Page 1 of 1

Privacy Policy

'mOI' and 'mOI Health' are trade/brand names owned and operated by OtoImmune Ltd. References herein to mOI are references to both mOI and mOI Health, as the context permits.

At OtoImmune Ltd ('we', 'us', 'our', as appropriate), we take the confidentiality, integrity, and security of your data seriously. We have designed this privacy policy (this 'Policy') to inform you about the types of, and ways in which we, process personal data that is provided to us by you and/or which we collect through our website.

This privacy policy may be updated from time to time.

Data we may collect from you

- Information provided by you by filling in any of our forms on this website. Such information is initially collected and processed on our behalf via Tally BV (trading as Tally Forms): https://tally.so/help/privacy-policy.
- Data collected and processed on our behalf by Tally BV is also processed and stored on our behalf by Amazon Web Services (“AWS”) who are our cloud infrastructure provider and provide to us other services. Details relating to how AWS will process and store your data can be found here: https://aws.amazon.com/compliance/data-protection/.
In the case of each of Tally BV and AWS, each operate as our data processor and we operate as data controller.

Please note: we do not knowingly collect personal data from or about any person under the age of 16. Accordingly, this site is not intended for any person under the age of 16. If you are under 16 years old and wish to contact us, please get your parent or guardian to do so on your behalf.

How we collect our data

As noted above and at the time of writing, we collect data from you by you filling out forms or similar media by email or on our website (www.otoimmune.com) or our mOI website (www.moihealth.com).

What do we do with your data?

We aim to collect and use only personal data that we can justify we need for our legitimate business purposes, including related to mOI and our products and services from time to time, as noted above. Typically, that will be to provide you with information about us, mOI and our products and services from time to time. However, and not withstanding this, we may disclose your personal information:

- to our subsidiaries and connected entities in the UK from time to time; 

- to third partes if we or our connected entities enter into negotiations to sell or buy any business or assets (including businesses and/or assets of which they are the owner or legal holder), in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;

- to third partes if we, or our connected entities, sell substantially all of our assets or are acquired by a third party (in which case personal data held by it may be one of the transferred assets); and

- to third parties if we are under a duty to disclose or share your personal data to: comply with a legal obligation; comply with an order of a court or order of another competent authority or relevant regulatory body; to enforce or apply our terms of use and any other agreements; or protect our rights, property or ensure our safety and/or the safety of our customers or others. This includes exchanging information with other companies and organisations or the purposes of fraud protection and credit risk reduction.At the time of writing we do not use cookies to record information about you.

Your personal data may also be transferred and stored at destinations outside the European Economic Area ('EEA'). It may also be processed by staff operating outside the EEA who work for us, our subsidiaries or for one of our suppliers and/or distributors and/or parties working on our behalf. We will take all steps reasonably necessary to ensure that your personal data is treated securely in accordance with this Policy.

Your rights

You have a right to know whether we (being the data controller of your personal data) are processing your personal data and to request access to your personal data, including: the purpose of the processing of your personal data; the categories of personal data being processed; the recipients or categories of recipient to whom personal data is sent, including recipients who are established in the EEA and those established outside the EEA; and how long your personal data will be retained and how we make our decisions as to how long your personal data will be retained.
You also have the right to request changes to your personal data, by either correcting or supplementing the personal data we hold, and, in certain circumstances, you have the right to request the deletion of your personal data held by us.
If you have submitted information to us, you may get in touch at any time to ask for a copy of the information we hold about you and to have any mistakes corrected or apply any updates, or to ask us to cease to hold the information.
You have rights to receive your personal data in a structure, commonly-used and machine-readable format and to transmit your personal data to another data controller if certain criteria are met.
We do not charge a fee for providing electronic copies of your personal data being processed but we reserve the right to charge a reasonable administrative fee for any hard copies requested or any additional/multiple requests.
Notwithstanding the above, nothing in this Policy impacts your rights for and in relation to any of your personal data held by Tally BV or AWS (as noted above) and you may exercise your rights in this regard directly through Tally BV or AWS, respectively.
You also have the right to make a complaint to our supervisory authority which is the Information Commissioner in the UK (https://ico.org.uk/). You may exercise any of the abovementioned rights by emailing our data protection team at [email protected].