Your Data & Privacy Rights

We help GPs and other NHS primary care providers with our software. It lets them contact patients in different ways, such as via text or email

Understandably, it can be worrying when you receive a message from a third-party provider without understanding the 'why' or the 'how'

At X-on Health Ltd, we want to provide you with assurance that we take the privacy and security of your information very seriously. We have listed some common issues below that patients come to us with regarding their data

It's important to note that X-on Health Ltd are Data Processors and your primary healthcare provider (E.g. your GP practice) are the Data Controllers

A Data Controller has overall control over the way your data is process. Data Controllers take on the highest level of compliance within UK GDPR

A Data Processor acts under the instruction of the relevant Data Controller. Data Processors do not have the same obligations as controllers under UK GDPR

As an individual, you have the right to obtain the following (but not limited to) information from the Data Controller:

To request the information that is held on you, you will need to contact your primary healthcare provider (e.g. your GP Practice). Most GP Practices have information about how to do this on their website

"I did not give you my consent to send me text messages"

"Who have you my permission to access my data"

"Please delete my emails from your database. I did not give you my consent to use these"

Your GP Practice, who is the Data Controller, has instructed us to process your data on their behalf. They do not need your permission to do this, However, you can request to stop receiving correspondence through X-on Health by contacting your GP Practice

We understand that there are plenty of harmful threats to your personal details. X-on Health Ltd is a trusted third-party provider for the NHS

X-on Health Ltd will always send you an SMS message on behalf of NHS GP surgeries and will display "NHSNOREPLY" as the sender. This is the default originator set for surgeries on the NHS route

To help protect you from phishing and fake text messages, X-on Health only uses the following verified web addresses (URLs) when sending you SMS communications:

If you have been sent an SMS from a link that claims to be either X-on Health Ltd and your GP practice but does not look like one of the above links then please do delete this

For any SMS messages that you feel are not relevant, you can request that these be stopped by contacting your registered GP practice who can add a 'non-consent’ code to your medical record

However, this will not stop your GP practice from contacting you via other third-party apps and, it will not stop them from contacting you for important health-related matters via SMS, phone, email, or written letter

If you have received an SMS message that was addressed to another patient then this may possibly be due to the GP practice having an error on your medical record.

You will need to contact them as soon as possible to alert them to this so they can rectify this