe link or by emailing info@igcentric.co.uk.

Cookies and Analytics

Our website does not use cookies and we do not use third-party analytics or marketing tracking tools.

Who We Share Data With

• Website hosting and IT providers
• Business email and productivity providers
• Professional advisers (legal, audit, insurance)
• Law enforcement/regulators where required

International Transfers

Where suppliers process data outside the UK, we ensure appropriate safeguards (such as the UK IDTA or UK Addendum to EU SCCs).

Retention

• Enquiries and demo/trial requests: up to 12–24 months after last contact
• Contract and billing records: as required by law

Your Rights

You have rights including access, rectification, erasure, restriction, objection, portability (where applicable), and withdrawal of consent.

To exercise these rights, contact info@igcentric.co.uk.

Part B: SAR360 Webforms and Portal (IGCentric as Processor)

Controller vs Processor

If you submit a SAR using a SAR360 webform provided by a hospital/NHS Trust:

• The hospital/NHS Trust is the data controller.
• IGCentric acts as data processor and processes data only on their instructions.

Personal Data Processed

• Identity and contact details
• Controller identifiers (e.g., NHS or hospital number)
• Request information
• Verification information
• Communications and audit trail data
• Special category data (health information)

Purpose of Processing

• Capture SAR submissions securely
• Enable SAR workflow management
• Provide secure disclosure access
• Maintain security and performance
• Provide technical support

Sub-Processors

We use carefully selected sub-processors (e.g., hosting providers) under strict contractual and security controls. A list is available upon request.

International Transfers

Where data is processed outside the UK, appropriate safeguards are implemented in line with UK GDPR.

Security

• Access controls and role-based permissions
• Encryption in transit and at rest
• Audit logging
• Secure development practices
• Backups and resilience controls
• Supplier assurance

Retention

Retention of SAR360 data is determined by the hospital/Trust as controller. IGCentric retains data only as instructed.

Data Subject Rights

If you submitted a SAR via SAR360, contact the hospital/Trust directly to exercise your rights.

Complaints

You may contact us at info@igcentric.co.uk.

You may also contact the UK Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk
• Telephone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Updates

We may update this notice from time to time. The latest version will be published on our website with the “Last updated” date revised accordingly.