Privacy Notice

Our Privacy Commitment

At Zapmii Limited, we prioritize the protection of your privacy and personal information. This Privacy Notice ("Notice") outlines our commitment to safeguarding the personal information of all users who interact with our zapmii.com website ("Website"), the "Zapmii" mobile application ("Mobile Application"), and any related products and services (collectively, "Services"). We adhere to the highest standards of data privacy and security, ensuring compliance with significant data protection legislation, including but not limited to, the EU General Data Protection Regulation (2016/679/EC) (GDPR), the UK General Data Protection Regulation (UK GDPR), and the Data Protection Act 2018.

This document establishes a legally binding agreement between you ("User", "you", or "your") and us—the operator of the Website and developer of the Mobile Application ("Operator", "we", "us", or "our"). It details the types of personal information ("Personal Information") we collect, our methods for using it, and the stringent measures we implement to protect it. Additionally, the Notice explains your rights regarding our use of your Personal Information and how you can access and update this information.

By accessing and using the Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Notice. Please be aware that this Notice does not govern the practices of companies we do not own or control, or to individuals we do not employ or manage. If you are entering into this agreement on behalf of a business or other legal entity, you affirm that you have the authority to bind such entity to these terms. If you do not have such authority, or if you do not agree with these terms, you must not accept this agreement and may not access and use the Services.

Automatic Data Collection

When you access the Website or use the Mobile Application, our servers automatically record information transmitted by your browser or device. This data may include your device’s IP address and location, browser and device name and version, operating system type and version, language preferences, the webpage you were visiting before arriving at our Services, pages of our Services that you visit and the time spent on those pages, information you search for on our Services, access times and dates, and other relevant statistics.

Additionally, if you wish to use certain features on the Services, you may need to provide specific Personal Information, such as your name and email address. We collect and store any information you knowingly provide when creating an account, publishing content, or filling out any forms on the Services. This may include sensitive personal information, geolocation data, information about other individuals, and other materials you willingly submit to us.

In this Notice, we are committed to protecting your privacy as mandated by data protection legislation. It is essential that you read and retain this notice, along with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.

We adhere to the following principles to ensure your Personal Information is handled securely and with respect:

• Lawfulness, Fairness, and Transparency: Your Personal Information is processed lawfully, fairly, and in a transparent manner.
• Purpose Limitation: Collected only for valid purposes that we have clearly explained to you and not used incompatibly with those purposes.
• Data Minimization: Relevant and limited to what is necessary in relation to the purposes for which they are processed.
• Accuracy: Kept accurate and up-to-date.
• Storage Limitation: Kept only as long as necessary for the purposes we have told you about.
• Integrity and Confidentiality: Kept securely to ensure protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

By using the Services, you acknowledge that you have read, understood, and agree to the terms of this Notice. This Notice does not govern the practices of companies we do not own or control, or to individuals we do not employ or manage. If you have concerns about how your Personal Information is handled or wish to know more about your rights under data protection legislation, please contact us for further information.

Collection of Personal Information

You can visit and use the Website and the Mobile Application without identifying yourself or providing any information that could reveal your identity. However, if you wish to use certain features on the Services, you may need to provide specific Personal Information, such as your name and email address.
‍
We collect and store any information that you knowingly provide when creating an account, publishing content, or filling out any forms on the Services. When required, this information may include the following:

• Account details: Username, unique user ID, password, etc.
• Contact information: Email address, phone number, etc.
• Sensitive personal information: Ethnicity, religious beliefs, mental health, etc.
• Geolocation data: Latitude and longitude of your device.
• Mobile device features: Access to contacts, calendar, gallery, etc.
• Information about other individuals: Family members, friends, etc.
• Other materials: Articles, images, feedback, etc.
• You can choose not to provide Personal Information, but this may limit your ability to utilize certain features on the Services. If you are unsure about which information is mandatory, feel free to reach out to us for clarification.

Technical Information, Analytics, & Data Collection

Zapmii Limited may collect and process health and medical information that you provide via the Mobile Application or Website, including health details, symptoms, treatments, consultations and sessions, medications, and procedures. This may also include records from your interactions with clinicians.

Zapmii Limited may also store health-related information from other applications, devices, or services if you have given consent for data sharing. For example, this could include data from wearable devices such as smartwatches. We handle this information with the utmost care, ensuring compliance with data protection regulations to safeguard your privacy and security.

When you use the Mobile Application or Website, Zapmii may collect the following technical data, provided your device or browser settings permit:

• The IP address your device uses to connect to the internet
• Browser type, such as Google Chrome or Apple Safari
• Details about your device’s operating system and login information
• Your device’s make and model
• Settings related to time zone, language, and location
• Your mobile network provider and location data (based on your IP address)
• Usagestatistics of the App, such as your first login date or the number of visits
• Details regarding the products or services you browsed or utilized within the App
• Information on app response times, updates, and user interactions, like opened notifications

Data Sharing with Third-Party Service Providers

Engagement of Third-Party Services

To enhance the functionality and quality of our services, we engage with reputable third-party service providers. These providers play crucial roles in various aspects of our services, including data analytics, customer support, cloud computing, and other operational functions.

Confidentiality and Data Use

We share your personal information with these third-party service providers only to the extent necessary for them to perform services on our behalf. All third-party service providers are bound by strict confidentiality agreements. They are explicitly prohibited from using your personal information for any purposes other than those specified by us and are required to maintain the confidentiality and security of the data.

Ensuring Provider Compliance

Wecarefully select our third-party service providers and routinely assess their compliance with our data protection and privacy standards. This ensures that your personal information is handled responsibly and in alignment with both our policies and applicable data protection laws.

Access Criteria and User Eligibility

Eligibility and Account Management

At Zapmii Limited, we are committed to ensuring that our services are appropriately used and accessed. Here are the criteria for who can access and manage accounts within our services:

General Access: Any individual over the age of 16 is eligible to have their own account. Users over the age of 16 are deemed competent to manage their own account independently. Access for Minors: Parents or guardians are allowed to create and manage online access accounts for their children under the age of 16. This enables them to oversee and manage the interaction of minors with our services. Carer Access: Formal carers may be granted access to patients’ online accounts, provided there is adequate consent from the patient. Additionally, parties holding lasting power of attorney for health for a specific patient may apply to manage that patient’s online account if the patient is unable to do so themselves.

Protection of Minors

We do not knowingly collect any personal information from children under the age of 16. If you are under the age of 16, please do not submit any personal information through our services. If we learn that we have collected personal information from a child under the age of 16 without verification of parental consent, we will take steps to remove that information from our servers promptly.

Data Control

In handling personal information, Zapmii Limited acts as both a data controller and a data processor. When you enter into a data processing agreement with us, you assume the role of the data controller, and we become the data processor. This structure is designed to clarify responsibility and ensure the proper management and protection of personal information under data protection laws.

By setting these criteria and roles, we ensure that access to and management of accounts on our services are governed by clear, lawful, and ethical standards.

Use and Processing of Collected Information

In adherence to our privacy standards and data protection commitments, we ensure that all personal information Personal Information collected through the Website and the Mobile Application is handled with utmost care and legality. Here’s how we manage and utilize your Personal Information:

Collection of Information:

We do not knowingly collect any Personal Information from individuals under the age of 16. By agreeing to this Notice, you confirm that you are 16 years of age or older. If you have reason to believe that a child under the age of 16 has provided Personal Information to us, please contact us immediately so we can address the issue.

Roles and Responsibilities:

• Data Controller: We act as the data controller when we collect Personal Information that is necessary for providing access to and use of the Services. In this role, we determine the purposes and means of processing Personal Information.
• Data Processor: In instances where you submit Personal Information through the Services, we act as a data processor. This means we do not own or control the Personal Information and process it solely according to your instructions. Here, the user providing the Personal Information assumes the role of data controller.

Purposes for Processing Personal Information:

The information we collect may be used for the following purposes:

• Creating and managing user accounts
• Sending administrative information and product or service updates
• Responding to inquiries and offering support
• Soliciting user feedback to improve the Services
• Enforcing our terms, conditions, and policies
• Protecting against abuse and malicious users
• Responding to legal requests and preventing harm
• Operating and running the Services

Legal Basis for Processing:

Processing your Personal Information depends on how you interact with our Services, your location, and applicable legal bases, which may include:

• Your consent for one or more specific purposes
• Performance of a contract with you or pre-contractual obligations
• Compliance with legal obligations
• Tasks carried out in the public interest or official authority vested in us
• Legitimate interests pursued by us or a third party

Wemaycombine or aggregate some of your Personal Information to better serve you and improve our Services. Under certain legislations, we may process information until you opt out, without having to rely on consent or any other legal basis. We are committed to clarifying the specific legal basis that applies to the processing and whether the provision of Personal Information is a statutory or contractual requirement, or necessary to enter into a contract.

Managing and Disclosing Information

Managing Your Personal Information

At Zapmii Limited, we provide you with the ability to manage your personal information Personal Information. As our Services evolve, the Personal Information you can delete may change. You can delete your account or certain Personal Information by visiting the "Danger Zone" within the Profile page of your account on the Services. While you can remove your account or Personal Information, we may retain a copy of the unrevised Personal Information as required to comply with our obligations to affiliates and partners and for other legal purposes.

Disclosure of Information

To facilitate the services you request or to complete transactions, we may share your information with our affiliates, contracted companies, and service providers (collectively, "Service Providers") that help us operate the Services you use. We share information only with Service Providers who have privacy policies that are consistent with ours or who agree to abide by our policies regarding Personal Information. We do not share personally identifiable information with third parties outside of these necessary engagements, nor do we share any information with unaffiliated third parties.

Service Provider Engagements:

Service Providers are authorized to use or disclose your information solely to perform services on our behalf or to comply with legal requirements. They are given the information they need to perform their specific functions, and we do not authorize them to use or disclose the providedinformation for their own marketing or other purposes. We share and disclose your information with the following categories of Service Providers:

• Cloud computing services
• Communication and collaboration services
• Data analytics services
• Data storage services
• Performance monitoring services
• Product engineering and design services
• Social networks
• User authentication services
• Website hosting service providers

Legal Disclosures:

We may disclose any Personal Information we collect, use, or receive if required or permitted by law, such as to comply with a subpoena or similar legal process. When we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request, we will take appropriate actions to ensure the security and legality of our operations.

Retention of Personal Information

Duration of Retention

We retain your personal information ("Personal Information") for the period necessary to fulfill the purposes outlined in this Privacy Notice ("Notice"), unless a longer retention period is required or permitted by law. This includes retaining information as long as your user account is active, to comply with our legal obligations, to enforce our agreements, resolve disputes, and for other necessary operational purposes.

Post-Retention Use

After you update or delete your Personal Information, we may use any aggregated data derived from or incorporating your Personal Information. However, this aggregated data will not be used in a manner that personally identifies you. Once the retention period expires, Personal Information shall be deleted, and as such, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced.

Data Analytics

Analytics Tools

Our Services employ third-party analytics tools that help us monitor and analyze web traffic and user behavior on our Services. These tools may use cookies, web beacons, or other similar information-gathering technologies to collect standard internet log information and visitor behavior information in an anonymous form. The information generated about your use of our Services (including your IP address) may be transmitted to and stored by these third-party analytics providers on servers in other countries.

Purpose and Non-Personal Identification

The aggregated data collected is used to compile statistical reports on user activity, such as how often users visit our Services, what pages they visit, and for how long. We utilize these reports to monitor the performance and improve the functionality of our Services. We do not use these tools to track or to collect any personally identifiable information, nor do we associate any data gathered with any individual user.

Use of Cookies

Cookie Usage

Our Services utilize "cookies" to enhance and personalize your online experience. Cookies are small text files placed on your device by web servers that can only be read by the server that issued the cookie. Cookies are used to make your interactions with our Services smoother and more personalized, aiding in faster and more secure access, and tracking interactions within our Services.

Managing Cookies

While cookies enhance the user experience by retaining settings and offering personalized content, you have the option to decline cookies through your browser settings. However, declining cookies may affect the functionality of the Services and your user experience.

Social Media Features

Integration of Social Media Tools

Our Services may include social media features, such as the Facebook and Twitter buttons and the Share button (collectively, "Social Media Features"). These Social Media Features may collect your IP address, which page you are visiting on our services, and may set a cookie to enable the feature to function properly. Social Media Features may be hosted by their respective providers or directly on our Services. Your interactions with these Social Media Features are governed by the Privacy Notice of the company providing them.

Email Marketing

Subscription and Confidentiality

Weoffer electronic newsletters to which you may voluntarily subscribe at any time. We are committed to keeping your email address confidential. We will not disclose your email address to any third parties except as outlined in the "Use and Processing of Collected Information" section or as necessary to engage a third-party provider to send such emails.

Compliance and Unsubscription Options

In compliance with the CAN-SPAM Act, all emails sent from us will clearly state who the email is from and provide clear information on how to contact the sender. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails. However, please note that you will continue to receive essential transactional emails that relate to your account or services you have requested.

Links to Other Resources

Navigating External Links

The Services contain links to external resources that are not owned or controlled by us. We are not responsible for the privacy practices of these external resources or third parties. We encourage you to be cautious when you leave our Services and to read the privacy statements of each resource that may collect your Personal Information.

Google APIs Limited Use Policy

Compliance with Google's Policies

Zapmii's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This ensures that any data received through Google APIs is handled in compliance with the restrictions set forth by Google.

Information Security

Securing Your Data

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We employ state-of-the-art security measures to protect your personal information from unauthorized access, alteration, or destruction. These measures include advanced encryption technologies, intrusion detection systems, and regular security audits conducted by external experts. Additionally, we maintain reasonable administrative, technical, and physical safeguards designed to protect against unauthorized access, use, modification, and disclosure of Personal Information in our control and custody. We are committed to maintaining the highest level of data security and continually updating our practices to tackle emerging threats.

Acknowledgement of Security Limitations

However, no data transmission over the Internet or wireless network can be guaranteed as entirely secure. Therefore, while we strive to protect your Personal Information, you acknowledge that:

• There are security and privacy limitations of the Internet which are beyond our control.
• The security, integrity, and privacy of any information and data exchanged between you and our Services cannot be guaranteed.
• Any such information and data may be viewed or tampered with in transit by a third party, despite our best efforts.

Your Role in Security

The security of your Personal Information also depends in part on the security of the device you use to communicate with us and the security you use to protect your credentials. Please take appropriate measures to protect this information.

Data Breach Notification

In the unlikely event of a security compromise where Users’ Personal Information has been disclosed to unrelated third parties through external activities such as security attacks or fraud, we will take appropriate measures, including investigation, reporting, and cooperating with law enforcement authorities. We will promptly notify all affected individuals and relevant authorities within 72 hours, in accordance with GDPR requirements, if there is a reasonable risk of harm due to the breach or if notification is required by law. The notification will include detailed information on the nature of the breach, the potential consequences, and the measures being taken to address it. Notifications will be posted on the Services and sent through an email alert.

Changes and Amendments to this Notice

We reserve the right to modify this Notice at any time at our discretion. When we make changes, we will update the date at the bottom of this page and may provide notice in other ways, such as through the contact information you have provided. An updated version of this Notice will be effective immediately upon posting unless otherwise specified. Your continued use of the Services after the effective date of these changes will constitute your consent to the updated Notice. However, we will not use your Personal Information in a manner materially different from what was stated at the time it was collected without your consent.

Acceptance of This Notice

By using the Services and submitting your information, you acknowledge that you have read this Notice and agree to all its terms and conditions. If you do not agree to abide by the terms of this Notice, you are not authorized to access or use the Services.