Sub Processor List
SUBPROCESSOR LIST FOR MEDIABURST LTD
Simple Healthcare Ltd (“SH”)
SH provides independent reviews, case studies and evidence of how Florence change lives, from the collaborative, NHS members community. They share best practice on getting started with protocols and provide training in using Florence. Community members also receive detailed analysis reports on Florence usage
Google Analytics (anonymous aggregated behaviour tracking)
Google Analytics collects statistical data about the use of the getflorence.net website and applications. The information we see is aggregated and does not contain any personal identifiable data. We use the information to understand the way people engage in the website. Here is the Google Analytics privacy policy: https://policies.google.com/privacy?hl=en-GB
Bitrix24
Mediaburst uses Bitrix24 as the Customer Relationship Management (CRM) to receive and log customer tickets for issues, whether they are technical or operational in nature. Name, email address and transaction data is shared with the third party for account management and support, marketing and analysis purposes. Please see here the Bitrix24 Privacy Policy: https://www.bitrix24.com/privacy/bitrix24-integrations-privacy-policy.php
Hubspot
Hubspot is being used as the Sales tool by our sales team to track potential customer contacts and interactions as well as sales and marketing campaigns sent out. The data included is name, work emails and organisational details. The HubSpot privacy notice is here: https://legal.hubspot.com/privacy-policy
SMS Network Providers
Mediaburst use SMS aggregators and networks to deliver text messages as a necessary part of the service. All SMS aggregators are required to comply with data proception obligations. If the SMS Aggregator transfers personal data outside of the EU/ EEA, such data transfer will only be made using European Commission standard contractual clauses for data transfers outside of the EU or EEA knows as the “model clauses”.
We use a roster of SMS aggregators for resilience, including: CLX Networks AB (trading as Sinch)
Esendex
AWS – Cloud Hosting
The web server, application server instances are AWS AMIs hosted within securely within an AWS Virtual Private Cloud (VPC). The DB is an AWS Relational Database Service (RDS) instance also hosted in a dedicated VPC. The servers are hosted within the AWS UK region, across two availability zones. The AWS privacy notice can be found here: https://aws.amazon.com/privacy/
MongoDB
The Florence-3 core database is a managed service by MongoDB and hosted in AWS UK region, across two availability zones (privacy notice as above). MongoDB privacy notice can be found here: https://www.mongodb.com/legal/privacy-policy
Microsoft (email provider)
Microsoft provides Mediaburst Ltd and its owners ART Healthcare Software Ltd with email services for our employees. If you communicate directly with them over email the communication is likely to go through Microsoft servers. Here is the Microsoft365 privacy policy: https://privacy.microsoft.com/en-gb/privacystatement
Moneypenny (phone answering service)
Moneypenny operates the call centre service for Mediaburst Ltd. If you call the main contact number the call will be answered by a Moneypenny operator and transferred to the appropriate person within the Mediaburst team. If that person is not available they will take a message and pass this on. The link to Moneypenny’s privacy policy is here: https://www.moneypenny.com/uk/privacy/
Jira Helpdesk (Atlassian)
Jira provides the system that the Florence help desk is run on. This enables customers to raise issues and questions regarding the Florence platform – either by raising a direct ticket or by emailing help@florence.uk.net. Here is the link to the Atlassian GDPR commitment: https://www.atlassian.com/trust/privacy/country/europe-and-gdpr
Links to Third Party Service Providers
Where we have provided links to Third Party Service Providers these are links that were applicable at the time of writing. The links may since have changed.
