iGPR Privacy Notice for Payment Information
What information we will collect about you
iGPR takes its data protection responsibilities seriously and this includes the safeguarding of any personal information we collect from you in order to make electronic or cheque payments to you for medical reports you provide to requesting third parties whom we represent.
Where you opt to be paid by bank transfer for work carried out, we will collect the following information from you in order to facilitate this:
- Bank account name
- Bank name
- Sort code
- Account number
Where you opt to be paid by cheque for work carried out, we will collect the following information from you in order to facilitate this:
- Payee name
- Surgery address
The legal basis we use to collect and otherwise process this information
Where iGPR is using the information you provide to make payment on behalf of requesting third parties (such as Life Insurers), we will be acting as a Data Processor to those third parties and will use the same legal basis to process the information. This will most usually be the legal basis of ‘Contract’ as set out in Article 6.1.b of the UK-GDPR.
How we will use the information we collect about you
We will use this information to ensure that you are paid for providing a completed report as requested and for no other purpose.
With whom will we share your information and why
iGPR has engaged the services of two providers to support the payment of fees to GP surgeries who have provided requested reports:
- Bottomline PTX – a cloud based payment service that securely manages Faster Payments
- Parseq – the Parseq Send-a-ChequeTM service provides a cheque printing and fulfilment service to iGPR which enables the processing of payments to GPs who select cheque payments
How long we will keep your information
We retain this information for the purpose of audit should you have queries relating to payments we have processed and for the purpose of evidencing payments made on behalf of the requesting third parties whom we represent. If iGPR ceases to operate as a data processor for third party requesting organisations, we will securely delete this data within 30 days.
Where is your information kept
iGPR will hold your data in its secure data centre which is based in the UK.
Bottomline’s data centre is based in the UK.
Parseq’s data centre is based in the UK.
Further information about us and how to access or change the information we hold about you
You have the right to ask us to stop processing your data at any time, however this may impact or delay payment being made if a report is in progress. To find out more about this and any other questions you may have for us, please feel free to contact us at any time.