Privacy Policy

1. Introduction

Patheway Health CIC is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Patheway Health CIC is a registered community interest company in England and Wales.

• Registered address: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF
• CIC registration number: 16977575
• Contact email: help@pathewayhealthcic.org

We are the "data controller" for the purposes of data protection law.

3. What Information We Collect

We may collect and process the following types of personal data:

• Identity data (name, title)
• Contact details (email address, phone number, postal address)
• Financial information (donation details, Gift Aid information)
• Technical data (IP address, website usage data)
• Volunteer and employment information
• Any other information you provide to us

We may also process special category data (e.g. health information) where necessary and with appropriate safeguards.

4. How We Collect Information

We collect personal data when you:

• Contact us directly
• Donate or fundraise for us
• Sign up to receive communications
• Volunteer or work with us
• Use our website or services

5. How We Use Your Information

We use personal data to:

• Provide and manage our services
• Process donations and Gift Aid claims
• Communicate with you about our work and activities
• Manage volunteers and staff
• Comply with legal and regulatory obligations
• Improve our services and website

6. Lawful Bases for Processing

We rely on the following lawful bases:

• Consent (e.g. marketing communications)
• Contract (e.g. volunteer or employment arrangements)
• Legal obligation (e.g. financial reporting)
• Legitimate interests (e.g. improving services and supporter engagement)

7. Sharing Your Information

We may share your personal data with:

• Service providers (e.g. IT systems, payment processors)
• Professional advisers (e.g. legal, accounting)
• Regulators and authorities where required

We ensure that all third parties respect the security of your data and process it lawfully.

8. International Transfers

We do not transfer personal data outside the UK unless appropriate safeguards are in place.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Secure systems and storage
• Access controls
• Staff training
• Encryption where appropriate

10. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal and accounting requirements.

11. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise your rights, contact us at: help@pathewayhealthcic.org

12. Cookies

Our website may use cookies to improve user experience and analyse website traffic. You can control cookies through your browser settings. See our Cookie Policy for full details.

13. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO).

14. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on our website.

15. Contact Us

If you have any questions about this policy or how we handle your data, please contact:

• Company Name: Patheway Health CIC
• Address: 167–169 Great Portland Street, 5th Floor, London, W1W 5PF
• Email: help@pathewayhealthcic.org
• Phone: 07832 082830