This privacy notice provides information on how Added Health Limited (“us”, “we” “our”) collects and processes your personal data when you visit our website, including any data that you may provide through our site when you register for our services, complete our questionnaires or surveys, sign up to our newsletter, or purchase a product or service.

It is important that you read this privacy notice together with our Privacy Policy which contains more detailed information about our data processing.

1.  Important information and who we are

Added Health Limited is the controller and is responsible for this website.

We have appointed a data protection officer (“DPO”). If you have any questions about this privacy notice or our data protection practices, please contact the DPO.

Contact details

Our full details are:

Full name of legal entity: Added Health Limited

Email address: data.protection.officer@addedhealth.com

Telephone number: +44 1865 419603

Postal Address: Added Health Limited, Prama House, 267 Banbury Road, Oxford, OX2 7HQ, UK.

2.  Data we collect about you

We may collect, use, store and transfer different kinds of personal data about you as follows:

• Identity Data.
• Contact Data.
• Financial Data.
• Transaction Data.
• Technical Data.
• Profile Data.
• Usage Data.
• Marketing and Communications Data.
• Special Categories of Personal Data.

We may collect and process Special Categories of Personal Data, such as information about your health. This is so we can provide you with certain services, including consultations with medical professionals, assessing your health and fitness, providing you with lifestyle coaching suggestions and advice on any products or services, and providing suggestions and relevant marketing material tailored to your requirements.

In particular, we may collect and process information relating to your mental health, physical health, mobility and exercise patterns, relationships, social circumstances, dietary preferences, diagnosis and family health history. We may also collect and process information about your ethnicity, sexual orientation, sex life, religious beliefs or opinions, genetic data or biometric data where this is relevant to our services to you, or is information that you have provided us as part of our services that you have applied for or intend to apply for.

You may choose to provide us with Special Categories of Personal Data when you complete our questionnaires or surveys, or when you submit information to us by other means. Where you provide us with such Special Categories of Personal Data, you are giving us your explicit consent to process such data about you to the extent permitted by the UK and/or EU data protection regime (as applicable), and considering the more restrictive of these regimes.

We will only process Special Categories of Personal Data in accordance with specific lawful processing basis and processing conditions as permitted by data the UK and/or EU data protection regime (as applicable), considering the more restrictive of these regimes. Generally, we only process Special Categories of Personal Data where we have obtained your explicit consent or where processing is necessary for health or social care purposes.

If you have given explicit consent, you have the right to withdraw this at any time. Please see your legal rights below for further details.

Please also refer to our Privacy Policy for further details.

3.  How we use your personal data

We will only use your personal data for the purpose for which we collected it which include the following:

• To register you as a new client.
• To process and deliver your order.
• To evidence our claims or charges where there is a dispute.
• To provide and manage your access to our site and manage our relationship with you.
• To personalise and tailor your experience on our site and measure or understand the effectiveness of the advertising we serve to you.
• To administer and protect our site and business.
• To enable you to complete a questionnaire, survey or similar.
• To personalise and tailor our services to you.
• To be as responsive as possible to you, for example, when answering your client support queries.
• To supply you with information by email, post or other means that you have opted-in-to.
• To use data analytics to improve our website, services, marketing, client relationships and experiences.

Where we use data analytics to improve our website, services, marketing, client relationships and experiences, we will rely on your having given us explicit consent for these purposes. You have the right to withdraw your consent at any time. Please see your legal rights below for further details.

Our site may use your personal data decisions entirely or partially based on automated processes according to the purposes outlined in this privacy policy. Our site adopts automated decision-making processes as far as necessary to enter into or perform a contract between you and us, or on the basis of consent where consent is required by the law.

By using our site and/or our services, you are giving us your explicit consent to make automated decisions. If you do not consent to our making automated decisions, you must not use our site or services.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for. To determine the appropriate retention period for personal data, we consider the amount nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purpose for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

4.  How we share your personal data

We may share your personal data with external third parties with whom we contract in order to optimise the products and services we offer. Where the sharing of your personal data involves a transfer of this data to a country outside of the UK, EU or to a third country without adequate data protection laws, we ensure that we put in place the appropriate binding contracts to protect the integrity and security of your personal data. More detail can be found in our Privacy Policy,

5.  Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data including:

• The right of access – you may ask for copies of your personal information. Please see the ICO Guidelines on the Right to Access for more information on this right.
• The right to correction – you may ask us to correct or update inaccurate personal information. Please see the ICO Guidelines on the Right to Rectification for more information on this right.
• The right to erasure – you may ask us to erase your personal information in certain circumstances. You can also withdraw your consent, where consent is the legal basis for processing your personal information. Please see the ICO Guidelines on the Right to Erasure.
• The right to restrict processing – you have the right to ask is to restrict the processing of your personal information in certain circumstances. Please see the ICO guidelines on the Right to Restrict Processing.
• The right to complain to a supervisory authority – you can complain about our processing of your personal information at any time to the Information Commissioner’s Office, the UK regulator for data protection issues (www.ico.org.uk).
• The right to withdraw consent: Where we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time. Although, if you do so, this does not mean anything we have done with your information with your consent up to that point is unlawful. Where we have relied on your explicit consent to process Special Categories of Personal Data or to make automated decisions, you can withdraw your consent by emailing us at data.protection.officer@addedhealth.com. You can also withdraw your consent to our processing your personal data for data analytics purposes at any time by adjusting your browser settings (and you can refer to our Cookie Policy for further details). Note that such withdrawal in certain circumstances may mean we can no longer continue to provide services or information to you.

More detail about your legal rights can be found in our Privacy Policy.

You can obtain more information about your rights as a data subject in the UK and how to exercise them by visiting the website of UK Information Commissioner’s Office located here: https://ico.org.uk/your-data-matters/.

6.  Further details

If you are looking for more information on how we process your personal data including on data security, data retention and lawful processing bases, please refer to our Privacy Policy or contact us using the Contact Details set out above.

Date last updated: 30 November 2022