Privacy Policy

PEGASUS MEDICAL is provided by Pegasus Medical 1808 Ltd, company number 11162161 (“Pegasus” or “we”). We are the data controller for the processing of your personal data via PEGASUS MEDICAL.

When you use PEGASUS MEDICAL, you are trusting us with your personal data. We are committed to keeping that trust, which is why our policy as a company is to take steps to ensure that individual users’ data and privacy rights are protected and to provide transparency about our data practices.

The purpose of our Privacy Policy is to explain what data we process, how it is used and shared, and how you can control it. We never share health related personal data with third parties without your consent.

1. PEGASUS MEDICAL’s Basic Functionality

Using the basic functionality of PEGASUS MEDICAL requires the processing of data. The legal basis for processing personal data for the Basic Functionality is your consent (Article 6 para. 1a) and Article 9 para. 2a) GDPR). You will not be able to use PEGASUS MEDICAL anymore if you withdraw this consent.

a) PEGASUS MEDICAL user account

You can only use PEGASUS MEDICAL with a user account (“Account”). Accounts are only available to employed of Pegasus Medical 1808 Ltd, you will not need to enter personal data such as email address and, accordingly, we will solely process the technical identifiers necessary to provide the service.

However, without an Account you can use PEGASUS MEDICAL on any smartphone or tablet and if you lose your smartphone or tablet, you will not be able to restore this data.

b) Running PEGASUS MEDICAL

When using PEGASUS MEDICAL, your smartphone or tablet automatically transmits date and time of access, operating system, type of smartphone, quantity of data transmitted and IP address to us. Processing this data is a technical requirement for using PEGASUS MEDICAL.

2. Analytics and External Services

a) Application tracking, error reporting and debugging

When you use PEGASUS MEDICAL we collect your app usage data eg, which functionality is used, what it is used for and when it is used. We analyze this usage data statistically to improve PEGASUS MEDICAL.

For application tracking, error reporting and debugging we use Firebase. We do not share any identifiable data.

For gathering insights on usability like screens visited, interaction patterns (such as screen actions, gestures: taps, scrolls), and Device details (Type, Version, Model, Operating System) we use UXCam. Personal data is discarded.

The legal basis for this is our legitimate interest (Article 6 para. 1f) GDPR).

b) Analytics using Google Analytics

With Google Analytics (Google LLC) we collect PEGASUS MEDICAL usage data, including time and duration of app use and interactions. Google does not log or store the IP address transmitted by your smartphone. The collected usage data is analyzed on Google’s servers. For further information please refer to https://policies.google.com/privacy .

The legal basis for processing your personal data for this purpose is your consent (Article 6 para. 1a) GDPR). You can withdraw your consent under ‘Settings’.

3. Aggregated information

We may aggregate, anonymize or de-identify your personal data so that it cannot reasonably be used to identify you. Such data is no longer personal data. We may share such data with our partners or research institutions or use it for statistical purposes, for example, we may share or use general age, demographic information and aggregate statistics about certain activities from data collected to help identify patterns across users. Our legal basis for processing your data for this purpose is legitimate interest (Article 6 para. 1f) GDPR).

4. Adverse events and protection of rights

In case you report a suspected adverse event by contacting the PEGASUS MEDICAL Support we may be obliged to report such adverse event. Pegasus Medical will always get your consent before sharing personal information for reporting an adverse event to a partner or authority.

In order to enforce or to protect the rights of Pegasus Medical, Pegasus Medical may process your personal data.

Legal basis for this data processing in these cases is legal obligations according to Article 6 (1) c) GDPR, Article. 9 (2) i) GDPR) and defense of legal claims Article 9 (2) f GDPR).

5. Data storage

a) Duration of data storage

We keep your personal data for no longer than is necessary for the purposes for which your personal data is processed. If you delete your Account, we delete any personal data contained in the Account. We also delete any personal data contained in the Account if you have not logged in for 3 years. This cannot be reversed.

b) Location of data storage

When your smartphone connects to the Internet, PEGASUS MEDICAL transmits your data using data encryption to a centralized database provided by the technical service provider Firebase etc. The technical service provider may access the data for the maintenance, operation or administration of the technical infrastructure.

6. General security measures

We implement technical and organizational measures in an effort to protect personal data from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the nature of the personal data that we process and risks associated with it. These measures include pseudonymization where possible, including encrypting of personal data in transit and at rest, systematic vulnerability scanning and penetration testing, diligently choosing our suppliers and keeping shared data to a minimum, backups and incident management procedures. We are regularly audited and certified for ISO 27001 (Information Security Management), including Data Protection measures.

7. Data protection rights

You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning you or to object to processing as well as the right to data portability. We do not process your personal data for automated decision-making. You are free to withdraw any consent you have given at any time.

If you have any questions or wish to exercise your rights, please contact us at app@pegasusmedical1808.co.uk .

You have the right to lodge a complaint with a supervisory authority.

12th Amendments

We reserve the right to amend this Privacy Policy. You can find the latest version on our website pegasusmedical1808.co.uk/app-privacy-policy/  .

This Privacy Policy was last changed on 01/02/2025.