1. THIS POLICY
1.1. M&F Health Communications Limited (We) are the data controller in relation to personal data (Data) we collect from you.
1.2. We are committed to protecting and respecting your privacy.
1.3. We are registered in England and Wales under number 10283626 and have our registered office at 31-35 Kirby Street, London EC1N 8TE. We can be contacted at email@example.com and on 07710881645.
1.4. This policy sets out the basis on which we will process any Data we collect from you, or that you provide to us, or that we receive from other sources. Please read the following carefully to understand our views and practices regarding your Data and how we will treat it.
2. INFORMATION WE COLLECT FROM YOU
2.1. We will collect and process the following Data about you:
2.1.1. Information you give us. This is information about you that you give us by filling in forms (whether on our website (our site) or otherwise) or by corresponding with us by phone, e-mail or otherwise. The information you give us may include your name, address, e-mail address, phone number, financial and credit card information.
2.1.2. Information we collect about you. This includes information about your visit to our site. We will automatically collect technical information and information about your visit including, but not limited to traffic data, location data, weblogs and other communications data and the resources that you access.
2.1.3. Information we receive from other sources. This includes information we receive about you if you use any of the other websites we operate or other services we provide. This also includes information obtained from social media accounts, publisher websites, business partners and other third parties.
2.2. Collecting this Data is essential to us being able to provide public relations and public affairs services.
3.2. We may use the following cookies:
3.2.1. Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it.
This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
3.2.2. Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
3.2.3. Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
3.4. You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
3.5. Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Data to these websites.
4. HOW WE USE YOUR INFORMATION
4.1. A key requirement of UK Data Protection law is that we have a lawful basis for each aspect of processing of your Data.
4.2. Where Data is collected for the purpose of fulfilling a contract with you, we will use your Data on the basis that processing is necessary to fulfil that contract, which may include the following types of processing:
4.2.1. To ensure that content from our site is presented in the most effective manner for you and for your computer;
4.2.2. To carry out our obligations arising from any contract entered into between you and us (including for the purposes of debt collection); and to notify you about changes to our products and services.
4.3. Where we are required to process Data in order to comply with our legal obligations, we will use your Data on the basis that it is necessary to do so for the purposes of legal compliance, which may include storing your Data in order to establish, exercise or defend legal claims within the relevant statutory limitation periods.
4.4. Where we have a legitimate interest (which you may object to at any time as set out in paragraph 7 below) to process Data, we will use your Data on the basis that we have legitimate interest to do so which is not overridden by your rights and freedoms, which may include the following types of processing:
4.4.1. To store Data of prospective clients and to contact them in order to provide them with information about our services;
4.4.2. To store Data of existing clients and to contact them in order to provide them with information about our services; and to collect and store Data about current, past and prospective journalists, politicians and policy makers/ influencers for the purpose of formatting such Data and (if instructed to do so) transferring it to clients in connection with public relations and public affairs services provided by M&F.
4.5. Where we have obtained your consent (which may be withdrawn by you at any time as set out in paragraph 7 below) to processing Data, we will use your Data on the basis that you have given your consent.
4.6. We may disclose your personal information to third parties in the following circumstances:
4.6.1. To our ultimate holding company (Exclaim Communications Limited company registered in England and Wales under number 10283748), as defined in section 1159 of the UK Companies Act 2996;
4.6.2. In the event that we sell any of our business or assets, in which case we may disclose your Data to the prospective buyers of such business or assets and to their legal advisers;
4.6.3. In the event that we appoint a third party data processor to process your Data in accordance with our documented instructions and with the requirements of UK Data Protection law;
4.6.4. If we are under a duty to disclose or share your Data in order to comply with any legal obligation;
4.6.5. If it is necessary to disclose your Data to our professional advisers (for example, to our legal advisers or our accountants);
4.6.6. In providing services to a client or another third party; and
4.6.7. If it is necessary to do so in order to enforce or apply our terms and conditions of supply (if applicable) or to protect the rights, property, or safety of M&F Health Communications Limited, our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and exchanging information with debt recovery agencies.
WHERE WE STORE YOUR DATA
4.7. We will take all steps reasonably necessary to ensure that your Data is treated securely and in accordance with UK Data Protection law.
4.8. [All information you provide to us is stored on our secure servers.] [Any payment transactions will be encrypted [using SSL technology].
4.9. The Data that we collect from you will be transferred to, and stored at, a destination inside the European Economic Area (“EEA”). We will ensure that any transfer of Data outside the EEA are only made:
4.9.1 to those states which the European Commission has deemed to have adequate data security protection or which are otherwise permitted under UK Data Protection law; or
4.9.2 where the transfer is necessary for one of the reasons set out in UK Data Protection law, including the performance of a contract with you or where you have given your consent; or
4.9.3 where the transfer is legally required under UK Data Protection law; or
4.9.4 where Data will be processed by staff operating outside the EEA who work for us or for one of our suppliers and for the purposes of fulfilling a contract with you.
4.11. Unfortunately the transmission of information via the internet is not completely secure. Although we will do our best to protect your Data, we cannot guarantee the security of your Data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access
5. HOW LONG WE KEEP YOUR DATA
5.1. We will process your Data for no longer than is reasonably required. We consider this to be the amount of time that we need your Data in order for any processing which is carried out on the basis of one or more lawful basis set out in paragraph 4 above.
6. Your rights
6.1. In order to exercise any of your rights, please write to us at our registered office, contact us by telephone or email us using the details set out in paragraph 1 above.
6.2. You have the right to ask us not to process your Data for marketing purposes. You may object to our use of your Data for marketing purposes contacting us and informing us that you object to our processing of your Data for marketing purposes.
6.3. In respect of processing which we carry out on the basis that we have a legitimate interest, you may object to our processing for specified purposes or at all at any time. You may object by contacting us and informing us that you are objecting to processing for one or more of the purposes for which we have legitimate interest to process your Data.
6.5. In respect of processing which we carry out on the basis that you have given consent, you have the right to withdraw consent to our processing for specified purposes or at all at any time. You may withdraw consent by contacting us and informing us that you are withdrawing your consent for one or more of the purposes for which consent was given.
6.6. You may request to have any incorrect information corrected or to have your information deleted.
6.7. You have the right to request a copy of information held about you by us. Generally we will provide this information free of charge, however in certain circumstances we reserve the right to charge a reasonable fee to meet our costs in providing you with details of the information we hold about you in accordance with UK Data Protection law.
6.8. In certain circumstances, you have the right to require us (and our third party data processors) to erase your Data without undue delay, although we reserve the right not to erase Data (or to inform our third party data processors) where processing remains necessary for purposes which are permitted by UK Data Protection law.
6.9. You have the right to request that your Data is made portable for the purposes of transferring Data to another supplier in relation to:
6.9.1. Data which you have provided to us;
6.9.2. Data which is processed on the basis of your consent or the performance of a contract; and
6.9.3. Data which is processed by automated means.
7. RIGHT TO LODGE A COMPLAINT
7.1. We will endeavour to only use Data that is relevant to our purpose and to ensure your Data is kept secure however sometimes errors occur. If you wish to raise a complaint on how we have handled your Data, you can contact our Data Compliance Officer at firstname.lastname@example.org, 07710881645 who will investigate the matter. If you are not satisfied with our response or believe we are not processing your Data as required by law, you can contact the Information Commissioners Office on 0303 123 1113.