Privacy Policy

1. Introduction

NGN Development ("we," "our," or "us") is committed to protecting the privacy and security of your personal and clinical data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use the NGN CAD dispatch platform. We fully comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and align with the NHS Data Security and Protection Toolkit (DSPT).

2. Information We Collect

We collect information in the following categories:

• Account Information: Name, email address, phone number, and billing information when you register for our service.
• Operational Data: Vehicle callsigns, staff names, clinical grades, and shift schedules entered into the CAD system.
• Patient & Clinical Data: Information entered into the CAD or electronic Patient Report Forms (ePRFs), including patient demographics, chief complaints, locations, and medical interventions. Note: We act as a Data Processor for this information; your organization remains the Data Controller.
• Telemetry Data: Duty status updates (e.g., Available, On Scene) and IP addresses used to access the system.

3. How We Use Your Data

We use the collected data strictly to:

• Provide, operate, and maintain the NGN CAD platform.
• Facilitate secure clinical handovers and generate CQC-compliant audit reports.
• Process secure payments for your subscription.
• Monitor system stability, security, and prevent unauthorized access.

4. Data Storage and Security

We implement enterprise-grade security measures to protect your data. All data is stored securely on servers located entirely within the United Kingdom to ensure strict data residency compliance. We utilize 256-bit AES encryption for data at rest and in transit. Two-Factor Authentication (2FA) is enforced for all system access. We perform routine security audits to maintain our alignment with NHS DSPT standards.

5. Data Sharing

We do not sell, trade, or rent your operational or patient data to third parties. We may share data only under the following circumstances:

• With trusted third-party service providers (e.g., secure payment processors, UK-based cloud hosting) strictly to operate our platform.
• If required to do so by UK law, court order, or to cooperate with regulatory bodies such as the Care Quality Commission (CQC) or the NHS.

6. Your Data Rights

Under UK GDPR, you have the right to access, correct, update, or request deletion of your personal data. Medical providers (Data Controllers) have full administrative control to export, audit, or permanently delete their own CAD logs and ePRF records directly from their master admin panel.

7. Contact Us

If you have questions or concerns regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer at: privacy@ngncad.co.uk.