Wild Orchid Therapeutic Services is fully committed to respecting and protecting the privacy of individuals and to fully complying with all the requirements of the UK GDPR.
SCOPE
This policy applies to all those individuals whose personal information we collect and use.
This Privacy Notice explains, amongst other things:
- Why we may process your personal information
- What personal Information we may collect about you
- How we may collect your personal information
- Why our processing of your personal information is lawful
- How we may use your personal information
- Who we may share your personal information with
- How long we may keep your personal information
- Your rights regarding your personal information
GENERAL INFORMATION
What is personal information?
Personal information is anything that enables you to be identified or identifiable. Examples are:
- First and last names
- Postal, email and IP addresses
- Telephone numbers
- Identity documents (e.g., passports & driving licence)
- Identity numbers (e.g., National Insurance and bank accounts)
- Career & educational documents (e.g., CVs & qualifications)
- Contact information
- Your personal information is sometimes called “personal data”. We collectively refer to handling, collecting, protecting, storing, or otherwise using your personal information as ‘processing’.
- You do not have to provide any of your personal information to us, but if you do not provide all the information we ask for, we may not be able to do or provide what you want.
COLLECTING (OBTAINING) YOUR PERSONAL INFORMATION
Below are some examples of how you may provide personal information to us:
- Asking us to provide information to you or someone else
- Using our services
- Contacting us
- Searching and browsing our website
- Making a referral
- Submitting CVs or work history information to us
- Providing us with business cards or other contact information
- Collecting data directly via service user permission forms
- We may also obtain some of the above personal information about you from third parties (other individuals or organisations) or from publicly available sources, for example social networks, company websites and public records.
COOKIES
For information about the cookies and any other similar technologies we use, please see our cookies policy.
USING YOUR PERSONAL INFORMATION
When we collect your personal information, we may use it for any of the purposes described below or as stated at the point we collect it from you (or as may be obvious to you from the context of collection), including:
- To provide information that you have requested
- To deliver our services
- To make contact with you
- To administer and manage our website
- To consider whether to offer you employment with us
- To manage our relationship with you
- To develop our businesses and services
- To conduct quality and risk management reviews
- For any other purpose(s) for which your personal information has been provided to us, including any of the purposes given under ‘Collecting your personal information’ above
- We do not collect personal information for sale to third parties.
USING YOUR PERSONAL INFORMATION FOR MARKETING
Where we are legally required to do so, we will only provide you with marketing materials
if you have given us your prior consent.
If you opt into any subscriptions, but later want to unsubscribe, you should look for and follow the instructions we will provided in our relevant communications to you.
If you choose to unsubscribe, we may retain some of your personal information to identify you, so that we can continue to honour your request and ensure that we do not continue to provide you with marketing materials
OUR LEGAL GROUNDS FOR PROCESSUING YOUR PERSONAL INFORMATION
We rely on one or more of the following:
- Consent: We may process your personal information after you have consented (agreed) to us doing so. Your consent may have been obtained by us, or by third parties on our behalf. You have the right to withdraw your consent at any time.
- Contract: We may process your personal information when we need to deliver a contractual service to you or because you have asked us to do something before entering into a contract (e.g., provide a quote).
- Legal obligation: We may process your personal information when we need to comply with a legal obligation.
- Legitimate interest: We may process your personal information when we need to for our or another’s legitimate interests, where these interests are not overridden by your rights.
SHARING YOUR PERSONAL INFORMATION
We may share (disclose) your personal information with third parties (other organisations or individuals) for:
- The purposes for which the information has been submitted
- The purposes listed above under ‘Using your personal information’
- As agreed between us
- We may also transfer share or disclose personal data to third party service providers of identity management, website hosting and management, data analysis, data backup, security, and storage services.
These third parties may use subcontractors (also known as sub-processors) that have access to your personal data.
It is our policy to only share your personal information with third parties that are legally or contractually bound to protect your personal information to the same standards as we are, and that will flow those same standards to their subcontractors.
We may also share your personal information with third parties in connection with our corporate transactions, (e.g., mergers and/or acquisitions), as a result of which your personal information may be assigned to a third party.
We may also share your personal information with law enforcement, regulatory and other government agencies and to professional bodies and other third parties, as required by and/or in accordance with applicable law or regulation.
The third parties we may routinely or regularly share your personal information with are:
- Local authorities
- Schools/Colleges
- Health providers
- Ofsted (Social Care)
- Enforcement agencies (Police etc)
TRANSFERS OF YOUR PERSONAL INFORMATION TO OUTSIDE THE UK
Your personal information may be transferred outside the UK. Any such transfer will be only:
- To a recipient located in a country which provides an adequate level of protection for your personal information, for example a country in the European Union (EU), or European Economic Area (EEA); or
- To a recipient under a contractual agreement which satisfies UK legal requirements for the transfer of personal information, to ensure that appropriate safeguards are in place to protect your personal information in accordance with UK levels of data protection; or
- When your personal information has first been anonymised
OUR RETENTION (STORAGE) OF YOUR PERSONAL INFORMATION
We will retain your personal information only for as long as we need it for the purpose(s) for which it was collected, or as required to do so by law.
To determine the appropriate retention period for your personal information, we consider the amount, nature, and sensitivity of it, the potential risk of harm from unauthorised use or disclosure of it, the purposes for which we process it and whether we can achieve those purposes through other means, as well as applicable legal requirements.
For more information see our Retention Policy, which we will provide on request.
YOUR RIGHTS IN RESPECT OF OUR PROCESSING OF YOUR PERSONAL INFORMATION
You have the right to be informed about our collection and use of your personal information. In particular, you may have the right to:
- Withdraw your previously provided consent to our processing of your personal information
- Request a copy of personal information we hold about you
- Ask that we update the personal information we hold about you, or correct such personal information that you think is incorrect or incomplete
- Ask that we delete personal information that we hold about you, or restrict the way in which we use such personal information
- Object to our processing of your personal information
- To exercise your rights, please contact us.
SECURITY OF INFORMATION
We are committed to protecting your personal information from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access and have implemented generally accepted standards of technology and operational security.
Please be aware that, we cannot guarantee the security of all personal information transmitted to or by us.
AUTOMATED DECISION MAKING
We do not use your personal information for automated decision making or profiling
CONTACT DETAILS
We can be contacted as follows:
- Online:
- By email: hello@wild-orchid.com
- By post:
- By Phone:
We have appointed a Data Protection Officer (DPO), who can be contacted via: hello@wild-orchid.com
YOUR RIGHT TO LODGE A COMPLAINT WITH THE ICO (UK ONLY)
If you have a complaint about the way we are handling your personal information or think we have not complied with our obligations under data protection law, you may contact the Information Commissioner’s Office (ICO), which is the supervisory authority (regulator) in the UK.
You may make a complaint to the ICO as follows.
- Online: https://ico.org.uk/make-a-complaint/.
- Live chat: https://ico.org.uk/global/contact-us/live-chat.
- Tel: 0303 123 1113
Please note you should raise your complaint with the ICO within three months of your last meaningful contact with us.
POLICY REVIEW AND UPDATING
We may update this Privacy notice at any time by publishing an updated version here. So that you know when we make changes, we will amend the revision date at the bottom of this page. The new modified or amended privacy policy will apply from that revision date.
This Privacy Notice was last updated on 16/11/2023.