Purpose of this Privacy Policy

Mamichie Healthcare Limited is a data controller of your personal data and this policy explains what personal information we collect and process. Your rights in relation to your personal data are also explained in this notice. If you have any queries about this Privacy Policy or how we use your personal information, please scroll down this page for our contact details.

​

Who does this Policy apply to?

This privacy policy applies to you if you provide your personal information to Mamichie Healthcare Limited for training sessions or events or access our website.

​

Personal data we process:

We may process the following information about you (non-exhaustive list):

• your name and address

• your mobile phone number

• your email address

• your marital status

• your age and gender

• information about your family

• your education and employment

• attendance at meetings, events and training

• the result of a DBS check

• information about your use of the Services (e.g. when you have logged in, what pages you visited)

• payment details when booking appointments

• when you are unavailable for serving on rota

• dates and times that you are on a rota

 

We may also collect, store and use the following “special categories” of sensitive personal information (if you give us this information):

• Information about your health, including any mental or physical conditions that you notify us about

• Your religious beliefs

• Your racial origin

• Your sexual orientation

• Any criminal record

​

How we obtain your personal data:

• Directly from you when you speak to us in person, fill out forms — paper or online — or sign up to any of our events or training sessions that require registration.

• Automatically when you use our web services via the use of cookies (see cookie policy for more info)

 

How we use your personal data:

• Carry out day-to-day administration including calls and visits, coordinating team rotas, keeping financial records for audit and tax purposes

• Making contact with you to keep you informed of upcoming activities and resources

• Statistical analysis; gaining a better understanding of our business demographics

​

Our legal bases for processing your personal data:

The UK GDPR provides a number of legal bases (legal reasons) for processing personal data. The ones we use are listed below:

​

1) Where it is necessary for our legitimate interests

We have put safeguards into place to ensure that your personal information is protected and that your fundamental rights and freedoms are not overridden. Examples:

• to set up your Mamichie Healthcare record

• to keep a record of your attendance at counselling sessions and/or our events

• to provide you with support that you have requested and we believe would be helpful to you

• to organise volunteers and put together rotas

​

2) Where you have consented to us using your personal information

We may also ask for consent where you have given us information and asked us to use it for a certain purpose.

​

3) Where we need to perform the contract we have entered into with you

Examples include:

• to buy tickets for events

• to administer the Services (such as troubleshooting, data analysis, research)

• to tell you about changes to our website, software, or Services that will affect your use of our website

​

4) Where we need to comply with a legal obligation

Examples include:

• keeping records for administrative purposes

• to prevent and detect fraud

• to protect children and vulnerable adults

• to get your feedback on our Services

​

Information about children

Whilst information relating to children is not considered to be special category information, it is information that is given specific protection. Where required, we will always ask for the consent of parents before allowing the child to use our services.

​

Sharing your personal data:

 

We may share your information with certain third parties including:

• Support services and benefits providers (e.g. local authorities, your doctor) where required

• Our suppliers for the performance of any contract we enter into with them or you

• Our software providers who need to see your information in order to keep our website up and running

• Analytics and search engine providers who analyse information about your use of our website and help us to tailor the product and offers that we offer to you and other users

 

We may also disclose your personal information to third parties:

• If we are required by law, or in order to enforce or apply our terms of use

• This includes exchanging information with other organisations such as law enforcement agencies

​

How we store your personal data:

The security of your personal information is important to us.
We use appropriate technical and organisational measures to safeguard personal information and encryption technology where appropriate to enhance privacy and help prevent information security breaches.

Any personal information that we provide to you will be held within the EEA.
All third parties who provide services to us or our software provider are required to sign a contract requiring them to have appropriate technical, administrative, and physical procedures in place to ensure that your information is protected against loss or misuse.

All information you provide to us is stored on our secure servers or on secure servers operated by a third party. Information on our third-party providers can be found above.

​

Retention of information

We only hold your personal information for as long as necessary for the purposes for which we collected your information. We have a retention policy which lays down timescales for the retention of information. Please click this link to read our retention policy. We have set these timescales in accordance with any applicable legislation and where none exists, then we will keep your information for the duration of any contract that you have entered into with us and then for a period of 7 years after which time it will be deleted.

 

Your Rights

 

Your right to be informed

You have the right to know what personal information we have about you, how we use it, for what purpose and in accordance with which lawful basis, who we share it with and how long we keep it. We use this Privacy Policy to explain this.

​

Your right of access

You have the right to ask us for copies of your personal information.

​

Your right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

 

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

 

Your right to restriction of processing

You have the right to ask us to restrict the processing of your personal information in certain circumstances.

​

Your right to data portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

 

Your right not to be subject to automated decision-making

We do not use automated decision-making.

 

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please use our contact details or raise a support ticket if you wish to make any further enquiries.