This Privacy Notice explains how JOII UK LIMITED (referred to as “Joii”, “Company”, “we”, “our”, or “us”) collects your personal information when conducting “Joii Period Evaluation App – Usability and Performance Testing” (the “Study”), how your personal data is processed, with whom the personal data is shared, and your rights in connection with this.  

The Study regards the usability and performance testing of Joii Period Evaluation App (“Joii App”) which will allow you to get accurate measurements of blood volume in milliliters and clot sizes by scanning your menstrual pads. The app aims to improve your self-management by allowing you to track and monitor your menstrual flow. This will help you understand whether your heavy periods fall within the expected range or if further medical attention is needed, empowering you to make informed health related decisions. 

We are the “Data Controller” for your personal information in connection with the Study. We will contract with service providers or other service partners to analyze the Study data.  

This Privacy Notice consists of the following contents: 

1. What data do we collect? 

2. How will we use your data? 

3. What are the lawful bases for processing? 

4. How long do we keep your data? 

5. With whom do we share with your data? 

6. Where do we transfer your data? 

7. What are your data protection rights? 

8. How do we protect your data? 

9. How to contact us 

10. How to contact supervisory authority 

11. Changes to our Privacy Notice 

1. What data do we collect? 

We will collect data from you through our App and the Questionnaire you will fulfill with personal data about you, including health related data. This will include personal data, such as Name, Date of birth, Gender identity, Height, weight, Country of birth, Country of residence, Race, Medical history, Family medical history, Pregnancy history, Current contraception use, Menstrual cycle details, Symptom details, Doctor visits (information relating to healthcare professional and/or Clinic), purpose of appointment and Notes input by user. We will also keep a record of your consent given to participate to the Study, including the Study Consent, date of consent, and your participant ID. 

2. How will we use your data? 

We will process Study participants’ personal information so that we can: 

1. assess your eligibility to take part to the Study; 

2. conduct the Study; 

3. meet any legal and regulatory requirements Joii is subject to. 

More detailed information regarding how we conduct the Study will be included in the Patient Information Sheet that you will be provided to prior to decide if you want to take part of this Study. 

3. What are the lawful bases for processing? 

The purposes and lawful bases are as follows: 

Purposes of processing	Lawful Bases (UK GDPR Article 6 – Personal data)	Exception (UK GDPR Article 9)	Retention
Assess your eligibility to take part to the Study	6(1)(f) – legitimate interest	9(2)(j) – scientific research	10 years after study completion for eligible participants. 6 months after eligibility assessment for non-eligible individuals.
Conduct the Research Study	6(1)(f) – legitimate interest	9(2)(j) – scientific research	10 years after study completion.
Retaining records to ensure safety and efficacy of Study	6(1)(f) – legitimate interest	9(2)(j) – scientific research	10 years after study completion.

Our legitimate interest in processing your personal data is to be able to assess the usability and performance of our App.  

4. How long do we keep your data? 

Joii will keep your personal data until we fulfill the purposes of Study as detailed in the table above.  

Additionally, Joii will use anonymised data collected from the Study that cannot be linked back to you for future purposes. 

5. With whom do we share with your data? 

We will share your personal information with the University of Bradford which will assist us in completing data analysis. Where possible we will share this data in a pseudonymised format which means your name won’t appear but there will only be the Study ID. Moreover, we will use Microsoft 365 and Google Cloud services to support us in processing or storing your personal data.  

We hold contracts with these parties as required by Data Protection Laws to ensure that your data is managed and processed appropriately at all times.   

6. Where do we transfer your data? 

The processing involves data transfers from the UK to the European Union (EU) with regards to your health data. We utilise Google Cloud services which will store your data in their data centers in Belgium, Netherlands and Finland. Your personal data are safe and adequately protected, and the transfer is covered by the Adequacy Decision, indeed there is an essentially equivalent protection in the UK and the EU.  

7. What are your data protection rights? 

Data Protections laws provide you with a range of rights: 

1. The right to be informed – right to be informed about the collection and use of their personal data; 

2. The right to access – right to request us for copies of your personal information; 

3. The right to rectification – right to request that we update the persona data that is inaccurate, incorrect or incomplete; 

4. The right to erasure – right to request that we delete your personal data; 

5. The right to restriction of processing – right to request that we restrict the processing of your personal data; 

6. The right to data portability – right to request that we transfer the personal data that we have collected about you; 

7. The right to object – right to object the processing of your personal data which we process in connection with Study; 

8. The right to withdraw consent – the right to withdraw the consent for data processing at any time; 

9. Rights related to automated decision making including profiling – right not to be subject to a decision based solely on automated processing, including profiling. 

These rights are not absolute which means that under certain circumstances they can be restricted or not applicable this Study. If you need any clarifications on right applicability or you want to exercise your rights, please contact us by using the information in the “How to contact us” section below. We will respond you without undue delay and, in any case, within the timeframe established by Data Protection Laws. 

8. How do we protect your data? 

We implement and maintain appropriate technical and organisational measures to protect the personal information we collect from you and to limit access to identifiable information, such as generating unique Study IDs, aggregating data, and encrypting contact information. 

9. How to Contact Us 

If you have any questions or concerns about how your personal information is used, or if you want to exercise your rights granted under the applicable data protection law, please contact us at: 

Joii UK Limited  
[email protected] 

10. How to contact the supervisory authority 

You have the right to complain to the Information Commissioner (ICO) if you are unhappy about how we process your personal data or if you feel that we have not addressed your concern in a satisfactory manner.  

The ICO Helpline number is 0303 123 1113, and you can find other ways to contact the ICO here: Contact us | ICO. 

11. Changes to our Privacy Notice 

We keep this Privacy Notice under regular review and place any updates on https://joiicare.com/ study-privacy-notice. This Privacy Notice was last updated on 20/08/2024.