Privacy policy
The following is a broad description of the way Jelly Software processes personal information. To understand how personal information is processed you may need to refer to any personal communications you have received, check any privacy notices that Jelly software has provided or contact us to ask about your personal circumstances.
Reasons/purposes for processing information
We process personal information to enable us to provide health services to our clients and their patients. We will maintain our accounts and records with your business details and operate our online hosting service where we will act as your authorised data processor which is compliant with the Data protection act 2018. Further details of this can be found in our data processing agreement.
We may use Aggregated Data such as statistical or system usage data for any purpose. Aggregated Data may be derived from client and patient data but is not considered personal data in law as this data does not directly or indirectly reveal any client or patient identity. For example, we may aggregate your Usage Data to calculate how users are operating a specific feature on the Jelly system. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy and will never be shared with anyone.
Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example to provide you with our services). In that case, we may have to cancel the provision of services to you but we will notify you if that is the case at the time.
Who the information may be shared with
We sometimes need to share the personal information we process with the individual with other organisations. Where this is necessary and strictly limited we comply with all aspects of the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.
Where necessary and only when authorised to do so or required to do so we will share information with:
• related healthcare professionals
• social and welfare organisations
• central government
• family, associates and representatives of the person whose personal data we are processing
Google Calendars
Any data sent to a user’s Google account will be limited to the patient’s name, the service they have booked into the calendar, the name of the person providing the service and the date/time of that service. Any optional specific notes for that booking will also be shared. No other data such as clinical notes will be issued or requested to / from Google calendar
Google GMail
By granting send only permission to the JellyPx sendmail application allows it to send emails on your behalf using the Google account that you authorised and only containing content that you provide.
The JellyPx sendmail application does not download any of your other data from your Google account. It will not download or delete any emails or other data from your account or manage your mailbox settings. It will not access your account in any way apart from to send emails.
It will not share, store, use or access any Google user data. All emails are sent directly to Google’s Gmail and nothing is subsequently kept by the application. application only seeks authority to send your emails on your behalf.
Zoom
By granting the JellyPx Telehealth app permission to manage your meetings and users, it will allow users in the Jelly system to also create / edit or delete Zoom meetings on behalf of the Jelly users.
As appointments get created, amended or deleted from the Jelly diary, if an equivalent Zoom meeting has been created for the appointment, then any changes made to that Jelly appt/ Zoom meeting will be also applied to the matching Zoom meeting Jelly appt.
It will also allow the app to create new sub accounts for your Jelly users so that they can log in directly to the Zoom web site to manage their meetings.
Jelly will not delete any Zoom users. It will not update the Zoom users with any data from Jelly nor does it extract information from any Zoom users.
It will keep a audit log of when a host created / edited/ deleted a zoom meeting as well as when the host / participant joined or left a meeting.
If you uninstall the app and decide you do not want Jelly to retain any information, it will delete all records of its zoom users, meetings and the above audit log.
Use of NHS Number
If you are receiving care from a health or care organisation, that organisation may share your NHS number with other organisations providing your care. This is so that the health and care organisations are using the same number to identify you whilst providing your care. By using the same number the health and care organisations can work together more closely to improve your care and support.
Your NHS number is accessed through an NHS England service called the Personal Demographic Service (PDS). A health or care organisation sends basic information such as your name, address and date of birth to the PDS in order to find your NHS number. Once retrieved from the PDS, the NHS number is stored in our case management system. These data are retained in line with our record retention policies and in accordance with the Data Protection Act 1998, Government record retention regulations and best practice. Further information is available on our website.
We will share information only to provide health and care professionals directly involved in your care access to the most up-to-date information about you. Access to information is strictly controlled, based on the role of the professional, and where the user has a direct care relationship with you.
The use of joined up information across health and social care brings many benefits. One specific example where this will be the case is the discharge of patients into social care. Delays in discharge (commonly known as bed blocking) can occur because details of social care involvement are not readily available to the staff on the hospital ward. The hospital does not know who to contact to discuss the ongoing care of a patient. The linking of social care and health information via the NHS number will help hospital staff quickly identify if social care support is already in place and who the most appropriate contact is. Ongoing care can be planned earlier in the process, because hospital staff will know who to talk to.
You have the right to object to the processing of your NHS number in this way. This will not stop you from receiving care, but will result in the benefits outlined above not being realised. To help you decide, we will discuss with you how this may affect our ability to provide you with care, and any other options that you have.
If you wish to opt-out from the use of your NHS number in this way, please contact your clinic directly or alternatively by contacting us by phoning 01923 606450 or by emailing support@jellysoftware.com.
