Data Privacy Notice
Oxus Technologies Limited (“Oxus”) is committed to protecting the privacy and security of your personal information. This notice describes how we collect and use your/your child’s personal data submitted to us online in accordance with the Data Protection Act 2018 and associated data protection legislation.
YOUR DATA AND HOW WE USE IT
During the course of the IB-201P study you were asked to keep a Subject Diary to report on certain aspects of your/your child’s life while enrolled in the study. You will complete this Diary by accessing a unique link that will be sent to you via e-mail together with an embedded login token for each diary day. Oxus, acting on behalf of the study Sponsor, ILiAD Biotechnologies (“ILiAD”), is providing the support for this and, therefore, will collect and store your/your child’s personal information that is entered in the Diary. The information collected via the Diary will be key-coded (pseudonymized), meaning that you/your child would only be identified by a code. However, please note that Oxus will need your e-mail address in order to send you the unique link for each diary day and reminders to complete the Diary. There is a possibility that your e-mail address may reveal your identity. In any event, Oxus will maintain your/your child’s confidentiality.
DATA CONTROLLER
ILiAD, the Sponsor of the IB-201P study, is the “data controller” for the information that you provide to us. This means that ILiAD decide how to use the information and are responsible for looking after it in accordance with the Data Protection Act 2018. Oxus is a “data processor” acting on behalf of ILiAD.
ACCESS TO YOUR DATA
Access to your personal data within Oxus will be provided only to those staff who need to view it as part of their work.
WHERE WE STORE YOUR DATA
We store the data we collect electronically, on secure servers within the UK. Your/your child’s personal data recorded in the Diary may be accessed by the study doctor or site study staff, by study monitors and auditors who work for ILiAD or its authorized agents, or by national and international regulatory authorities involved in keeping the research safe for participants. These people will only have access to key-coded (pseudonymized) data. We will not share your directly identifying personal data (e-mail address) with them or any other third parties.
RETAINING YOUR DATA
We will retain your/your child’s data only for as long as necessary in relation to the purposes for which it was collected in the IB-201P study, unless otherwise required by legal or reporting requirements.
YOUR RIGHTS
To the extent that there is no conflict with the purpose of the study your/your child’s data was collected for, you have the right to access the information that we hold about you/your child (your/your child’s ‘personal data’) and, if applicable, ask for corrections. You may have the additional rights to object to how your/your child’s information is being handled, request deletion of your/your child’s data, or restrict certain aspects of the processing of your/your child’s information.
You also have the right to complain about how your/your child’s information is handled to a supervisory authority that is responsible for enforcing data protection law. In the UK, this is the Office of the Information Commissioner.
DATA PROTECTION OFFICER
If you have any questions, comments or complaints related to the personal data you submitted to Oxus, or you wish to exercise your rights, you should firstly contact your/your child’s study doctor who will be able to direct your query where appropriate to staff responsible for data protection at ILiAD Biotechnologies or site, including the site Data Protection Officer.
