Privacy policy

This Privacy Policy governs your use of the mobile software application "Know Your DAS" ("Application") and the Know Your DAS website (www.knowyourdas.org.uk) ("Website") that are developed and owned by the National Rheumatoid Arthritis Society ("NRAS"), a private company limited by guarantee. Registered in England and Wales (no. 7127101). Registered charity in England and Wales (no. 1134859) and Scotland (SC039721).

The Application has been developed to promote the importance of measuring DAS28 and is aiming to help those living with rheumatoid arthritis to begin self-measuring and tracking their disease.

NRAS is the Data Controller. Information may be collected and stored by NRAS' appointed agencies (the Data Processors).

What information does the Application and Website obtain and how is it used?

User Provided Information

The Application and Website obtain the information you provide when you register with us (Personal Information) including your name, email address and password which will be used for managing your account. We may also use this information to send you other communications about the work of NRAS and our services if you opt in to receiving such communications when you register.

You may choose to use certain features of the Application that will allow you to input other information with respect to your health (Health Information), such as the medications you take, how often you take your medication, the frequency you would like us to send you reminders to take your medication and whether you take your medication. We will send you reminders to take your medications in accordance with this information. You may also choose to record pain killer use, swollen and tender joint scores and notes about how you are feeling.

Health Information submitted through the app is stored in an encrypted form which means it is not individually identifiable. NRAS may use anonymised, aggregated Health Information to monitor usage of the Application and for statistical analysis.

You may use the Application to create a report of your Health Information and you may choose to share this with your healthcare professional, family and friends. While we take great care to keep your Personal Information and Health Information confidential and secure, when you share your Health Information with others, it is at your discretion and is solely your responsibility. You should exercise caution when disclosing Health Information in such ways, to ensure only the intended recipients have access to your Health Information and that they treat it confidentially.

Your Personal Information will not be combined with other information and will not be used for other purposes, except as explained in this policy.

We recommend that your password protect your mobile device upon start-up to protect your Personal Information.

We may use your Personal Information (1) to identify your account for purposes of providing you with customer services and to respond to your requests, (2) to provide you the specific services you select in the Application (including the requested reminders)

If you opted in to receiving further information from NRAS when you registered, we may use your Personal Information to contact you from time to time to provide you with important information, required notices and marketing promotions.

Automatically Collected Information

The Application and Website may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile devices unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browsers you use, and information about the way you use the Application. This data is used to monitor the technical functioning of the Application and Website, statistically monitor usage of the Application and Website, and this data is used to improve the overall quality of our users' experiences.

Cookies

A cookie is a small data file that certain websites write to your hard drive when you visit them. A cookie file can contain information such as a user ID that the site uses to track the pages you've visited. The only Personal Information a cookie can contain is information you supply yourself. A cookie can't read data off your hard disk or read cookie files created by other sites.

Some parts of the Website use cookies to track user traffic patterns. We do this in order to determine the usefulness of our website information to our users and to see how effective our navigational structure is in helping users reach that information.

Where is my data stored?

NRAS store your data on 3rd party managed servers housed within the European Economic Area ("EEA"). NRAS sometimes collaborates with third parties outside of the EEA. In accordance with European Law, we will not transfer your data outside of the European Economic Area (EEA) without ensuring an adequate level of protection is guaranteed and will only share your data in ways that are described in this Privacy Policy.

Does the Application or Website collect precise real time location information of the device?

This Application and Website do not collect precise information about the location of your mobile device or computer.

Do third parties see and/or have access to information obtained by the Application or Website?

NRAS will not sell or rent personally identifiable information to third parties. Aggregated, anonymized data is periodically transmitted to NRAS appointed agencies to help us improve the Application and our service. We will share your information with NRAS appointed agencies only in the ways that are described in this Privacy Policy. We may disclose User Provided and Automatically Collected Information as required by law, such as to comply with a subpoena, or similar legal process; when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request; with our trusted services providers who work on our behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this Privacy Policy.

If NRAS is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Website (www.nras.org.uk) of any change in ownership or uses of this information, as well as any choices you may have regarding this information.

What are my opt-out rights?

Please note that some or all of the User Provided Information may be required in order for the Application to function properly.

You can opt out of sharing User Provided Information with NRAS by using the Application without logging in. If you haven't logged in, data is only stored locally on your device. You can delete all data stored on your device by selecting "More" in the Menu and selecting "Delete all data on this device".

You cannot opt out of the Automatically Collected Information collected by the Application. If you do not wish to share this information, you must exit the Website and uninstall the Application. Uninstalling the Application also deletes any information stored on your device. You may use the standard uninstall processes as may be available via your mobile device's operating system or via the mobile application marketplace that you downloaded the Application from.

If you prefer not to receive cookies while browsing the Website, you can set your browser to warn you before accepting cookies and refuse the cookie when your browser alerts you to its presence. You can also refuse all cookies by turning them off in your browser, although you may not be able to take full advantage of the features of the Website if you do so. You do not need to have cookies turned on to use our website, except to access certain pages that may require a login and password.

Data Retention Policy, Managing Your Information

We will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. We will retain Automatically Collected information for up to 24 months and thereafter may store it in aggregate.

You can delete your account at any time by selecting "Delete Account" on the Profile section of the Know Your DAS website.

To delete your account from the Application, your device must be connected to the internet. Select "Manage Account" from the More section of the Menu and then select "Delete Account" which will take you to the "Delete Account" section of the Website. This will log you out of the Application on all devices on which you have it installed the next time you open the application and have an internet connection. Deleting your account will permanently delete all data stored on your devices and on the NRAS servers.

You can also request to delete your account by emailing knowyourdas@nras.org.uk.

Children

We do not use the Application or Website to knowingly solicit data from or market to children under the age of 16. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at knowyourdas@nras.org.uk. We will delete such information from our files within a reasonable time.

Security

We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect information we process and maintain. For example, data is stored in an encrypted format and we limit access to this information to authorised employees and contractors who need to know that information in order to operate, develop or improve our Application. Please be aware that, although we endeavour to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

Changes

This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes to our Privacy Policy by posting the new Privacy Policy here and informing you via email or text message. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed Approval of all changes.

Your Consent

By using the Application or Website, you are consenting to our processing of your information as set forth in this Privacy Policy now and as amended by us. "Processing," means using cookies on a computer/hand held device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining and disclosing information, all of which activities will take place within the European Union (EU)

Contact us

If you have any questions regarding privacy while using the Application or Website, or have questions about our practices, please contact us via email at knowyourdas@nras.org.uk.