NUMA ChatBot
Supplemental Privacy Notice

Updated: February 27, 2025

Welcome

The NUMA chatbot ("NHBOT") is an artificial intelligence tool that we make available to provide responses to common enquiries about Hyperbaric Oxygen Therapy.

This privacy notice supplements the information in our main Privacy Policy and sets out how we use information that identifies or is associated with you (your "personal information") when you use the NHBOT.

Who is responsible for your personal information?

The NHBOT is operated by NUMA Limited ("NUMA", "we", "us" or "our"). NUMA is the controller of the personal information we collect when you use the NHBOT, which means we determine and are responsible for how your personal information is used.

If you would like to contact us, you can do so by email to info@numaoxygen.com or by calling us on +44 (0)20 3823 1212.

What personal information do we collect through the NHBOT and how do we use it?

When you use the NHBOT, we will collect and use your personal information as follows:

Personal information we collect	How we use it	Lawful basis we rely on
The content of any enquiries you submit to us.	We use this information to generate responses to your enquiries in accordance with the functionalities of the NHBOT.	The processing is necessary for the performance of a contract, namely the NUMA NHBOT Terms of Service.
The content of any enquiries you submit to us.	We use this information to identify common enquiries in order to understand how we can improve the NHBOT.	The processing is necessary for our legitimate interests, namely monitoring the performance of and improving the NHBOT.
Transcripts of your conversations with the NHBOT.	We use this monitor the performance of the NHBOT and identify ways in which we can improve the NHBOT.	The processing is necessary for our legitimate interests, namely monitoring the performance of and improving the NHBOT.

We also collect certain information about the device you use to access the NHBOT automatically:

Personal information we collect	How we use it	Lawful basis we rely on
Information about your device, such as your IP address, device type, device make and model, screen size, operating system, browser type and version, and browser window size.	We use this information to present the NHBOT to you on your device, and to optimise it for your device type, browser type and version, screen and window size.	The processing is necessary for the performance of a contract, namely our NHBOT Terms of Service.
	We use this information detect and prevent fraudulent or malicious use of the NHBOT.	The processing is necessary for our legitimate interests, namely identifying and preventing misuse of the NHBOT.
	We use this information to monitor the performance of the page on which the NHBOT is made available and identify errors in and ways in which we can improve that page.	Your consent.

Health and other special category data

The NHBOT is intended for general enquiries about Hyperbaric Oxygen Therapy. It is not intended as a tool for diagnosing conditions, advising on treatment in individual cases, or administering existing patient relations or treatment schedules.

You should not submit (and we do not expect to receive) any information about an individual's health to the NHBOT, including medical records or information about existing or prospective treatments.

If you submit such information to us when using the NHBOT, we will process such information as follows:

Personal information we collect	How we use it	Lawful basis we rely on
Information about your health or condition that you submit to us voluntarily through the NHBOT.	We only use this information to generate a standard response that advises you to speak to a medical professional.	The processing is necessary for the performance of a contract, namely our NHBOT Terms of Service. The additional condition we rely on for processing health data in this context is that it is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.

Personal information we collect

How we use it

Lawful basis we rely on

Information about your health or condition that you submit to us voluntarily through the NHBOT.

We only use this information to generate a standard response that advises you to speak to a medical professional.

The processing is necessary for the performance of a contract, namely our NHBOT Terms of Service.

The additional condition we rely on for processing health data in this context is that it is necessary for the purposes of the provision of health or social care or treatment or the management of health or social care systems and services.

How long do we retain your personal information?

We normally retain transcripts of your conversations with the NHBOT for up to 6 months. We may retain this information for longer if required to pursue or defend legal claims, defend our rights or to comply with a court order.

Recipients of your personal information

We may share the personal information you submit through the NHBOT:

With third parties that provide services to us, such as hosting and related technical services. These parties will process your personal information as processors on our behalf.
Where required under applicable law. The lawful basis we rely on for sharing personal information in this way is that it is necessary for compliance with a legal obligation to which we are subject.
Where required to comply with reasonable requests from law enforcement or where necessary to protect our legal rights or the rights of others. The lawful basis we rely on for sharing personal information in this way is that it is necessary for our legitimate interests, namely cooperating with law enforcement and protecting our legal rights and the rights of others.

International transfers

Some of the service providers we use to process personal information submitted through the NHBOT are located outside the United Kingdom. Where we share personal information with these providers we ensure that:

the provider is in a country recognised under the UK Data Protection Act 2018 as offering an equivalent level of protection as compared to the level of protection in the UK (,"Adequacy"); or
the transfer is made subject to standard agreements approved under the UK Data Protection Act 2018 as implementing appropriate safeguards to ensure that personal information transferred outside the UK is handled in a manner that is essentially equivalent to the requirements under UK data protection law ("Standard Contractual Clauses").

We transfer personal information to recipients in the following countries:

Country where recipient is located	Safeguard used
United States	Standard Contractual Clauses or Adequacy (where recipients are registered participants in the UK Extension to the EU-U.S. Data Privacy Framework).

Your Rights

For detailed information about your rights in respect of your personal information, please refer to our Privacy Policy.

NUMA ChatBot Supplemental Privacy Notice