Skip to Content


Website Legal Disclaimer

(Last updated: 28 June 2025)


This Legal Disclaimer (“Disclaimer”) applies to the website mumioo.com and any related mobile application (collectively, the “Platform”). Please read it carefully before using the Platform.

1. Operator & Contact

MUMIOO HEALTH LTD

Registered in England & Wales — Company No. 16537972

Registered Office: 15 Ashdown Road, KT17 3PL, Surrey, UK

Email: info@mumioohealth.com

2. Role of MUMIOO

MUMIOO HEALTH Ltd. (“MUMIOO”, “we”, “our”) is not a healthcare provider.

We act solely as:

  • a booking and payment facilitator on behalf of licensed Spanish medical professionals; and
  • a data-processing service provider for those professionals.

Imaging reports are provided by consultant radiologists. Authorised imaging centre NICA licences are available upon request.

In the event of requesting a separate medical consultation, healthcare advice is provided by a qualified medical doctor.

3. No Medical Advice

All content on the Platform (text, graphics, videos, FAQs, blog articles, etc.) is provided for general information only. Nothing on the Platform constitutes, or is intended to constitute, medical advice, diagnosis, or treatment. You must always seek the advice of a qualified healthcare professional for any questions regarding your health.

In an emergency, call your local emergency number (e.g., 112 in Spain).

4. Invoicing & Payments

When you book through MUMIOO, payment is collected on behalf of the licensed medical provider who performs your scan. Under a written mandate (Art. 5 RD 1619/2012), MUMIOO issues the invoice in the provider’s name; the medical act is VAT-exempt (Art. 20.1.3º LIVA) and remains fully under the provider’s professional responsibility.

The total price you see already includes all applicable taxes and platform costs. MUMIOO receives a separate facilitation fee from the provider under a B2B service agreement.

5. Data Protection

  • Controller: Clínica MARTÍ TORRES is the data controller of your health information.
  • Processor: MUMIOO processes that data on their instructions only (GDPR Art 28).
  • Hosting: All medical data is stored on encrypted servers located within the European Economic Area; data is deleted or pseudonymised after 90 days unless longer retention is required by law.
  • International Transfer: Because MUMIOO is established in the UK, any transfer of personal data outside the EEA is governed by the 2021 Standard Contractual Clauses.
    For full details, please read our Privacy Policy.

6. Limitation of Liability

To the maximum extent permitted by applicable law:

  • MUMIOO shall not be liable for any loss or damage arising from reliance on information available on the Platform or from any delay or failure in transmitting data between you and your medical provider.
  • Medical providers remain fully responsible for the accuracy of all medical information, diagnostic reports and treatment recommendations.

Nothing in this Disclaimer limits liability for death or personal injury resulting from negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded under applicable law.

7. External Links

The Platform may contain links to third-party websites or resources. MUMIOO has no control over such sites and is not responsible for their content or availability. Inclusion of a link does not imply endorsement.

8. Use at Your Own Risk

Your use of the Platform is at your sole risk. You are responsible for making sure that any services, information or products available through this Platform meet your specific requirements.

9. Governing Law & Jurisdiction

This Disclaimer and any dispute or claim (including non-contractual disputes) shall be governed by the laws of England and Wales. Courts of England shall have exclusive jurisdiction, except that mandatory consumer-protection rules of your country of residence may also apply.

10. Updates

MUMIOO may update this Disclaimer at any time. Changes take effect once posted. Continued use of the Platform after an update means you accept the revised Disclaimer.



Privacy Policy

(Last updated: 28 June 2025)


1 — Who we are

Platform operator: MUMIOO HEALTH LTD (UK), Company No. 16537972

Registered office: 15 Ashdown Road, KT17 3PL, Surrey, UK

Contact: info@mumioohealth.com

Medical provider / data controller for medical files:

Clínica MARTÍ TORRES, Plaza de la Constitución nº 9-1ª planta, C.P. 29008, de Málaga, España (NICA 7086 • 7030 • 7039 • 35169)

Contact: info@clinicamartitorres.com

MUMIOO acts as a data processor for your medical data on behalf of the clinic, and as an independent data controller for the booking account and payment data you submit on our Platform.


2 — What data we collect

Category

Examples

Legal basis (GDPR)

Booking & contact data

Name, email, phone, preferred appointment slot

Contract performance (Art 6 1 b)

Payment data

Card token, payment status (handled by Stripe)

Contract performance (Art 6 1 b)

Medical data

Referral info, MRI images (DICOM), radiology report

Explicit consent & medical diagnosis exemption (Art 9 2 h)

Technical data

IP, device ID, cookies (functional/analytics)

Legitimate interest (Art 6 1 f)

Marketing e-mails are sent only with your opt-in consent (Art 6 1 a).


3 — Why we process your data

  • To arrange and confirm your MRI appointment
  • To route medical images and reports securely to the clinic and to you
  • To issue invoices on the clinic’s behalf
  • To improve site performance and user support
  • (If you opt in) to send health-screening news and offers

We do not use your medical data for advertising or profiling.


4 — Where we store and transfer data

  • Hosting: encrypted servers in the European Economic Area (Frankfurt / Amsterdam)
  • Transfers to the UK: safeguarded by the EU–UK adequacy decision and the 2021 Standard Contractual Clauses (SCCs).
  • Sub-processors: Stripe Payments EU, AWS EMEA Sàrl, and Auth0 EU. All are bound by SCCs.

A list of all sub-processors is available on request.


5 — Retention policy

Data set

Standard retention

Booking & invoice data

6 years (Spanish tax law)

MRI images & reports

90 days on MUMIOO servers, then deleted; master copy retained by the clinic for at least 7 years (Spanish health-record law)

Marketing opt-ins

Until you unsubscribe

Logs & security backups

24 months


6 — Your rights

You may, at any time, exercise the following rights free of charge:

  • Access your data
  • Rectify inaccuracies
  • Erase data (“right to be forgotten”)
  • Restrict or object to certain processing
  • Port your booking data to another provider
  • Withdraw consent (for marketing or, where applicable, health-data processing)

Requests related to medical records should be addressed to Clínica MARTÍ TORRES as the data controller.

Send all other requests to info@mumioohealth.com.

If you believe your data has been handled unlawfully, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or with the UK Information Commissioner’s Office (ICO).


7 — Security measures

  • End-to-end TLS 1.3
  • AES-256 encryption at rest
  • Access controls & audit logs
  • Quarterly penetration testing
  • ISO 27001-certified hosting providers


8 — Cookies

We use:

Type

Purpose

Lifespan

Essential

Sign-in session, payment security

Session

Analytics (Matomo)

Aggregate site metrics

13 months

Preference

Language & cookie choices

6 months

Non-essential cookies only load after you click “Accept” on our banner. You can revoke consent at any time via Cookie Settings.


9 — Updates

We may revise this Privacy Policy to reflect changes in law or our operations. Material changes will be flagged on the Platform; continued use after an update means you accept the revised terms.


Questions? Email info@mumioohealth.com and we’ll respond within 30 days.