As part of this mission, we are committed to providing every patient with the safety and peace of mind that their health information is secure and private.
At Elephant, the safety and privacy of your health data and personal information is our top priority. We want you to feel confident that you understand the way in which your personal information is collected and used.
We do this by:
We know lots of information about data processing can be confusing and complicated. We want to change that. Elephant is committed to removing jargon when it comes to data usage so that you are clear about your data. Of course, we need to have legal terms and conditions about your data usage and those documents are available to you, but we are also committed to making them easy to understand.
If your healthcare provider uses Elephant they may have asked to register you on the Elephant platform and given you an Elephant card that links to your digital health record.
Your healthcare provider uses Elephant’s operating system to create digital health records. Your record will include personal data about you such as your name and address, your medical history, medications you take, and any diagnosis about your physical and mental health.
Elephant uses end to end encryption to securely store your personal data on servers in tier 3 data centres. Your personal data is never held on any computer, laptop, or mobile device, including your own.
Elephant processes your personal data on behalf of your healthcare provider so they can provide you with medical care. We also anonymise your personal data so it can be used by your healthcare provider or Elephant to improve healthcare services.
Elephant has strict procedures, security features and audit processes to prevent unauthorised access to your personal data, and is fully compliant with all local and international data protection laws and regulations.
You will have also been asked if you would like us to store a copy of your data for you to access from home. If you agreed to this you will have been given a PIN number, and you can scan the QR code on your Elephant card and see your digital health record. In future you will be able to manage your information through the Elephant patient app. You can find out more information about accessing your digital health record in our Patient Hub.
When it comes to personal data, the legal meaning of consent depends on your home country. At Elephant, we ensure that when we collect your personal data we adopt that legal meaning and ensure that any consent we collect is express, specific, informed and unequivocal. When you give Elephant your consent to do certain things with your data we don't do anything else with it without your further consent. That means that you know who has access to your data and why.
Elephant will always ask for your consent before using your health record or sharing it with anyone.
Your health data is sensitive, and we understand that you want to be in control of it. When you use Elephant’s applications, we are transparent with you about how your data is being used and why. At the very least, your healthcare provider will use that data to provide you with medical care. Elephant can offer you additional benefits when you provide your specific consent: but the choice is yours.
Elephant is designed by doctors, for doctors. Healthcare systems that use Elephant enable digitisation of the hospitals and clinics in which healthcare professionals work and provide patients with digital health records.
This means that Elephant securely stores and processes the data of healthcare professionals, your patients and your healthcare system:
Elephant uses end to end encryption to securely store your personal information on servers in tier 3 data centres. Your personal information is never held on any computer, laptop, or mobile device, including your own.
Your personal information is only accessible by Elephant for the purpose for which it was collected: to enable you to use Elephant’s applications. Your personal information may be visible to people within your organisation to facilitate the use of Elephant’s products. We never pass your personal information to a third party without your explicit consent. We never send you correspondence without your explicit consent.
Elephant has strict procedures, security features and audit processes to prevent unauthorised access to your personal information, and is fully compliant with all local and relevant international data protection laws and regulations.
Healthcare providers run health systems. Elephant helps providers manage the vast quantities of health system data and patient health information they collect to enable their important work. It does this by digitising healthcare systems at scale and securely and responsibly managing patient and healthcare data on behalf of its partners.