Legals & Data

Contracts & Policies

Terms of Use These Terms of Agreement govern personal User Accounts. Terms of Service These Terms of Agreement govern Team Accounts and are agreed to by Team Owners. They include the Data Processing Agreement (DPA). Privacy Policy One Systems is committed to protecting and respecting your privacy. This notice sets out the basis on which any personal data we collect. Essential cookies There are some cookies that we have to include in order for certain web pages to function. For this reason, they do not require your consent. - indiebase_cookie_consent 1 year 1 month 1 day Used to store the user's cookie consent preferences. - indiebase_session 2 hours Used to identify the user's browsing session. - XSRF-TOKEN 2 hours Used to secure both the user and our website against cross-site request forgery attacks. We do not currently use any non-necessary cookies. Data Protection Policy Data protection legislation regulates “the processing of information relating to individuals, including the obtaining, holding, use or disclosure of such information” by data controllers and processors, such as Medic One. It requires Medic One to process, use and store the personal data relating to all “data subjects” in a way that is fair, proportionate, secure and justified.

Data Security

Data security  Data protection by design and default is one of our core competencies and we follow industry best practices when deploying our platforms. We are compliant with the NHS Data Security and Protection Toolkit, Cyber Essentials accredited, ICO registered and work with GDPR practitioners to ensure we meet information governance requirements. We maintain a strong security posture and work with partners in information security to have all of our applications independently penetration tested and quality assured. Data Storage All data is stored within the UK by AWS. NHS Data Protection and Security Toolkit (DPST) Exceeded rating (ODS: 8J465) Penetration Testing We undergo annual penetration testing on all external aspects of Medic One. These tests are performed by 2 | Sec, a CREST accredited cyber security partner.  NHS Secure Email DCB1596 certified on an annual basis (NHS secure email standard) CE Plus Certified by IASME GDPR & DPA Full GDPR and DPA compliance