Here at Inspiring Healthy Lifestyles, we ensure that all personal information you share with us is kept fully secure and held in full compliance with all GDPR governing laws. Inspiring Healthy Lifestyles (“a Data Controller”) is committed to protecting the privacy and security of your personal information.
This privacy notice explains how we use and will use your personal information and tells you about your privacy rights and how the law protects you in accordance with the General Data Protection Regulations (GDPR). We’re also happy to send you a copy if you prefer to read a physical copy in your own time. Please get in touch to request this, we also provide our privacy notice in accessible formats for visually impaired people.
Personal information can be anything that identifies and relates to a living person. This can include information that when linked with other information, allows a person to be uniquely identified. For example, this could be your name and contact details.
We collect personal information in general where:
- You have entered into a contract with us
- You or a legal representative has given consent
- As required by law (e.g. mandated by statute or court order)
- It is necessary for employment related purposes
- It is necessary to perform statutory functions (including law enforcement)
- It is necessary to deliver health or fitness services
- It is necessary for exercising or defending legal rights
- You have made your information publicly available
- It is necessary for archiving, research, or statistical purposes
- Dealing with legal disputes involving you, or other employees, workers and contractors including accidents at work
- Ascertaining your fitness to work
- Managing sickness absence
- Complying with health and safety obligations
- To prevent fraud, including sharing and matching of personal information for the national fraud initiative
- To conduct data analytics studies to review and better understand employee retention and turnover rates
- For equal opportunities monitoring purposes
We collect Special Information;
The law treats some types of personal information as ‘special’ because the information requires more protection due to its sensitivity. This information consists of:
- Racial or ethnic origin
- Sexuality and sexual life
- Religious or philosophical beliefs
- Trade Union membership
- Political opinions
- Genetic and bio-metric data
- Physical or mental health
- Criminal convictions and offences
Your personal information may be collected and used for one or more of Inspiring Healthy Lifestyles’ services and/or administrative activities depending on your relationship with Inspiring Healthy Lifestyles and nature of your contract with us.
Generally, we collect and use personal information as follows:
- in delivering services and support by ensuring other statutory or voluntary agencies with whom Inspiring Healthy Lifestyles is working, are able to deliver ‘joined up’ services to you.
- in planning future services.
- collecting membership payments.
- for managing and checking the quality of our services.
- keeping track of spending on services.
- if you apply for a job or become employed by us.
- for ensuring the health and safety of our staff.
- to help investigate any concerns or complaints you have about our services and for answering enquiries under access legislation.
- in carrying out our regulatory activities, such as safeguarding, etc.
- to improve the general experience of our customers and of visitors to our websites;
- for managing any online transactions you may elect to make and/or marketing choices or preferences you may have expressed.
- for archiving, research, or statistical purposes (including research and evaluation undertaken by Inspiring healthy lifestyles)
The legal bases we rely on for processing your personal information are:
- you have entered into a contract with us.
- it is required by law (such as where this is mandated by statute or under a court order)
- it is necessary for employment related purposes.
- where it is needed in relation to exercising or defending legal rights (e.g. in relation to legal proceedings and claims).
- you or your legal representative, have given consent.
- it is necessary to deliver health or fitness services.
- you have made your information publicly available.
- it is necessary for archiving, research, or statistical purposes.
- it is necessary for fraud prevention and the protection of public funds
- our legitimate interests (or those of a third party) provided your interests and fundamental rights do not override those interests;
- fraud prevention and protection of public funds
Automated decision-making takes place when an electronic system uses personal information to make a decision without human intervention. We are allowed to use automated decision-making in the following circumstances:
- Where we have notified you of the decision and given you 21 days to request a reconsideration.
- Where it is necessary to perform the contract with you and appropriate measures are in place to safeguard your rights.
- In limited circumstances, with your explicit written consent and where appropriate measures are in place to safeguard your rights.
We may be obligated in certain circumstances to share your data with third parties, including third-party service providers and other partner agencies. These third parties will also be required to comply with the provisions of the General Data Protection Regulations. (GDPR)
Why might you share my personal information with third parties?
We may share your personal information with third parties where required by law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.
Which third-party service providers process my personal information?
“Third parties” includes third-party service providers (including contractors and designated agents) and other partner agencies.
How secure is my information with third-party service providers and other entities?
All our third-party service providers and other entities are required to take appropriate security measures to protect your personal information in the same way that we are.
When might you share my personal information with other entities?
We will share your personal information with other entities as part of our regular reporting activities on Inspiring Healthy Lifestyles performance, in the context of a business reorganisation or departmental restructuring exercise, for system maintenance support and hosting of data.
We have put in place appropriate security measures to safeguard your personal information from accidental loss or alteration, inappropriate access, misuse or theft.
As well as technical, physical and organisational controls, we recognise that a welltrained, informed and security alert workforce minimises privacy risks from human error and/or threats from malicious parties.
In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know.
We have put in place procedures to deal with any suspected data security breach and will notify you and the Information Commissioner of a suspected breach within 72 hours to comply with our legal obligations.
We will only keep your personal information for as long as the law specifies or as determined by business requirements.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes.
- Enhanced Access – You have the right to request information about the data that we hold about you and what we do with it.
- Rectification – You have the right to have personal data corrected if it is inaccurate and, considering the purposes of the processing, the right to have incomplete personal data completed.
- Erasure – You have an enhanced right to request that we erase your personal data in certain circumstances.
- Restrict processing – You will also have the right to request that we restrict the processing of your personal data in certain circumstances. When information is restricted it will be securely stored and only used with your consent to handle legal claims and protect others.
- Data portability – You have the right to receive personal information that you have provided to us in a structured, machine-readable form and to have us transmit the personal information to another organisation where technically feasible.
- Object – You have the right to object to us processing your personal information.
- Automated decision-making, including profiling – You have the right to request that a decision which legally affects you is reviewed by an appropriate officer.
To review, verify, correct or request deletion of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact the Data Controller. We are happy to clarify any aspect of this notice with you. Inspiring Healthy Lifestyles will respond to any such request within one month from receipt.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is in our view unreasonable or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
Where the legal reason for processing your personal information is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of our processing prior to the withdrawal of your consent.
If you do not provide consent, we may not be able to perform the contract we have entered into with you (such as paying you or providing a benefit, membership or service), or we may be prevented from complying with our legal obligations (such as to ensure the health and safety of our workers).
If you wish to withdraw consent you should contact the Data Controller in writing.
If you wish to raise a concern or seek clarification about any aspect of this notice please contact the Data Controller. Please provide documents to prove your identity along with a description of your concern. If you want to see a copy of the information about you that we hold and share, please contact the Data Controller at the following address:
We will respond to all requests within one month.
If you are unhappy with the way that we handle your concern you may complain to the Information Commissioners Office (ICO) at:
Last updated 28 November 2022