ResponseOne Medical

Your data, protected

Privacy & data policy

How ResponseOne Medical Services collects, uses, and safeguards patient and client information across every event we cover.

Last updated: September 2026

Introduction

ResponseOne Medical Services, also referred to as “ResponseOne Medical”, “ROMS”, “we”, “us” or “our”, respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, submit an enquiry, apply to join our team, or use our services.

For privacy related enquiries, please contact us at info@responseonemedical.co.uk.

1. Who We Are

ResponseOne Medical Services is an East Midlands based medical events company providing medical cover for events across the UK.

Our services may include event medical cover, sports event medical cover, patient transport services and high dependency transfers.

Because some of the services we provide may involve personal and health information, we take the protection of this information seriously.

2. Information We May Collect

Depending on how you interact with us, we may collect different types of personal information.

This may include:

Contact Information
  • Full name
  • Email address
  • Telephone number
  • Postal address
  • Organisation or company name
  • Job title or professional role
Enquiry Information

When you contact us or request information about our services, we may collect information contained within your enquiry, including event details, requirements, dates, locations and other information needed to respond to your request.

Recruitment and Join Our Team Information

If you apply to work with ResponseOne Medical Services, we may collect information such as:

  • Name
  • Contact details
  • Address
  • Employment history
  • Qualifications
  • Professional registrations
  • Training and certifications
  • References
  • Information included in your application
  • Other information required to assess your suitability for a role
Patient and Medical Information

Where applicable to the services we provide, we may process information relating to patients, including health information and details concerning medical incidents, treatment, referrals or handovers.

Health information is treated as special category personal data under UK data protection law and is subject to additional protections.

Website and Technical Information

When you visit our website, certain technical information may be collected automatically, such as:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Pages visited
  • Date and time of visits
  • Website interaction information
  • Referring website information

This information may be collected through website functionality, cookies and similar technologies.

3. How We Collect Information

We may collect personal information when you:

  • Submit a form through our website
  • Contact us by email or telephone
  • Request information about our services
  • Arrange or enquire about event medical cover
  • Apply to join our team
  • Communicate with us during the provision of our services
  • Use our website
  • Provide information to us through another authorised channel

We may also receive information from organisations or individuals involved in arranging or delivering our services where this is lawful and necessary.

4. How We Use Personal Information

We may use personal information to:

  • Respond to enquiries
  • Provide information about our services
  • Plan and deliver medical event services
  • Assess event medical requirements
  • Communicate with event organisers
  • Arrange patient transport services
  • Arrange high dependency transfers
  • Provide appropriate patient care where applicable
  • Manage recruitment and applications
  • Communicate with staff, clinicians and contractors
  • Maintain appropriate service records
  • Prepare post event medical reports
  • Meet legal and regulatory obligations
  • Maintain the security of our website and systems
  • Improve our services and website
  • Prevent fraud, misuse or other unlawful activity
  • Handle complaints and enquiries
  • Establish, exercise or defend legal claims where necessary

We will only use personal information where there is an appropriate lawful basis for doing so.

5. Lawful Basis for Processing

Depending on the circumstances, we may process personal information under one or more of the lawful bases provided by UK data protection legislation.

These may include:

  • Consent, where you have given us permission to use your information for a specific purpose.
  • Contract, where processing is necessary to provide services or take steps before entering into an agreement.
  • Legal obligation, where we are required to process information to comply with applicable law.
  • Legitimate interests, where processing is necessary for our legitimate business interests and those interests do not override your rights.
  • Vital interests, where processing is necessary to protect someone’s life or prevent serious harm.
  • Public task, where applicable to the circumstances and our legal responsibilities.

Where we process special category data, including health information, we will also rely on an appropriate condition permitted under UK data protection law.

6. Health and Special Category Information

Medical information and health information require additional protection.

Where ResponseOne Medical Services processes health information, we will take appropriate measures to protect that information and will only process it where there is a lawful basis and appropriate condition under applicable data protection law.

Access to medical information will be limited to authorised individuals who require the information for legitimate professional, operational, legal or regulatory purposes.

We may use secure electronic systems for recording and managing medical information where appropriate.

7. Post Event Medical Reports

Where we provide event medical services, we may produce a post event medical report.

Depending on the circumstances, these reports may include:

  • A summary of medical incidents
  • Anonymised patient information
  • Treatments provided
  • Referrals or handovers to NHS services
  • Staffing levels
  • Medical resources deployed
  • Notable concerns or trends
  • Recommendations for future events

Where patient information is included, we will take appropriate measures to protect confidentiality and limit unnecessary disclosure.

8. Sharing Personal Information

We do not sell personal information.

We may share personal information where necessary and lawful with:

  • Event organisers
  • Authorised members of the ResponseOne team
  • Healthcare professionals
  • Ambulance services
  • NHS services
  • Hospitals
  • Emergency services
  • Professional advisers
  • IT and technology service providers
  • Website hosting and security providers
  • Recruitment or staffing providers
  • Regulatory or public authorities
  • Insurers
  • Legal representatives
  • Other organisations where required or permitted by law

We only share information where there is an appropriate reason and lawful basis for doing so.

9. Service Providers

We may use trusted third party providers to operate our website, forms, email systems, electronic reporting systems, hosting, security and other business functions.

Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual, technical and organisational safeguards are in place.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access
  • Accidental loss
  • Destruction
  • Alteration
  • Unauthorised disclosure
  • Misuse

Access to personal information is restricted to authorised individuals where access is required for legitimate purposes.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

11. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

  • Provide services
  • Maintain appropriate records
  • Meet legal or regulatory requirements
  • Resolve disputes
  • Handle complaints
  • Establish or defend legal claims
  • Meet professional or insurance requirements

Retention periods may vary depending on the type of information and the circumstances in which it was collected.

12. Cookies

Our website may use cookies and similar technologies.

Cookies may be used to:

  • Make the website function correctly
  • Improve website performance
  • Understand how visitors use the website
  • Remember certain preferences
  • Support website security

Where required, we will obtain appropriate consent before placing non essential cookies on your device.

You can manage cookie preferences through your browser or any cookie consent tools provided on our website.

13. Third Party Websites

Our website may contain links to third party websites or services.

We are not responsible for the privacy practices, security or content of external websites.

We recommend reviewing the privacy policy of any third party website before providing personal information.

14. International Data Transfers

Some third party service providers may process information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place in accordance with applicable data protection legislation.

15. Your Data Protection Rights

Under UK data protection law, you may have rights including:

  • The right to be informed about how your information is used
  • The right to access your personal information
  • The right to request correction of inaccurate information
  • The right to request erasure in certain circumstances
  • The right to request restriction of processing in certain circumstances
  • The right to object to certain processing
  • The right to data portability in certain circumstances
  • The right to withdraw consent where processing is based on consent

These rights are subject to certain legal conditions and exemptions.

To exercise a data protection right, please contact us using the details below.

16. How to Contact Us

If you have questions about this Privacy Policy, how we use personal information, or wish to exercise your data protection rights, please contact:

ResponseOne Medical Services
Email: info@responseonemedical.co.uk

17. Complaints

If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate your concerns.

You also have the right to make a complaint to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, legal requirements or data protection practices.

Any updated version will be published on this page with a revised “Last Updated” date.

19. Acceptance of This Privacy Policy

By using our website or providing personal information to ResponseOne Medical Services, you acknowledge that you have read this Privacy Policy and understand how your information may be processed in accordance with applicable data protection law.