Dosium Holdings Limited

We provide software to enable healthcare organisations prescribe medications more accurately.

Privacy Policy

Transparency in how we handle personal data to deliver our software is fundamental to proving our trustworthiness.

Who are we?


We are Dosium Holdings Limited. We provide software to enable healthcare organisations toprescribe medications more accurately. Our company details and our registration with theUK’s Data Protection Regulator (the ICO) can be found here.

Ensuring the security and privacy of your data is central to our mission. We believe it's notmerely about seeking your trust but demonstrating our reliability. Transparency in how wehandle personal data to deliver our software is fundamental to proving our trustworthiness.

This page tells you what we do. Please see the following groups below to see how we use data about you:

  • Health and Care Professionals
  • Prospective buyers from healthcare organisations
  • User / Market Research Participants
  • Job Applicants and Prospects


This notice is subject to periodic updates which will be made available on the Dosium website.

Roles


Health and Care Professionals

Dosium is a clinical decision support software provider for healthcare organisations like your employer. If you’re a member of staff of an organisation that uses Dosium software, we receive information about you in the following ways:

  • Account registration for Dosium solutions
  • if you contact us directly, for example through email


Account registration

Many clinical users won't need individual Dosium accounts since access to our solutions is granted through your employer. However, if you need a personal account, when you create one with Dosium, we gather and associate the following information with a unique identifier in our system:

  • Name
  • Email


Why: This information is collected based on the legitimate interest of associating your profile with your organisation. Subsequently, we act as a data processor in managing your data.


Ongoing use for your work in a healthcare organisation

We supply software products to healthcare organisations, which are the "Data Controllers'' responsible for the usage of your information within our platform. They supply us with data and dictate its utilisation, positioning us as the "Data Processor". A detailed contract with your healthcare provider outlines our data handling and security measures. Furthermore, we conduct passive monitoring of our platform usage to ensure compliance with our agreements with healthcare providers and our acceptable use policy.


Email, social media or telephone engagement with us as an actual or prospective Dosium software user

When you contact us over social media, email, or via other routes, we may collect the following information about you:

  • Name
  • Email
  • Telephone number
  • Social media handles
  • Anything else you share with us in our engagement


Why: We collect this information on the basis of our legitimate interest to respond to you.


Prospective buyers from healthcare organisations

If you work for a commissioner in the NHS or someone who buys software for healthcare providers.

When we speak to you about our software and / or about prospective deals for our services, we will collect the following information about you:

  • Name
  • Age
  • Email
  • Content of email communications with you and metadata (including delivery status)
  • Any additional information you provide to us through our communications with you


Why: we collect this information on the basis of our legitimate interests to discuss procurement and purchasing decisions of our products by your organisation.


User/Market Research Participants

We aim to create software that meets the needs of our users. This involves extensive dialogue with healthcare professionals to grasp their requirements and preferences. The insights gained from this research are used to enhance our current offerings and guide the development of new products.

When you participate in our research, we will collect the following information about you:

  • Name
  • Age
  • Email
  • Any additional information you provide to us through surveys, interviews or other communications with us


Why: we gather this information based on our legitimate interest in ensuring our products meet their intended purpose and align with the expectations of healthcare professionals and patients. Alternatively, we may collect it with your explicit consent, obtained at the start of any research initiative. In certain cases, we might anonymise your personal data to prevent it from being linked back to you, and then use this anonymised data indefinitely without further notification


Job Applicants and Prospects

When you apply for a role with us:

If you apply for a role at Dosium, we will collect the following information about you:

  • Name
  • Telephone number
  • Email address
  • Employment history and other data in your CV or otherwise submitted to us
  • Assessments completed by you as part of the application process
  • Feedback about you from our staff and your referees


Why: We gather this information driven by our legitimate interest in evaluating job applications and taking preparatory steps towards establishing an employment contract with you. Additionally, we collect this data to fulfil our legal obligation of verifying an applicant's right to work.


Email or social media contact

If you contact us over email or social media about a job application, we will also collect the following information about you:

  • Name
  • Email
  • Telephone number


We may hold your data as a potential employee to enhance our recruitment process and notify you of future opportunities.


General Questions

How do we collect information?

We may collect information about you from a variety of sources:

  • Email, telephone, social media and in-person interactions we have with you
  • From other organisations within the health system
  • Cookies on our website
  • Publicly accessible sources including your employer’s website or your social media profile


How long do we retain your personal data?

Our data retention periods for different groups are set out below. If you have questions about any categories of data not provided below, please contact info@dosium.com.

Type of Data

Retention Period

Health Care and Professional

As long as necessary for the purpose of selling or providing our service, subject to your rights.

Prospective buyers

Up to 48 months after last contact with your organisation.

User/Market Research Participants

For up to 48 months after research has been concluded, unless otherwise stated in the project’s information and consent material.

Job Applicants and prospects

For prospects, we will retain your information for up to 24 months. For job applicants, we retain your application information for up to 24 months after any hiring process you are directly involved in has been completed.


Which third parties are involved in processing your data?

The parties we may share different groups’ data with are set out below. If you have questions beyond this, please contact info@dosium.com.

Group

Parties your information may be shared with

Health Care and Professional

We have contractual agreements in place with healthcare providing organisations, which govern and protect the data about you when you use our software.If you contact us directly or use our QATron App, your data may be securely stored in the software service providers of our data storage, email, office, and social media systems.We may share your data with regulators, authorities and enforcement agencies if we’re under a duty to comply with any legal obligation or enforce our terms and conditions.

Prospective buyers from healthcare organisations

Your data may be stored by our email, CRM software, and storage providers.

User/Market Research Participants

Your data may be stored by our email, productivity, design, communication and storage providers.

Job Applicants and prospects

Your data may be stored in our recruitment platform provider well as in our email, productivity, design, communication and storage providers.


What rights do you have under data protection laws?

You have various rights under data protection law in relation to the data that we control about you. Please note that if you are a member of staff in an organisation that uses Dosium solutions, you should contact the organisation concerned (the data controller) to understand your rights and exercise any that you have. If you wish to exercise any of these rights or have any questions, please contact info@dosium.com.

  • Access: You can request access to and obtain a copy of your personal data
  • Rectification: You can correct incomplete or inaccurate data we hold about you
  • Erasure: You can ask to erase personal data we hold about you
  • Restrict: You can ask us to restrict how we handle your personal data
  • Portability: You can ask us to transfer your personal data to a third party
  • Object: you can object to how we’re using your personal data


You also have the right to lodge a complaint with us or the Information Commissioner's Office, the supervisory authority for data protection issues in England and Wales.