This Non-Disclosure Agreement regards the handling of potentially sensitive information on the part of Us (Red Balloon Web Limited trading as Market Your Clinic Online) for the Client (anyone for whom We are carrying out professional work, in particular IT and marketing work, and in particular medical clinics).
Confidential Information is defined as any information held by the Client to which ordinary members of the public would not normally have access. This includes:
Medical information regarding patients
The names, addresses and contact details of patients or other 3rd parties
Financial and business information regarding the Client
Although our activities are mainly confined to marketing and for most clients it will be unnecessary for us to handle Confidential Information, there are frequently occasions where it is necessary for us to have access to patient data or to potentially sensitive business communication.
These occasions typically occur when either:
We have access to the Client’s booking system, such as Cliniko or similar, for the purposes of administration and integration
We have access to the Client’s emails for the purposes of server migration, setup or administration.
In any case where We are privy to Confidential Information We agree to abide by the following terms:
We will not at any time, during or after our affiliation with the Client, disclose any Confidential Information to which we have had access, whether in a personal or business context.
We will aim not to access Confidential Information unless absolutely necessary, and access only the minimum amount of data necessary to allow us to carry out our work correctly.
We will not access Confidential Information for which we have no legitimate business purpose.
We will not contact patients or other 3rd parties using contact details from Confidential Information without the express permission of the Client and it forming part of our legitimate activities to carry out our work.
We will take all reasonable steps to ensure the confidentiality of logins and passwords which allow the access of Confidential Information.
If at any time we have reason to believe such logins and passwords have been compromised, we will take all steps necessary to change and resecure access immediately, and notify the Client of the potential data breach.
We will ensure that any individual or business carrying out work on our behalf, including freelancers or subcontractors, also agree to these terms in writing.
