Who is responsible for your information
Little Files is a product of MEMBA LTD. We are responsible for personal information collected for our website, business inquiries, and our own customer administration. Contact us at info@membaltd.com.
This notice covers the Little Files website and how to contact us about data in the service. It is not your clinic’s patient privacy notice.
Information we receive
- Business inquiries: your name, email, organization, the workflow you select, and any message you choose to include.
- Correspondence: replies and information you provide while discussing a demo, support, a contract, or a privacy request.
- Technical information: IP address, request time, browser and device information, and request or error details processed by our website and service infrastructure.
- Browser storage: language preference and, if you sign in, account and authentication information. See Cookies & storage.
Please do not put patient information, employee records, or other sensitive information in a website inquiry. We do not need it to arrange a demo.
How and why we use information
We use inquiry details to respond, arrange demonstrations, discuss the service, and maintain the resulting business correspondence. We use technical information to operate the site, diagnose problems, and limit abuse.
Where UK or European data protection law applies, our lawful bases include legitimate interests in responding to business inquiries and keeping the service secure, steps requested before entering a contract where applicable, performance of a contract with you, and compliance with legal obligations. Where consent is required for a separate purpose, we request it separately.
A demo or contact request does not subscribe you to a marketing mailing list. You can ask us to stop promotional communications at any time.
Patient, family, applicant, and employee records
A clinic determines why it collects records and who may access them. When we process those records for a clinic, we do so under the applicable customer agreement and data-processing terms, rather than treating them as sales leads.
For access, corrections, or questions about a patient or employment record, contact the clinic that holds your record. If you contact us, we may need to refer the request to that clinic and verify your identity before assisting. Do not email us medical records to verify your identity.
For US customers subject to HIPAA, the appropriate Business Associate Agreement must be executed before protected health information is processed. Contact info@membaltd.com to discuss the BAA and customer data-processing terms. This notice is not a BAA and does not replace the clinic’s own obligations.
International processing
Our business is based in the United Kingdom, and customers and service providers may be in other countries. Before personal information is transferred internationally, the applicable processing locations and transfer safeguards must be assessed. Where required, these include an adequacy decision, contractual safeguards, or another lawful transfer mechanism. Contact info@membaltd.com for information about the arrangements relevant to your relationship with us.
How long information is kept
Retention depends on the purpose of the information, the status of an inquiry or customer relationship, security needs, and applicable legal obligations. Inquiry correspondence should be kept only for as long as needed to handle the inquiry and the resulting relationship or legal requirements. Customer-record retention, return, deletion, and backups are governed by the customer’s instructions and applicable agreement.
Contact info@membaltd.com to ask about retention or deletion of your information. Closing a browser or clearing local storage does not delete emails already sent or records held by a clinic.
Your choices and rights
Depending on applicable law, you may have rights to access or receive a copy of personal information, correct it, request deletion, restrict processing, object to processing, or obtain portable data. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights can be subject to exceptions and identity verification.
Email info@membaltd.com with your request and enough context for us to locate the relevant correspondence. If the information belongs to a clinic’s records, contact that clinic first.
You may complain to your local data protection authority. In the UK, you can contact the Information Commissioner’s Office. We do not make decisions producing legal or similarly significant effects about website visitors solely by automated processing.
Children and security
This marketing website is intended for adult business contacts, not for children to submit personal information. Records about children supplied by authorized clinics or guardians belong in the clinic’s designated service workflows, not in the demo form.
No method of storage or transmission is risk-free. If you believe information has been sent here in error or have a security concern, contact info@membaltd.com without including sensitive records or passwords.
Changes to this notice
When our practices change, this notice will be updated with a revised effective date. Where the law requires additional notice or consent, an updated web page alone does not replace that requirement.