Privacy Policy
Effective Date: 03/07/2024
1.1 INTRODUCTION
Welcome to myday's Privacy Policy. By using our website and services, you agree to our Terms and Conditions and this Privacy Policy.
1.2 This Privacy Policy sets out how we collect, use and protect your personal information. 'Personal information' is information which identifies you or another person, or which is capable of doing so.
1.3 This website (the “Website”) is owned by Evexia Health International Ltd ("Company", "we" or "us"), a company registered in England and Wales under company number 12935845 whose registered office is at Woodwater House, Pynes Hill, Exeter EX2 5WR.
1.4 Evexia Health International Ltd (trading as myday) is the data controller responsible for your personal data. null.
1.5 Please take the time to read this Privacy Policy, which is part of our Terms and Conditions. If you have any questions about this Privacy Policy or our use of your information you can contact us at hello@myday.health. You also have the right to make a complaint to the relevant Supervisory Authority about our use of your information (in most cases under this Privacy Policy the relevant Supervisory Authority will be the Information Commissioner’s Office).
2 ABOUT THIS PRIVACY POLICY
2.1 We take your privacy seriously and are committed to maintaining the privacy and security of information you provide to us, and the choices you have regarding our collection and use of your information. This Privacy Policy applies to information we collect about you through the Website and when you otherwise communicate with us. By visiting the Website you are accepting and consenting to the practices described in this Privacy Policy.
2.2 We process your personal data on the basis that you have provided your consent for us to do so for the purposes set out below when you submitted your personal data to us. You may withdraw your consent to this processing at any time by contacting us at null.If you do withdraw your consent, we may still be able to process some of the data that you have provided to us on other grounds and will notify you of these at such time.
2.3 If you consent to us contacting you, we will always aim to be respectful, relevant and appropriate. If at any time you do not think that we have complied with this, please contact us straight away to let us know.
2.4 This Privacy Policy may change from time to time and, if it does, the up-to-date version will always be available on the Website. Please note that by continuing to use the Website you are agreeing to any updated versions.
3 INFORMATION WE MAY COLLECT ABOUT YOU
3.1 We may collect and process the following data:
(a) Information you give to us. You may give us information about you by filling in forms (e.g. on our ‘Contact Us’ page) or by contacting us. The information you give to us may include:
(i) Your name;
(ii) Your email address
(iii) Your phone number
(iv) Other relevant details you choose to provide
(b) Information we collect about you. Each time you visit the Website, we may automatically collect the following information:
(i) web usage information (e.g. IP address), your login information, browser type and version, time zone setting, operating system and platform; and
(ii) information about your visit, including the URL clickstream to, through and from the Website (including date and time); time on page, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs).
(c) Sensitive Information.
As a provider of employee wellbeing SaaS services, we may collect sensitive health information. This data will be handled with the utmost care and in compliance with relevant data protection regulations.
(d) Information we receive from other sources.
We may also receive information about you if you use any of the other websites we might operate or the other services we provide.
4 USE OF COOKIES
The Website uses cookies to distinguish you from other users, to improve your experience on our Website, and to recommend content that may be of interest to you. For more information, please view our Cookies Policy HERE.
5 HOW WE WILL USE YOUR INFORMATION
5.1 We may use your information for the following purposes:
(a) to respond to any query that you may submit to us;
(b) to ensure that our Website’s content is presented in the most effective manner for you and your device;
(c) we may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided, but only if you have given us your consent to do so;
(d) to customise the Website according to your interests;
(e) to administer the Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey responses;
(f) to allow you to participate in interactive features of our service when you choose to do so;
(g) as part of our efforts to keep the Website safe and secure;
(h) to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
(i) to comply with the applicable law/s;
(j) as we feel is necessary to prevent illegal activity or to protect our interests.
6 PERSONAL INFORMATION SHARING
7 Lawful Basis for Processing (UK GDPR). We will only process your personal data if we have a lawful basis for doing so. The lawful bases we rely on are:
7.1 Your consent
7.2 The performance of a contract with you
7.3 Compliance with a legal obligation
7.4 Protecting your vital interests performing a task in the public interest
7.5 Our legitimate interests.
8 DISCLOSURE OF YOUR INFORMATION
8.1 disclosure of your information We may share your personal information with any member of myday group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
8.2 If we share your information with third parties they will process your information as either a data controller or as our data processor and this will depend on the purposes of our sharing your personal data. We will only share your personal data in compliance with the applicable data protection legislation.
8.3 We may disclose your information to third parties when:
(a) you specifically request this;
(b) other companies’ products and services may interest you and you have provided explicit consent to receive such correspondence;
(c) in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
(d) if the Website or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets; or
(e) if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to protect the rights, property or safety of the Website, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
8.4 The third parties include:
(a) business partners, clients, suppliers and sub-contractors for the performance of any contract we enter into with them or you; and
(b) analytics and search engine providers that assist us in the improvement and optimisation of the Website.
9 STORAGE OF YOUR PERSONAL DATA
9.1 International Data Transfers
a) If you reside outside of the UK, we may transfer the data to the UK or EEA. We may transfer your personal data to countries outside the UK and the European Economic Area (EEA). When we do so, we ensure that appropriate safeguards are in place to protect your personal data, including standard contractual clauses approved by the European Commission or other legal mechanisms to ensure the protection of your data.
b) We may transfer the personal information we collect through the channels to, and store such data in, other countries, including the U.S., which may have different data protection laws than the country in which the information was provided. If we do so, we will transfer the personal information only for the purposes described in this Privacy Policy. To the extent required by applicable law, when we transfer your personal information to recipients in other countries, we will take measures to protect that information.
9.2 We follow strict security procedures as to how your personal information is stored and used, and who sees it, to help stop any unauthorised person getting hold of it. All personal information you register on this Website will be located behind a firewall. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Unfortunately, the transmission of information via the internet is not completely secure and although we do our best to protect your personal data, we cannot guarantee the security of your data. So we cannot accept any liability for the loss, theft or misuse of the personal information which you have registered on the Website if there is a security breach.
9.3 We will keep your information stored on our systems for as long as it takes to provide the services to you. The third parties we engage to provide services on our behalf will keep your data stored on their systems for as long as is necessary to provide the services to you. We will not store your information for longer than is reasonably necessary or required by law.
10 YOUR RIGHTS
10.1 Even if you have accepted the processing of your personal data for marketing purposes (by ticking the relevant box), you have the right to ask us to stop processing your personal data for such purposes. You can exercise this right at any time by contacting us at hello@myday.health.
10.2 The Website may, from time to time, contain links to and from the websites of advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
10.3 From 25 May 2018, you will be entitled to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another data controller. The types of data that can be provided are those set out at paragraph 3.1 above. You can exercise this right by contacting us at hello@myday.health.
10.4 Your Rights Under the UK GDPR, you have the following rights:
a) The right to be informed about the collection and use of your personal data
b) The right to access your personal data and obtain information about how we process it
c) The right to rectification of inaccurate or incomplete personal data
d) The right to erasure of your personal data (the "right to be forgotten")
e) The right to restrict processing of your personal data
f) The right to data portability, allowing you to obtain and reuse your personal data for your own purposes across different services
g) The right to object to processing of your personal data in certain circumstances
h) Rights related to automated decision-making, including profiling
11 ACCESS TO INFORMATION
11.1 European Data Protection Legislation gives you the right to access information held about you. You are entitled to be told by us whether we or someone else on our behalf is processing your personal information; what personal information we hold; details of the purposes for the processing of your personal information; and details of any third party with whom your personal information has been shared. In the event that an access request is unfounded, excessive or especially repetitive, we may charge a ‘reasonable fee’ for meeting that request. Similarly, we may charge a reasonable fee to comply with requests for further copies of the same information (that fee will be based upon the administrative costs of providing the information). Sometimes you may be asked to provide proof of identity before we show you your personal information - that's so we can prevent unauthorised access. Your rights to access, rectify such information, object or cancel the information we hold about you can be exercised at any time by contacting us at hello@myday.health.
11.2 Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently received personal data from a child under the age of 18, we will delete such information from our records. If you believe that we might have any information from or about a child under 18, please contact us at hello@myday.health.
11.3 Retention of Your Information
We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
12 ADDITIONAL INFORMATION & JURISDICTION SPECIFIC NOTICES
12.1 Notice to California Residents
This Notice to California Residents (“Notice”), in conjunction with the Privacy Policy above, describes how we collect, use, and disclose personal information of California residents within the scope of the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (“CCPA”), as well as your rights in connection with this information. Your continued use of the Channels means that you accept the activities described in this Notice and the Privacy Policy.
12.2 Notice to United States Residents
HIPAA Compliance: As we handle sensitive health information, we are committed to complying with the Health Insurance Portability and Accountability Act (HIPAA) regulations. This means that we implement additional safeguards to protect your health information, ensuring confidentiality, integrity, and availability of protected health information (PHI).
13 CHANGES TO OUR PRIVACY POLICY
We may update this privacy policy from time to time. Any changes we make will be posted on this page, and where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.
14 CONTACT
14.1 Questions, comments and requests regarding this Privacy Policy should be addressed to our Data Protection Officer:
Name: James Parkes
Address: Edgcumbe, Moorhaven, Bittaford, PL21 0EX
Email address: JamesParkes@myday.health
Telephone number: +447793185448:
15 DEFINITIONS
15.1 For the purposes of this Privacy Policy, "Data Protection Legislation" is defined as, for the periods in which they are in force, all applicable data protection and privacy legislation in force in the UK including the General Data Protection Regulation ((EU) 2016/679); the Data Protection Act 2018; the Privacy and the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) and any equivalent legislation amending or replacing such legislation.
15.2 “Personal Data”, “Controller”, “Processor”, “Data Subject” and “Supervisory Authority” shall have the meaning given to them in the Data Protection Legislation.