MBS Wellbeing Community Interest Company: Website Privacy Policy Notice, February 2023
Our contact details
Name: Joan Nicholson
Address: PO Box 73804, London E11 9FT
Phone Number: 020 8539 6976 or mobile: 07436 583288
E-mail: [email protected]
The type of personal information we collect
We may collect, use, store or transfer different kinds of personal data about you when you use our website or when you receive services or communication from us. We have categorised the different kinds of personal data as follows:
- Identity Data which includes your first name, last name, date of birth, your gender
- Photographic images
- Contact Data means the data we use to contact you including your billing address, home address, email address, mobile number, or your telephone landline number at home
- Carers Data or Next of Kin Information
- Financial Data means the payment method and card association used to process your payments for your services. We do not process financial transactions which are handled by the payment services providers, banks, or financial institutions that we use.
- Communication Data means details about communication you have made on our website including any information or other details you have provided in respect of your request for health and wellbeing services, cultural entertainment services or other services you may purchase or request from us.
- Customer / Service user feedback, carers views, that we will use to improve service quality.
Technical Data means details about the device(s) you use to access our website including your internet protocol (IP) / MAC address, browser type and version, location, browser plug-in types and versions, referrer URL, host name of the accessing computer, operating system and platform and other technology on the devices you use to access this website. This information will not be combined with data from other sources, and we do not share such information with third parties other than service providers that we retain to support the Site’s operation.
We may receive data about you from the following third parties:
- Google Analytics
We collect your data automatically via cookies, in line with the cookie settings on your browser. This may be combined with other data anonymously.
- Linked Sites and social media means that for your convenience this Site may contain hyperlinks to other websites that are not under our control, including Facebook, Instagram, YouTube, Vimeo, LinkedIn, Twitter.
Although we only look to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website.
- Usage Data includes information about how you use our website, products, and services. This includes your browsing patterns and information such as how long you might spend on one of our webpages and what you look at and for on our website, the page that referred you to our site and the click stream during your visit to our website, page response times and page interaction information (clicks you make on a page).
- Profile Data includes your username (email address), name and any details you share in the message fields or text boxes on this website.
- Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences. We only use your data to provide you with the services you have requested or purchased. We do not use your data for any other purpose.
GDPR and Data Protection Statement
All personal data held is protected by the UK Data Protection Act 2018, GDPR or applicable legislation. Data protection laws are complicated so we will always seek specialist advice regarding such matters. Our privacy notice describes how we use and protect personal data and it sets out your rights under data protection legislation.
Use of Cookies
Cookies may be either “persistent” cookies or “session” cookies. A persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date.
A session cookie will expire at the end of the user session when the web browser is closed.
This site uses cookies.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- Direct interactions: by using our website, filling in forms or by corresponding and communicating directly with us by post, phone, email, in person or otherwise.
- Indirectly from Carers, next-of-kin or other professionals: to provide you with the best quality service and to safeguard your best interests, significant others in your life may provide us with information about life and personal circumstances strictly on a need-to-know basis.
- Automated technologies or interactions: as you interact with us, we may automatically collect usage data and technical data about your equipment, browsing actions and patterns.
We use the information in order to:
- Respond to your enquiries
- Assess eligibility and entitlement to services
- Assess Safeguarding risks
- Provide you with health and well-being services, cultural entertainment services or other related services.
- Provide the services offered on the website.
- Improve the user experience on the website.
- Send you marketing communication.
Under the UK Data Protection Act 2018, the General Data Protection Regulation (GDPR) and applicable legislation, the lawful bases we rely on for processing this information are:
(a) Your consent.
You can remove your consent at any time. You can do this by contacting: joan@mbswellbeingcic.co.uk
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a legitimate interest.
How we store your personal information
We take commercially reasonable efforts to protect against unauthorised access to or use of your personal data.
Your information is securely stored. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used altered disclosed or accessed in an unauthorised way.
In addition, we limit access to your personal data to those who have a business need to know. They will only process your personal data on our instructions, and they are subject to abide by GDPR and applicable legislation.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.
Some data processors and third parties that we use, are based outside the United Kingdom, so their processing of your personal data will involve a transfer of data outside the United Kingdom. We use services, apps, or systems from non-UK destinations such as Microsoft 365 Business, Acronis Cyber Protect Home Office.
Whenever we transfer your personal data out of the United Kingdom, we ensure a similar degree of protection is afforded to it.
Children
The Site is intended for adults and is not intended for use by children under 13 years of age. We do not knowingly collect information from or about children or sell products or services to children under the age of 13.
Annual Updates to this Privacy Notice
We keep our privacy notice under regular review to make sure it is up to date and accurate.
We will review and update this privacy notice every year, by the anniversary date.
Your data protection rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at MBS Wellbeing Community Interest Company, P O Box 73804 London E11 9FT, Tel No: 0208 539 6976 if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information under the UK Data Protection Act 2018 or GDPR, you can make a complaint to us at:
MBS Wellbeing Community Interest Company
P O Box 73804 London E11 9FT
Tel No: 0208 539 6976
You can also complain to the Information Commissioner’s Office (the ICO), if you are unhappy with how we have used your data. The contact details are as follows:
Address:-
Information Commissioner’s OfficeWycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number:
0303 123 1113
Website: https://www.ico.org.uk