14 October 2022
Version 1.0
Introduction
paths
Our full details are:
Data We may collect from you
- Identity Data includes first name, last name, date of birth, gender, identity card number or passport number.
- Contact Data includes billing address, email address and telephone number/s and emergency contacts (i.e. name, relationship and home and telephone numbers).
- Financial Data includes payment card details.
- Transaction Data includes details about payments to and from you and other details of services you have purchased from us.
- Health data including the contact details of your family doctor, and any medical, physical or mental conditions and in particular your care needs
- Lifestyle data including your likes, dislikes and preferences (including your religious beliefs or other beliefs of a similar nature, racial or ethnic origin, health and sexual orientation (so far as they relate to providing you with suitable care)
- Feedback data including contributions to questionnaires and surveys about the service we offer as well as your complaints, compliments or concerns about the service we provide
- Electronic images and recordings including CCTV images when you visit our offices and audio recordings of phone calls to and from our office teams
- Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
- By filling in a form, sending us an e-mail or over a telephone call or message
- Requesting a quote for a service
- During Assessment meetings
- Receiving our service
- Visiting our offices
How We use your personal data
- Where we need to perform the contract we are about to enter into or have entered into with you.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
Purpose for processing your personal data
- When you request us to quote for our services and when we follow up through an Assessment meeting.
- When we must provide services to you after you opted to receive services from us.
- When you enter into a contract with us and we have to prepare, review and update a suitable therapy plan, describing the nature and level of therapy and support services which you have requested.
- To communicate with you, your representatives and any other appropriate external social or health care professionals about your individual needs and personalise the service delivered to you.
- We need to respond, should your care needs change, to meet your individual needs and ensure the safety of you and our employees.
- Invoice you for the therapy and support services in accordance with our terms and conditions.
- Carry out quality assurance procedures, review our service and improve our customer experience.
- Notify you about changes to our services which are relevant to you.
- Monitor how effective our services are and to make sure that the services we provide meet your needs.
- You give us permission to do so.
- Send information about our services which we believe you may be interested in. You may unsubscribe from this at any time.
- To protecting our premises from unauthorised entries and crime.
- To comply with the law.
Marketing
Change of purpose
Sharing of your personal data
- Third party service providers including, Google and Trust Payments (Malta) based in the EU who provide website hosting and payment solutions.
- Professional advisers including accountants, lawyers, bankers, auditors and insurers based in the EU who provide consultancy, banking, legal, insurance and accounting services.
- Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
Data Security
Retention Periods
Your Rights
Information
We are giving you this Privacy Notice to keep you informed.
Access
Please contact our DPL if you wish to access the personal information we hold about you. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Rectification
Please contact our DPL if you wish to rectify your information. We will also rectify the information you have consented us to pass on to third parties, if it is the case.
Erasure
Please contact our DPL if you want us to erase all your personal data and we do not have a legal reason to continue to process and hold it.
Restrict processing
Please contact our DPL if you want us to restrict processing of your data. In this case we will restrict processing but we will still hold the data.
Data portability
Please contact our DPL if you want information on how to port your data elsewhere. This right only applies to personal data that you have provided to us as the Data Controller. The data must be held by us by consent or for the performance of a contract.
Object
You have the right to object to us processing your data even when we do so for our legitimate interests. If you wish to object please contact our DPL.
Withdraw consent
If you have given us your consent to process your data but later changed your mind, you have the right to withdraw your consent at any time. Please contact our DPL in case you wish to withdraw consent.
Complain to a Supervisory Authority
You have the right to complain to the IDPC if you feel that we have not responded to your requests to solve a problem. The supervisory authority in Malta is the Office of the Information and Data Protection Commissioner (IDPC) which is at Floor 2, Airways House, Triq il-Kbira, Sliema and can be reached on +356 2328 7100.
Changes to Our Privacy Notice
We may change this notice from time to time in the future. Changes to our privacy policy will be notified to the data subjects through the preferred means of communication.