MediTrust360 is operated by Mercado Connect Ltd. (“we”, “us” or “our”). This policy explains how we handle personal information when you visit our website, use our Android or iOS applications, or access our connected healthcare services.
1. Who handles your information
Mercado Connect Ltd. is responsible for information handled for its own website, communications and service administration. When a hospital or other healthcare organisation provides your access, that organisation may determine how your clinical records are used, while MediTrust360 processes information on its behalf. Its privacy notice also applies to the care it provides. Contact your provider about its clinical records or contact us for help identifying the appropriate organisation.
2. Information we handle
The information involved depends on the services you use and the information you or your healthcare provider supply. It can include:
- Account and contact information: your name, email address, telephone number, profile details and information needed to identify you or manage access.
- Health and care information: patient details, appointments, medical history, conditions, allergies, prescriptions, laboratory results and information exchanged with your care team through available services.
- Family and dependant information: details provided when you are authorised to manage another person’s care.
- Communications: enquiries, support requests, comments and the name and email address you submit when subscribing to health insights. Comments submitted for publication may be visible to other website visitors.
- Technical information: connection and request information, such as IP addresses, browser or device information, and logs generated when accessing our services.
Information comes from you, authorised people acting for you, participating healthcare providers and the systems used to deliver the service. Please only provide another person’s information when you have authority to do so.
3. How information is used
We use information to administer access, deliver the services you request, support care coordination, respond to enquiries, send service communications, maintain service reliability and investigate misuse. If you subscribe to health insights, we use your subscription details to send those emails.
The applicable basis for processing depends on the service and jurisdiction, including providing a requested service, meeting legal obligations, legitimate operational interests where permitted, or consent. Health information requires additional protections and an applicable basis for processing sensitive data.
4. Sharing and service providers
Information may be shared with healthcare professionals and organisations involved in your care, people you authorise, and service providers supporting functions such as hosting, communications and technical support. The information shared should be limited to the purpose of the service and subject to appropriate confidentiality, security and data-protection obligations.
Information may also be disclosed where required by law or necessary to address fraud, security incidents or threats to safety. A healthcare provider’s own notice explains disclosures it makes for treatment and its other responsibilities.
5. Device permissions and website storage
Where a mobile feature requests access to a device capability, review the purpose shown with that request before granting permission. You can manage permissions in Android or iOS settings. Disabling a permission can prevent the related feature from working.
The website uses session cookies and related security mechanisms to support forms and protect requests. You can manage cookies through your browser; blocking them may affect website functionality.
6. Security and international processing
Our approach includes controlled access and technical and organisational safeguards appropriate to the service and the sensitivity of the information. No system can guarantee absolute security. Keep your account credentials private and contact us if you suspect unauthorised access.
Hosting and support arrangements can vary by healthcare deployment. Where information is processed outside your country, applicable transfer requirements and safeguards must be observed. Contact us or your provider for information about the arrangements relevant to your service.
7. Retention
Retention depends on the type of information, the purpose for which it is held, the healthcare provider’s instructions and applicable obligations. Account and support information is retained as needed to operate the service and resolve outstanding matters. Clinical records may need to be retained under healthcare record-keeping requirements even after an account is closed.
Legal obligations, disputes, fraud prevention and security investigations may require some information to be kept longer. Information that is no longer needed should be deleted or anonymised. Contact us for the retention period applicable to your account or records.
8. Your choices and account deletion
Depending on applicable law, you may request access to, correction of, a copy of, or deletion of your personal information, and may have rights to restrict or object to processing. Where processing relies on consent, you can withdraw it; this does not affect processing already carried out lawfully.
To request deletion of your MediTrust360 account and associated personal information, email security@meditrust360.com with the subject “MediTrust360 Account Deletion Request”. Include the email address or telephone number associated with your account and, if applicable, your healthcare provider’s name. Do not send passwords, identity documents or medical records in your initial email.
We may need to verify your identity and coordinate with your healthcare provider. Your request can cover account information and other data we control; clinical records or information subject to a retention obligation may be retained as described above. Ask us to explain any information that cannot be deleted and the applicable reason and retention period. Uninstalling the app does not itself delete your account.
You can unsubscribe from health-insight emails using the unsubscribe link in an email. For privacy concerns, contact us below. You may also complain to the data-protection authority responsible for your location.
9. Children and dependants
Where services support a child or dependant, their information should be provided and managed by a parent, guardian or other appropriately authorised person, subject to applicable law and the healthcare provider’s requirements. Contact us or the provider if you believe a child’s information has been submitted without appropriate authority.
10. Changes and contact
We may update this policy when services or data practices change. The date above identifies the latest revision. Material changes may require additional notice or consent under applicable law.
For privacy questions, requests or concerns, contact Mercado Connect Ltd., the operator of MediTrust360, at security@meditrust360.com. You can also visit our contact page.