Tuune Corporate Website
Who we are and our role in processing your data
We are Tuune, the trading name of Uniq Health Ltd. We are a limited company with registered address 82b High Street,
Sawston, Cambridge, England, CB22 3HJ and registration number 10972015.
We are registered with the ICO as a Controller under number: ZA750233. If you have any questions about this Privacy Notice, or the way in which we handle your personal data, you can contact us on help@tuune.com.
Tuune is a data-driven personalized female healthcare platform. We are creating a new type of healthcare for women with a focus on whole health, we are taking into account aspects of female health that weren’t considered before. We educate and empower women about hormones and their relationship to their overall health such as cardio-metabolic, mental and bone health. Our proprietary algorithm matches women with the right medication based on their side effect profile and medical history.
This Privacy Notice describes how we process personal information in connection with both the provision of our Services though our website, mobile apps, products, software and other platforms, as well as how we process personal information in our day-to-day business activities.
Tuune is a data ‘Controller’ under the GDPR. That means we are trusted to look after and deal with your personal information in accordance with this policy. We determine the ways and means of processing and must therefore be accountable for it. We handle personal data with care and only process the necessary data to provide you a high quality service, to ensure appropriate clinical care and for research purposes.
Personal Data that we process
To understand what personal data we process, click on the link that best describes your relationship with us:
Beta Tester and Patient Privacy Notice
Data that we process and how we use it
When you signed up to be a Beta Tester, you would have provided us with your contact details, information
relating to your health and lifestyle including past, previous and current experiences and conditions s
uch as hormonal information and other genetic or biometric information.
This data is used to assess your health needs and provide you the most suitable clinical recommendations.
This is done via algorithms we have developed with a clinical team.
Your email address is only used to contact you for information relating to Tuune’s system, or if you
have consented, to keep you up to date with our services and research.
We pseudonymise or anonymise data whenever possible. Once data is anonymised,
it falls out of the remit of data protection regulations.
If you request a prescription, then a summary of your request and relevant aspects of your health data
are sent to our Third Party pharmacist prescriber, who will review and make a final decision.
If you opt to be referred to one of our clinical partners, then a summary of your health data will be sent to the clinician.
If you purchased from us then we collect your cardholder details, number and any other data needed
to facilitate transactions when you purchase products on our site. We use Stripe to ensure payment transactions are completed safely.
There is certain data that we are obliged to collect based on the medical device regulatory requirements.
This is to ensure that the service we offer is safe and that we abide by the medical device regulation.
Because you visited our website, we will have collected information via cookies and other similar tracking
technologies if you consented to us placing these cookies on your device. If you did not then we do not collect this data.
This information is a record of data about all visitors who use the Site and interact with the Services
and we will store this information. These logs contain IP address information, type(s) of operating system(s)
you use, the date and time you visited the site, and information about the type of device you use to connect
to the Services and the Site pages you visited.
See our for more information.
Our Lawful Basis for Processing
When you provided your email to join the wait list, we use legitimate interest to process this data.
Your health data is only ever processed using explicit consent. This includes when we transfer your data to the pharmacy or to the clinical partners.
Where we process your data for the purposes of Post Market Surveillance (PMS) against medical device regulatory requirements, then this is a legal obligation for us.
When you purchase from us, we process your transaction data under the lawful basis of contract.
We only drop cookies on your device, and process the associated data if you have given your consent.
Data Sharing and Transfers
Like most companies, we use a number of other companies as part of our data processing,
for example our Cloud technology services. We have Data Processing Agreements in place with these providers.
Where data is transferred outside of the EEA, we ensure that appropriate protection and mechanisms are in place,
for example Standard Contractual Clauses and due diligence. We do not sell your data to anyone.
Retention Period
As a beta tester/patient we have created a patient record for you and as such we are required by law
to keep that record for up to ten years consistent with our obligations under the GDPR,
the EU Medical Device Regulation and the EU Product Liability Directive.
Where you signed up as a beta tester, but have not yet created a patient record, we keep your email
until you ask us to delete it, or if we have not had interaction with you within the last year.
Your transaction details, i.e. what you bought, how much and when, are held for 7 years.
The actual card details are not held by us at all but by Stripe and retention is defined by their own policies.
Employee Privacy Notice
If you are a Tuune employee, please check the internal employee handbook for your fair processing notice,
which outlines how we process your data.
Potential Employee Privacy Notice
Data that we process and how we use it
As a potential employee we hold the following data on you:
Contact details, CV, interview notes and email correspondence with you.
If you are successful in your application, then you will fall under the Employee Privacy Notice going forward.
Our Lawful Basis for Processing
As you are looking to enter into a contract with us, we process your data under the lawful basis of contract.
If you are unsuccessful in your application then we retain your data under legitimate interest,
in case another role comes up that you are suitable for in the following 12 months.
Data Sharing and Transfers
Like most companies, we use a number of other companies as part of our data processing,
for example our Cloud technology services. We have Data Processing Agreements in place with these providers.
Where data is transferred outside of the EEA, we ensure that appropriate protection and mechanisms are in place,
for example Standard Contractual Clauses and due diligence. We do not sell your data to anyone.
Retention Period
We retain your data until you become an employee, at which point your data is moved to your employee file
and retained in line with the Employee Fair Processing Notice in the employee handbook, issued to you as part of induction.
We retain the data of unsuccessful candidates for 12 months after the job vacancy they applied for has been filled.
Investor Privacy Notice
Data that we process and how we use it
As an investor or private shareholder in Tuune, we hold your contact details. This data would have been sourced from you directly.
Our Lawful Basis for Processing
Our lawful basis for processing your data is a legal obligation; we are legally obliged to document who the owners of our business are.
Data Sharing and Transfers
Like most companies, we use a number of other companies as part of our data processing, for example,
cloud services and technology services. We have Data Processing Agreements in place with these providers.
Where data is transferred outside of the EEA, we ensure that appropriate protection and mechanisms
are in place, for example, Standard Contractual Clauses. We do not sell your data to anybody
and we do not share it with anyone other than our contracted processors.
We share your contact details in line with our regulatory requirements, so will be listed
in official documents such as company filings and would be used in any potential data room.
Retention Period
As a shareholder/investor we hold your information for as long as we are legally required to do so.
Website Browsing Privacy Notice
Please view our cookie policy .
Tuune’s User Testing Consent Policy
Before you start using Tuune 360, we need to record your consent. We do this to ensure
we are complying with medical regulation guidelines. Please read through the following
to ensure you are happy to provide your consent.
Clinical disclaimer
The report and recommendations provided as part of Tuune user testing are unvalidated and should
not be used for clinical purposes. A clinician should be consulted before taking any action.
Tuune questions
As part of testing, Tuune 360 will ask you questions with regard to:
- Medical Eligibility Criteria for Contraceptive Use
- Mental health assessment
- Medical history
- Previous medications and side effects
- Contraceptive history and requirements
- How you felt about the questions asked
- Your overall feedback
Your Tuune 360 results
We will supply you with a short user testing report. This report should not
be used for clinical decisions, please discuss any contraception choices
with a pharmacist or doctor if need be.
Your rights
Under the GDPR you have the right to access, change, move or object to your information being processed. If you withdraw from the study, we may keep the personal information you have agreed to share with us for research and product development purposes. To safeguard your personal information, we will only process the minimum information possible required and will keep your data anonymous. You may contact Tuune regarding your personal information via help@tuune.com
Confidentiality
Your data will be shared anonymously with Tuune and authorized third parties,
i.e. research partners responsible for analyzing the results of the user testing
or your GP subject to your consent and if deemed necessary.
Tuune may be required by law to keep certain personal information for a period
of up to 10 years after the completion of the session. Tuune will keep
identifiable information about you 10 years after this research has finished.
What are you consenting to?
- That you have read and understood this information about the user testing and have had the opportunity to ask questions via email (help@tuune.com)
- That you understand that this testing is with an unvalidated system and any information given cannot be used without consulting with a doctor and that your participation is voluntary and that you are free to withdraw at any time, without giving any reason.
- That you understand that relevant sections of your health records and data collected during the user testing may be looked at by authorised individuals from regulatory bodies and user testing study sponsors for the purpose of monitoring the research. You give permission to these individuals to have access to your records.
- That you agree that the information gathered about you may be shared anonymously with researchers for the purposes of understanding female health.
- That you agree to take part in the assessment as described here and consent to take part in the user testing.
- That you agree to be contacted again about further Tuune research and for your contact details to be retained. You understand that you will be able to choose whether to take part in further research.
What happens if TUUNE changes hands
We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control
of all or part of our business. Any personal data that you have provided will, where it is relevant to any part
of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will,
depending on the lawful basis, be permitted to use that data only for the same purposes for which it was originally collected by us.
In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes.
Changes to Our Privacy Policy
We may change this Privacy Notice from time to time (for example, if the law changes).
We recommend that you check this page regularly to keep up-to-date. If we make any material changes to the manner
in which we process and use your personal data, we will contact you to let you know about the change.
Last updated: 14 July 2021.