Privacy Policy

UK PRIVACY POLICY

This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), as incorporated into UK law by the Data Protection Act 2018, together with all other applicable UK data protection legislation.

Our organisation is committed to protecting your privacy and personal data. The personal data you provide is necessary for us to deliver our services and is processed lawfully, fairly and transparently. We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.

This Privacy Policy explains how we collect, use, store and protect your personal data.

I.- DATA CONTROLLER

IDENTITY: MY FUNCTIONAL RECOVERY
COMPANY REGISTRATION NUMBER: ZA822497
REGISTERED ADDRESS: City Business Park, Somerset Pl, Stoke, Plymouth PL3 488, United Kingdom
TELEPHONE: +44 7544 844970​
E-MAIL: julie@myfunctionalrecovery.co.uk

II.- RECIPIENTS OF PERSONAL DATA

1. Disclosure of Personal Data

Your personal data will not be disclosed to third parties except where required by law or where specifically described within the relevant processing activity.

2. Service Providers

We may share your personal data with carefully selected third-party service providers who assist us in providing our services, including:

  • Cloud hosting providers
  • Email service providers
  • Communication platforms
  • IT support providers

Where these providers are located outside the United Kingdom, we will only transfer your personal data where appropriate safeguards are in place in accordance with Chapter V of the UK GDPR. These safeguards may include:

  • The UK Extension to the EU-US Data Privacy Framework (where applicable);
  • The UK International Data Transfer Agreement (IDTA);
  • The UK Addendum to the EU Standard Contractual Clauses; or
  • Another lawful transfer mechanism recognised under UK data protection law.

3. Legal Requirements

We may disclose personal data where required to do so by law, regulation, court order, or other legal obligation.

III.- LEGAL BASIS FOR PROCESSING

For each specific processing activity, we will inform you of the legal basis relied upon under Article 6 of the UK GDPR.

These may include:

  • Your consent;
  • Performance of a contract;
  • Compliance with a legal obligation;
  • Protection of vital interests;
  • Performance of a task carried out in the public interest;
  • Our legitimate interests, provided these do not override your rights and freedoms.

IV.- RIGHTS

Under the UK GDPR, you have the following rights.

RIGHT OF ACCESS

ou have the right to obtain confirmation as to whether we process your personal data and, where we do, to receive a copy of that data together with information including:

  • the purposes of processing;
  • the categories of personal data;
  • recipients or categories of recipients;
  • retention periods;
  • your rights;
  • your right to complain to the Information Commissioner’s Office (ICO);
  • details of any automated decision-making or profiling; and
  • details of any international transfers and the safeguards applied.

RIGHT TO RECTIFICATION

You have the right to request correction of inaccurate personal data and completion of incomplete data.

RIGHT TO ERASURE

This is the right to request the erasure of your personal data when, among other reasons, it is no longer necessary for the purpose for which it was collected, or is being processed in another way, or you withdraw your consent. It should be noted that erasure will not be granted when the processing of personal data is necessary, among other reasons, for compliance with legal obligations or for the establishment, exercise, or defence of legal claims.

RIGHT TO RESTRICT PROCESSING

You have the right to request that we restrict processing of your personal data in certain circumstances.

RIGHT TO WITHDRAW CONSENT

Where processing is based upon your consent, you may withdraw that consent at any time.

Withdrawal will not affect processing carried out before consent was withdrawn.

RIGHT TO DATA PORTABILITY

Where processing is based on consent or a contract and carried out by automated means, you may request your personal data in a structured, commonly used and machine-readable format and request that it be transferred to another controller where technically feasible.

RIGHT OF OBJECT

You have the right to object to processing based upon our legitimate interests.

We will stop processing unless we demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims.

RIGHTS RELATING TO AUTOMATED DECISION MAKING

Where applicable, you have rights regarding decisions based solely on automated processing, including profiling.

RIGHT TO LODGE A COMPLAINT

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Website:
https://ico.org.uk/make-a-complaint/

EXERCISE OF RIGHTS

You may exercise your rights by contacting us at:

Email: julie@myfunctionalrecovery.co.uk

or by writing to:

City Business Park, Somerset Pl, Stoke, Plymouth PL3 488, United Kingdom

We may ask you to provide proof of identity before responding to your request.

V.- PROCESSING OF PERSONAL DATA.

GENERAL PROVISIONS

The personal data collected is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

Failure to provide mandatory personal data may prevent us from providing the requested services.

Depending on the circumstances, processing may be necessary:

  • to perform a contract;
  • to comply with legal obligations;
  • for our legitimate interests; or
  • based on your consent.

DIGITAL ASSISTANT – “CHATBOT” or “ONLINE CHAT”

Where this website provides an online chat or AI assistant, the following information may be processed during your interaction:

  • IP address;
  • device and browser information;
  • conversation content;
  • any personal information voluntarily provided by you.

Unless you voluntarily provide identifying information, the data collected is not used to identify you personally.

The legal basis for this processing is our legitimate interests under Article 6(1)(f) UK GDPR in providing customer support, improving our services and responding efficiently to enquiries.

Conversation data may also be used to improve the performance, accuracy and security of the chatbot where permitted by law.

CONTACT FORM

If you contact us through our website, we process your personal data to respond to your enquiry, request or complaint.

The lawful basis is:

  • your consent where requested; or
  • our legitimate interest in responding to enquiries.

We retain enquiry data for up to two years after the matter has been concluded unless a longer retention period is required by law.

COMMERCIAL COMMUNICATIONS OR NEWSLETTER FORM

Where you subscribe to receive marketing communications, your personal data will be processed to:

  • manage your subscription;
  • send newsletters;
  • provide information about products or services;
  • personalise communications where appropriate.

Communications may be sent by email, telephone, SMS, messaging applications or similar electronic means.

Where legally required, we rely on your consent. In other cases, we may rely on our legitimate interests where permitted under UK law.

You may unsubscribe at any time:

  • via the unsubscribe link included in emails;
  • by replying STOP or equivalent to SMS messages where available;
  • by requesting removal through messaging applications such as WhatsApp; or
  • by contacting us directly.

Your personal data will be retained until you withdraw your consent or object to receiving marketing communications.

If WhatsApp or similar messaging services are used, your personal data may be processed by the relevant service provider in accordance with its own privacy policy and may involve transfers outside the UK. Where such transfers occur, appropriate safeguards will be implemented in accordance with UK GDPR.

INTERNATIONAL TRANSFERS

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are implemented in accordance with Chapter V of the UK GDPR. These safeguards may include:

  • UK Adequacy Regulations;
  • the International Data Transfer Agreement (IDTA);
  • the UK Addendum to the EU Standard Contractual Clauses; or
  • another lawful transfer mechanism recognised under UK law.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in legislation, regulatory guidance or our processing activities. The latest version will always be made available on our website.