Privacy Notice – Wellbeing Enterprises
This Privacy Notice explains in detail the type’s of personal data we may collect about you when you interact with us or access our services. It also explains how we’ll store and process that data and how we’ll keep it safe.
- What is Wellbeing Enterprises?
- Wellbeing Enterprises was established in 2005 as the first Wellbeing Community Interest Company in the UK.
- Wellbeing Enterprises is a pioneering leader in the health and wellbeing sector that offers bespoke products and services to improve the health and wellbeing of individuals and communities.
- Wellbeing Enterprises also provide specialist support to health and social care professionals and organisations to enable them to put wellbeing at the core of what they do.
- For simplicity throughout this notice, ‘we’ and ‘us’ means Wellbeing Enterprises.
- Explaining the legal bases we rely on
The General Data Protection Regulation sets out a number of different reasons for which an organisation may collect and process your data. These include:
In specific situations, we can collect and process your data with your consent.
For example, when you tick a box to receive email newsletters.
When collecting your personal data, we’ll always make clear to you which data is necessary in condition with a particular service.
In certain circumstances, we need your personal data to comply with our contractual obligations.
For example, A contract is an agreement between parties which is binding in law and therefore we will have to supply anonymised data to our commissioners who fund us to demonstrate the work we have delivered.
If the law requires us to, we may need to collect and process your data.
For example, we can pass on details of people involved in criminal activity affecting the organisation to law enforcement.
In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.
For example, where processing enables us to enhance, modify, and improve the services we deliver to the community
- When do we collect your personal data?
We collect your personal information in a number of ways:
- Referral form (when an individual first comes in contact with our services)
- Via our website through the booking form system, subscribing to email newsletters, and ‘Contact Us’ form
- Questionnaires when first accessing our services
- Through the registration process of our Happy Place app
- Via our Welljoy Shop website purchasing/payment form
- What sort of personal data do we collect?
We collect the following personal information;
- Date of Birth
- Information gathered by use of GPS on our Happy Place app
- Information gathered by Google Analytics
- Credit/debit card information when purchasing via the Welljoy Shop website
- How and why do we use your personal data?
We collect this information for the following purposes:
- To protect our organisation and you from fraud and other illegal activities. (Legal compliance)
- To comply with our contractual or legal obligations to share data with law enforcement. (Legal compliance)
- To supply anonymised data to the commissioners who fund us to demonstrate the work we have delivered. (Contractual obligation)
- To send you email newsletters about our services. (Consent)
- To send you communications required by law or which are necessary to inform you about our changes to the services we provide to you. For example, updates to this Privacy Notice. These service messages do not require prior consent when sent by email or text message. If we do not use your personal data for these purposes, we would be unable to comply with our legal obligations. (Legitimate interest)
- To enhance, modify, and improve the services we deliver to the community. (Legitimate interest)
- To participate in research studies to evidence the benefits our service has on the people and communities it supports. (Your information will not be shared for this purpose without your consent). (Legitimate interest)
- How we protect your personal data
- We know how much data security matters to all of our clients. With this in mind, we will treat your data with the utmost care and take all appropriate steps to protect it.
- We secure access to all transactional areas of our website and apps using ‘https’ and ‘SSL’ technology.
- Google Analytics is committed to GDPR and the protection of the data it stores. Google Analytics is certified by the EU Privacy Shield and ISO 27001. Further information regarding how Google Analytics safeguards your data can be found here.
- Access to your electronic personal data is password-protected and can only be accessed when on Wellbeing Enterprises office premises. Copies of paper based personal information is locked away securely in our filing systems and does not leave the premises
- We regularly monitor our system for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security.
- How long will we keep your personal data for?
- Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected.
- At the end of that retention period, your data will either be deleted completely or anonymised so that it can be used in a non-identifiable way for statistical analysis and reporting to funders.
Examples of data retention periods:
- Employee records are kept for 6 years following termination of Contract.
- Patient/client data is kept for 7 years and then becomes anonymised for the purposes mentioned above.
- Personal information collected in relation to children is kept indefinitely.
- Who do we share your personal data with?
We sometimes share your personal data with trusted third parties.
When we share your data, we make sure that:
- We provide only the information they need to perform their specific services.
- They may only use your data for the exact purposes we specify in our contract with them.
- We work closely with them to ensure that your privacy is respected and protected at all times.
- If we stop using their services, any of your data held by them will either be deleted or anonymised.
Sharing your data with third parties for their own purposes:
We will only do this in very specific circumstances, for example:
- We may be required to disclose your personal data to the police or other enforcement, regulatory or Government body, upon a valid request to do so.
- For fraud management, we may share information about fraudulent or potentially fraudulent activity on our premises or in our systems. This may include sharing data about individuals with law enforcement bodies.
We currently share personal information with the following organisations who will process your data as part of their contracts with us:
- NHS Halton CCG
- North West Boroughs Healthcare NHS Foundation Trust
- Royal Liverpool and Broadgreen University NHS Trust
- Aintree University Hospitals NHS Foundation trust
- Where could your personal data be processed?
The data Wellbeing Enterprises collects is processed and stored exclusively within the United Kingdom.
- What are your rights over your personal data?
You have the right to request:
- Access to the personal data we hold about you, free of charge in most cases.
- The correction of your personal data when incorrect, out of date or incomplete.
- That we stop any consent-based processed of your personal data after you withdraw that consent.
- That we stop using your personal data for direct marketing (either through specific channels, or all channels).
- The right to request that all of your personal data is erased from our systems.
Your right to withdraw consent
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent.
Where we rely on our legitimate interest
In cases where we are processing your personal data on the basis of our legitimate interest, you can ask us to stop for reasons connected to your individual situation.
We will then do this unless we believe we have a legitimate overriding reason to continue processing your personal data.
You have the right to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We must always comply with your request.
Checking your identity
To protect the confidentiality of your information, we will ask you to verify your identity before proceeding with any request you make under this Privacy Notice.
You can contact us to request to exercise these rights at any time as follows:
- Telephone; 01928 589 799
- Email: email@example.com
- Address: Bridgewater House, Old Coach Rd, Runcorn, WA7 1QT
If we choose not to action your above requests we will explain to you the reasons for our refusal.
- Contacting the Regulator
If you feel that your data has not been handled correctly, or you are unhappy with our response to any request that you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
You can contact them by calling 0303 123 1113 or go online to www.ico.org.uk/concerns
- Any questions?
If you have any questions that haven’t been covered please contact Helen McPeake who will be pleased to help you:
- Telephone: 01928 589 799
- Address: Bridgewater House, Old Coach Rd, Runcorn, WA7 1QT
Terms and Conditions of Use
Wellbeing Enterprises CIC is a registered Community Interest Company limited by shares (registered company number 05888474).
Registered office: Bridgewater House, Old Coach Road, Runcorn, WA7 1QT
These terms and conditions apply to Wellbeing Enterprises CIC website, HappyPlace website and WellJoy Shop website. Throughout this policy, “Site” is used to refer to each of the aforementioned websites.
Please read these terms carefully before using this website (“Site”). Your use of this Site constitutes acceptance of these terms and conditions, which take effect on the first day of use of this Site.
Wellbeing Enterprises CIC reserves the right to change these terms and conditions by posting the changes online. Your continued use of this Site after changes are posted constitutes your acceptance of this agreement as modified.
These terms and conditions apply to any site under the control of Wellbeing Enterprises CIC and from which a link has been created to these terms and conditions.
Copyright in the material is owned by Wellbeing Enterprises CIC, its National Partners and/or its content suppliers. Wellbeing Enterprises CIC has made every effort to gain copyright for all written material on this Site. Any person who owns the copyright for material published on this Site, please the Wellbeing Enterprises team.
We will use any personal information you provide to use through the Site or which we collect about you in relation to your use of the Site in accordance with our Privacy Notice (as updated from time to time), which can be found here.
Unauthorised use of the material including reproduction, storage, modification, distribution or publication without the prior written consent of Wellbeing Enterprises CIC or, where applicable, the respective copyright owner(s) is prohibited. Documents (including information, images, photos, logos, names and icons without the prior written permission of the copyright holders on this Site may not be downloaded, altered or adapted for any purpose except for personal, non-commercial use.
Should Wellbeing Enterprises CIC receive any complaint with regard to third party material on this Site, it will review the matter and remove material at its sole discretion. Wellbeing Enterprises CIC will have no further liability to either party in such instance.
The photographs of adults or children used within this Site to illustrate the work of Wellbeing Enterprises CIC are included with the informed consent of participants.
Materials on this Site are provided for the purposes of information or reporting only and should not be relied upon. Independent advice should be sought on financial, legal and medical matters.
Links to third party websites on this Site are provided solely as a convenience to you. Wellbeing Enterprises CIC will not be held responsible for the contents or the reliability of linked third-party websites, either to or from Wellbeing Enterprises CIC Site, and does not necessarily endorse the views expressed within them. If you decide to access any of the third party websites linked to this Site, you do so entirely at your own risk. Any website wanting to create a link to any Wellbeing Enterprises CIC Site, or to request a link to be created to them, must contact the Wellbeing Enterprises team.
You agree to use this Site only for lawful purposes and in a manner which does not infringe the rights of, restrict, or inhibit the use and enjoyment of this Site by any third party. Such restriction and inhibition includes, without limitation, conduct which is unlawful or which may harass or cause distress or inconvenience to any person, the transmission of obscene or offensive material or disruption of normal flow of dialogue within this Site.
Where you are able to submit any contribution to this Site you agree, by submitting your contribution, to grant Wellbeing Enterprises CIC a perpetual, royalty-free, non-exclusive, sub-licensable right and license to use, reproduce, modify, adapt, publish, translate, create derivative works from, distribute, perform, play, and exercise all copyright and publicity rights with respect to your contribution worldwide and/or to incorporate your contribution in other works in any media now known or later developed for the full term of any rights that may exist in your contribution. If you do not want to grant Wellbeing Enterprises CIC the rights set out above, please do not submit your contribution to Wellbeing Enterprises CIC.
By submitting your contribution to Wellbeing Enterprises CIC Group you warrant that your contribution is your own original work and that you have the right to make it available to Wellbeing Enterprises CIC for any or all of the purposes specified above. Furthermore, you warrant your contribution is not defamatory, does not infringe any law, you indemnify Wellbeing Enterprises CIC against all legal fees, damages and other expenses that may be incurred by Wellbeing Enterprises CIC as a result of your breach of the above warranty and waive any moral rights in your contribution for the purposes of its submission to and publication on the Site and the purposes specified above.
Wellbeing Enterprises CIC has the right to remove any material or posting you make on this Site at its discretion.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by our Privacy Notice. You should exercise caution and look at the privacy statement applicable to the website in question.
If these Terms and Conditions are not accepted in full, the use of this Site must be terminated immediately. Wellbeing Enterprises CIC do not accept liability for any damages whatsoever, including, without limitation, indirect or consequential damages, loss of profits, or any damages whatsoever arising out of, or in connection with the use or loss of use of this Site.
While Wellbeing Enterprises CIC endeavours to ensure that the Site is available 24 hours a day, this is not guaranteed. Wellbeing Enterprises CIC does not warrant that the functions contained in the material in this Site will be uninterrupted or error free, that defects will be corrected, or that this Site or the server that makes it available are free of viruses or bugs. Wellbeing Enterprises CIC may make changes to the materials on this Site, or to the information, products and prices described in them, at any time without notice. The materials on this Site may be out of date, and Wellbeing Enterprises CIC make no commitment to update the Materials on this Site.
These Terms and Conditions shall be governed and construed in accordance with the laws of England and Wales. Any disputes arising here shall be exclusively subject to the jurisdiction of the courts of England and Wales.
For any questions regarding the Site please contact the Wellbeing Enterprises team.
How to contact us:
If you have any questions about the terms and conditions above, please find the appropriate support channel at Wellbeing Enterprises;
- Address; Bridgewater House, Old Coach Road, Runcorn, WA7 1QT
- Telephone; 01928 589 799
- Email; firstname.lastname@example.org