Privacy Notice

Xploro is committed to protecting your privacy.

At Xploro we take protecting your privacy seriously. This notice explains what to expect when we collect information through Xploro.

We will explain:

• Who is Xploro ?
• What data do we collect and how do we use it?
• The Xploro Website:
• — Statistical data
• — Google Analytics
• — Contact Form
• — Storing and sharing data
• The Xploro App
• — Logging in
• — Using the app
• — Storing and sharing data
• The Xploro Advisory Group
• Lawful Basis for Using Your Data
• What are my rights?
• — Your right of access
• — Your right to rectification
• — Your right to erasure
• — Your right to restriction of processing
• — Your right to object to processing
• — Your right to data portability
• How long will my personal data be kept?
• How is my personal data secured?
• Can I complain about how you are using my personal data?

Who is Xploro ?

Xploro is a mobile application that uses augmented reality, gameplay and artificial intelligence to deliver health information to patients, in a way which makes them feel empowered, engaged and informed, whilst having fun at the same time.

We work closely with our sister company Corporation Pop, and their team of expert designers, project managers and developers to design and develop our app.

Xploro is a Limited company registered in England & Wales - our company number is 11761110

Our registered address is:

21-23 Shudehill,
Manchester,
U.K.
M4 2AF

Xploro is a registered trademark

What data do we collect and how do we use it?

We collect and use a number of different types of data, some which is personal data and some which isn’t. All personal data is subject to an internal set of policies and procedures which are designed to make Xploro GDPR compliant.

The types of data we collect is detailed below along with where we collect it:

The Xploro Website:

Statistical data

Xploro collects information about website visitors using statistics tools. This information includes (but is not limited to) the date and time of visit, browser name and version, IP address, and referring website. This information is used for evaluating and further developing our website for digital audiences. No personal data is collected via statistics tools.

Google Analytics

We use Google Analytics to let us know what age and gender our website users are, along with the interests they express through their online travel and purchasing activities. We will use the data provided by Google Analytics to develop our website and content around our users’ interests. The data is provided in aggregate and is not personally identifiable to us. You can opt-out of Google Analytics using their add-on to disable tracking by Google Analytics and you can see Google’s privacy notice here.

Contact form

When you get in touch with us through the contact form on the Xploro website the information you enter is emailed to us directly. Your message is not stored on a database however it may be retained, as an email, along with your email address and any other information you include in it, in order that we can contact you again in the future.

Storing and sharing data

Xploro does not store, rent, sell or otherwise share information about anyone using our website with any other business, organisation or individual. The only exception to this is where we are legally obliged to do so to comply with a current judicial proceeding, a court order or legal process served on our website or company.

The Xploro App:

Logging in

Someone with parental responsibility for the user will receive an invitation and login code from the health authority the patient is engaging with. When accepting this invitation they will enter their own email address and the patient’s preferred name. No other personal data will be processed at login.

By accepting this invitation they are consenting, on behalf of the user, to the processing of personal data summarised below.

Using the app

The Xploro app can collect personal data in the following places:

Users and clinicians can add events to a shared calendar which includes appointments for treatment, visitors, check-ups and anything else they choose. This information is used by patients to record their activities during their treatment programme.

Users are regularly asked to indicate their mood. This is recorded as an emoji and is often linked to treatments and procedures, and the time of day they are asked.

Storing and sharing data

Xploro acts as a Data Processor for the health authority which invites patients to use the app. The health authority in question is the data controller and as such we share data from the app with each other. We have contracts in place to ensure that all personal data we share is done so securely and in accordance with GDPR rules. Furthermore Xploro has policies & procedures which are designed to ensure any data sharing is done securely and only when necessary.

Xploro is based in the European Union. When we work with health authorities in countries outside the EU our contracts include standard contractual clauses to protect the rights of individuals whose personal data is transferred. They contain contractual obligations on companies and their EU partners and are approved by the European Commission.

Xploro does not store, rent, sell or otherwise share information about anyone using the app with any other business, organisation or individual. The only exception to this is where we are legally obliged to do so to comply with a current judicial proceeding, a court order or legal process served on our website or company.

The Expert Advisory Group