GDPR Statement
General Data Protection Regulation (GDPR)
The new EU General Data Protection Regulation (GDPR) came into force on 25 May 2018 (including in the UK regardless of its decision to leave the EU) and will impact every organisation which holds or processes personal data. It will introduce new responsibilities, including the need to demonstrate compliance, more stringent enforcement and substantially increased penalties than the current Data Protection Act (DPA) which it will supersede.
Welby Healthcare Limited places a high priority on protecting and managing data, especially that of its clients and employees. The firm complies with applicable GDPR regulations.
Welby Healthcare Limited is focusing on the following GDPR requirements. These are being implemented by the Directors and senior management.
- Ensuring Privacy by design is implemented in all new projects, services and tools.
- Fine tuning processes to ensure they meet GDPR requirements, for example DSARs (data subject access requests), our Data Breach process and Privacy Impact Assessments.
- Updating our terms and conditions to reflect GDPR requirements.
- Updating our Privacy Standard Policy and Privacy Notices.
- Ensuring the required consent and preferences have been requested where necessary.
- Providing guidance on data retention periods.
- Providing training for all staff to enable them to understand the requirements of GDPR and how to manage the data that they are responsible for effectively.
Welby Healthcare Limited has policies in place that have been updated and reviewed to ensure the requirements of GDPR are addressed. The following key policies are in place: Information Security, Data Management, Records Management Policy (incl. Data Retention requirement), and Data Classification Standard. These provide the governance to ensure the PII data is handled correctly.
Welby Healthcare Limited does not have a Data Privacy Officer but the Directors and senior management will be responsible for the day to day compliance with GDPR and its requirements with support of the legal team.
Should you have any further questions regarding this GDPR statement then please contact your Welby Healthcare Limited relationship manager.
Privacy Policy of Welby Healthcare Ltd
Welby Healthcare Ltd operates the www.thewelbygroup.co.uk website, which provides the SERVICE.
This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service, the Welby website.
If you choose to use our Service, then you agree to the collection and use of information in relation with this policy. The Personal Information that we collect are used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.
The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at www.thewelbygroup.co.uk, unless otherwise defined in this Privacy Policy.
Information Collection and Use
For a better experience while using our Service, we may require you to provide us with certain personally identifiable information, including but not limited to your name, phone number, and postal address. The information that we collect will be used to contact or identify you.
Disclosures
In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority. We may pass your personal data to third parties who are service providers, debt recovery agents, Field Tracing Agents and subcontractors to us, for the purposes of recovering monies owed to our firm and all within our legitimate interests.
Log Data
We want to inform you that whenever you visit our Service, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies
Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.
Our website uses these “cookies” to collection information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Service.
Service Providers
We may employ third-party companies and individuals due to the following reasons:
- To facilitate our Service;
- To provide the Service on our behalf;
- To perform Service-related services; or
- To assist us in analysing how our Service is used.
We want to inform our Service users that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.
Security
We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
Links to Other Sites
Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children’s Privacy
Our Services do not address anyone under the age of 13. We do not knowingly collect personal identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.
Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.