1. Application of this notice

1.1 This Privacy Notice applies to personal data controlled and/or processed by Exstent Limited of 12 Miller Court, Severn Drive, Tewkesbury, Gloucestershire, GL20 8DN, United Kingdom.

1.2 In this Notice, the term “personal data” means any information or combination of information that could be used to identify a living individual.

2. What information do we collect?

2.1 When you visit our website and wish to make contact with us, we may ask you to supply various items of information. These may include:

(a) personal contact details such as name, address, telephone number and e-mail address;

(b) your job title and organisation;

(c) your date of birth; and

(d) your interests in relation to the products and services we supply.

2.2 Separately, we also collect your personal data when we are asked to manufacture an ExoVasc® personalised external aortic root support (PEARS) implant. This happens in two stages:

(a) Your hospital or medical practitioner may ask you to complete a consent form in order to authorise release to us of your cardiac CT scan data. This form asks you to supply your name, date of birth, hospital name and surgeon’s name.

(b) We then receive your cardiac CT scan data from the hospital in order to enable us to process your CT images and manufacture the implant. In addition to the information described in the previous paragraph, the hospital will also supply us with your hospital ID number.

3. What is our legal basis for processing your personal data?

We normally process your personal data on the basis of your consent. However, we also have a legitimate interest in processing your personal data in order to maintain proper records.

4. How do we use your personal data?

4.1 We use your personal data:

(a) to communicate with you;

(b) to manufacture an ExoVasc® PEARS implant;

(c) to deliver information about us and the work we do; and

(d) to maintain records of work done.

5. To whom do we disclose your personal data?

It is not our practice to disclose your personal data to any other person or organisation unless we have your express consent or where it is necessary to do so in the course of the implant manufacturing process. Where we engage subcontractors during this process we may need to disclose to them your name, date of birth, hospital patient ID number and CT scan data, in order to ensure that the implant is manufactured to the correct requirements. All subcontractors are under an obligation to keep this information strictly confidential.

6. Do we transfer your data outside the United Kingdom?

We will only transfer your personal data outside the UK where we have your consent, for example where we are required to deliver an implant to a hospital located in another country.

7. How long do we store your personal information?

We retain and store your personal data in accordance with relevant regulations and for as long as we have a legitimate business purpose to do so. We will retain your contact information and treatment details while you have a continuing relationship with us. Thereafter it is our normal practice to retain this information for a period of at least fifteen years in order to comply with statutory retention requirements and to be able to respond to any subsequent queries.

8. Your rights

8.1 You have the following rights in relation to your personal data:

(a) The right of access to your personal data

(b) The right of rectification of inaccurate data;

(c) The right of erasure of your personal data where there is no longer any legitimate basis for processing it (sometimes known as the “right to be forgotten”); and(d) (in the circumstances provided for in applicable law) the right to restrict processing, object to processing, and the right to data portability.

8.2 Where the processing of your personal data is based on your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on your consent before its withdrawal.

8.3 If you wish to exercise any of the rights set out above, please contact enquiries@exstent.com.

8.4 If you wish to enquire or complain about the processing of your personal data, please contact enquiries@exstent.com. You also have the right to lodge complaints about the processing of your personal data with the UK Information Commissioner.

9. Changes to this notice

We may update this Notice from time to time, so please visit our website (www.exstent.com) periodically and review the Notice for changes.

10. How can you contact us?

You may contact us at the address shown above, or alternatively by email to enquiries@exstent.com.

Download a copy of our Privacy statement