Privacy Policy

Who we are

This Privacy Policy explains how Digital Health Outcomes Group ("DHOG", "we", "us") processes personal data when you visit this website, contact us, or apply to work with us. For these activities DHOG is the data controller.

When we deliver services to clients, we usually process client data as a processor on the client's documented instructions, under a separate data-processing agreement. That processing is governed by the client's own privacy notices and our agreement with them, not by this policy.

Data we process

• Enquiries — your name, email address, phone number, company and the content of your message when you contact us.
• Job applications — your CV and any information you choose to send to our careers address.
• Technical data — IP address, browser type, pages requested and timestamps, recorded in server logs to operate and secure the website.
• Analytics data — only if you opt in: pages viewed, time on page, referring site, device and browser type, approximate location (country or city, derived from your IP address) and a pseudonymous identifier stored in the _ga cookies. Collected through Google Analytics 4; we do not use it to identify you personally.

Purposes and legal bases

• Responding to enquiries and preparing proposals — our legitimate interest in running our business, or steps taken at your request before entering into a contract.
• Assessing job applications — steps taken at your request before entering into an employment or services contract.
• Operating and securing the website — our legitimate interest in a safe, working service.
• Website analytics — your consent (GDPR Art. 6(1)(a) and the ePrivacy rules on cookies), which you can withdraw at any time via “Cookie settings” in the footer.

We do not sell personal data, and we do not use it for advertising.

Cookies and similar technologies

This website uses strictly necessary local storage to remember your cookie choice. With your opt-in consent, we also use Google Analytics to understand site usage; it never loads without consent, and ad personalization is disabled. We use no advertising or cross-site tracking cookies. Details, including a full inventory, are in our Cookie Policy. You can change your choice at any time via “Cookie settings” in the site footer.

Sharing and service providers

We share personal data only with service providers that help us run the website and our business — such as hosting, email and, with your consent, analytics. They process data on our instructions and under data-protection obligations no less protective than this policy. We may also disclose data where required by law.

Google Analytics is provided by Google Ireland Limited (for visitors in the EEA, UK and Switzerland) and Google LLC, acting as our processor under Google's data-processing terms. We have disabled Google signals and ad personalization, so analytics data is not used for advertising or linked to your Google account.

International transfers

Where personal data is transferred outside the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. Analytics data may be processed by Google in the United States, which relies on the EU–US Data Privacy Framework and Standard Contractual Clauses.

Retention

We keep personal data only for as long as needed for the purpose it was collected for — for example, for the duration of a business conversation and a reasonable period afterwards, or for the duration of a recruitment process — and longer only where the law requires it.

Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit, access controls and confidentiality obligations for our personnel. No system can be guaranteed completely secure.

Your rights

Where the GDPR or UK GDPR applies, you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — request deletion where processing is no longer justified.
• Restriction — limit processing while a request is being resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting processing that took place before.

To exercise any of these rights, email hello@digitalhogrp.com. It is free of charge, and we respond within the timelines required by law (one month under the GDPR, extendable where permitted). You also have the right to lodge a complaint with your local data-protection supervisory authority.

Changes and contact

We may update this policy to reflect changes to our website, services or the law; the date at the top shows when it last changed. Questions about this policy can be sent to hello@digitalhogrp.com.