MTSP Privacy Statement

This Privacy Notice sets out how Cardinal handles, stores, uses and shares your personal information when it collects such information from you or from a third party.

The Data Controller is Cardinal Management Ltd, located at Frenkel House, 15 Carolina Way, Salford, Manchester, England, M50 2ZY

What we collect and how we use personal data
Cardinal processes personal data of individuals who either contact us directly, or access our website and these include names, addresses, telephone numbers, email addresses, financial details, employment details and educational details which you provide directly to us.

Cardinal processes personal data to enable it to provide health and advice services to its service users, to maintain accounts and records, promote its services and manage / support employees and fulfill our legal Data Protection obligations.

We may also collect information through the use of Cookies. You will find more regarding this in the Cookies section below.

Cardinal does not sell personal information to anyone. We will only share it with third parties who are facilitating the delivery of Cardinal’s services, or to whom you as the data subject have explicitly consented to sharing your data with.

How we share your personal information
Cardinal may need to share your personal information with other organisations. Where such sharing is necessary, we will comply with the requirements of the UK GDPR on data sharing. The types of organisations / groups that we may share personal data with are set out below:

  • Healthcare professionals including the NHS
  • Social & welfare organisations
  • Central government
  • Business associates and approved business partners who are identified as being directly applicable to your needs.
  • Families, associates, representatives of the person whose personal data is processed either with their consent or where this is not possible within strictly controlled Data Protection principles.
  • Suppliers and service providers
  • Financial organisations

Your rights as a Data Subject
You have the following rights in relation to your personal information which you can exercise by writing to the Data Protection Officer at the following address:

Data Protection Officer, Cardinal Management Ltd, Frenkel House, 15 Carolina Way, Salford, Manchester, England, M50 2ZY

  • Right to be fully informed about how Cardinal processes your data and to request access to your personal information and information relating to our use and processing of your personal information;
  • Right to request that we restrict our use of your personal information;
  • Right to receive your personal information in a structured commonly-used and machine-readable format or transmit the data directly to another Data Controller;
  • Right to object to the processing of your personal information for certain purposes such as direct marketing and profiling;
  • Right to request your personal information to be erased where it is no longer necessary for the purpose for which it was collected;
  • Right to withdraw your consent to the use of your personal information where the processing of your data is based on consent.

If you wish to exercise any of your rights, including submitting a Subject Access Request, please contact our Data Protection Officer named above.

Legal Basis for processing your data

We rely on the following legal bases as described in the UK GDPR to use your data in the ways

described within this privacy notice.

Article 6(1)(a) there is clear consent to process your personal data for a specific purpose.

Article(6)(1)(f) for the purposes of our legitimate interest or the legitimate interests of a third party, provided that your interests or your fundamental rights and freedoms do not override our interests.

How long we retain your personal information
We will retain your personal information for no longer than necessary taking into account the following:

  • The purpose(s) for which we are processing your personal information, such as whether it is necessary to continue to store that information in order to perform our obligation under a contract;
  • Whether we have any legal obligation to continue to process your personal information such as any recordkeeping obligations imposed by an applicable law;
  • Whether we have a business reason to continue to process your personal information;

How we secure your personal information
We take appropriate technical and organisational measures to secure your personal information and protect it against unauthorised or unlawful processing as well as against its accidental loss or destruction or damage including:

  • Using secure servers to store your personal information;
  • Using Secure Sockets Layer (SSL) software or other similar encryption technologies to encrypt confidential data in transit and at rest;
  • Verifying the identity of individuals that access your personal information;
  • Providing access to the minimum personal data necessary, using appropriate restrictions and anonymisation/pseudonymisation whenever possible

Transfer of your personal information to other countries
We make every effort to store all our data within the UK or the European Economic Area (EEA), however, in the exceptional circumstance where we may need to transfer your personal information to countries outside the European Economic Area (EEA) we ensure that we have assessed and implemented appropriate information security contract terms.

Our use of cookies and similar technologies
We use cookies and similar technologies on our website. For further information on how we use cookies and similar technologies, including the information we collect through our use of cookies please see our Cookies Policy. The Cookies Policy is available through this link.

Questions and Concerns
If you have any question, complaint or concern on how we collect, handle, store or secure your personal information, contact our Data Protection Officer using the details below:

Cardinal Management Ltd
Frenkel House
15 Carolina Way
Salford
Manchester
M50 2ZY
Tel: 0330 043 2829

If you feel that your complaint has not been handled as it should have been within the terms of Data Protection regulations, you also have the right to lodge a complaint with the Supervisory Authority and for the UK this is the Information Commissioner’s Office (ICO). Cardinal Management is registered with the ICO and our registration number is ZA149117.

The ICO’s contact details are:

Information Commissioner’s Office
Wycliffe House
Water Lane, Wilmslow
Cheshire, SK9 5AF
Tel: 0303 123 1113

W: ico.org.uk

MTSP Privacy Statement

This Privacy Notice sets out how Cardinal handles, stores, uses and shares your personal information when it collects such information from you or from a third party.

The Data Controller is Cardinal Management Ltd, located at Frenkel House, 15 Carolina Way, Salford, Manchester, England, M50 2ZY

What we collect and how we use personal data
Cardinal processes personal data of individuals who either contact us directly, or access our website and these include names, addresses, telephone numbers, email addresses, financial details, employment details and educational details which you provide directly to us.

Cardinal processes personal data to enable it to provide health and advice services to its service users, to maintain accounts and records, promote its services and manage / support employees and fulfill our legal Data Protection obligations.

We may also collect information through the use of Cookies. You will find more regarding this in the Cookies section below.

Cardinal does not sell personal information to anyone. We will only share it with third parties who are facilitating the delivery of Cardinal’s services, or to whom you as the data subject have explicitly consented to sharing your data with.

How we share your personal information
Cardinal may need to share your personal information with other organisations. Where such sharing is necessary, we will comply with the requirements of the UK GDPR on data sharing. The types of organisations / groups that we may share personal data with are set out below:

  • Healthcare professionals including the NHS
  • Social & welfare organisations
  • Central government
  • Business associates and approved business partners who are identified as being directly applicable to your needs.
  • Families, associates, representatives of the person whose personal data is processed either with their consent or where this is not possible within strictly controlled Data Protection principles.
  • Suppliers and service providers
  • Financial organisations

Your rights as a Data Subject
You have the following rights in relation to your personal information which you can exercise by writing to the Data Protection Officer at the following address:

Data Protection Officer, Cardinal Management Ltd, Frenkel House, 15 Carolina Way, Salford, Manchester, England, M50 2ZY

  • Right to be fully informed about how Cardinal processes your data and to request access to your personal information and information relating to our use and processing of your personal information;
  • Right to request that we restrict our use of your personal information;
  • Right to receive your personal information in a structured commonly-used and machine-readable format or transmit the data directly to another Data Controller;
  • Right to object to the processing of your personal information for certain purposes such as direct marketing and profiling;
  • Right to request your personal information to be erased where it is no longer necessary for the purpose for which it was collected;
  • Right to withdraw your consent to the use of your personal information where the processing of your data is based on consent.

If you wish to exercise any of your rights, including submitting a Subject Access Request, please contact our Data Protection Officer named above.

Legal Basis for processing your data

We rely on the following legal bases as described in the UK GDPR to use your data in the ways

described within this privacy notice.

Article 6(1)(a) there is clear consent to process your personal data for a specific purpose.

Article(6)(1)(f) for the purposes of our legitimate interest or the legitimate interests of a third party, provided that your interests or your fundamental rights and freedoms do not override our interests.

How long we retain your personal information
We will retain your personal information for no longer than necessary taking into account the following:

  • The purpose(s) for which we are processing your personal information, such as whether it is necessary to continue to store that information in order to perform our obligation under a contract;
  • Whether we have any legal obligation to continue to process your personal information such as any recordkeeping obligations imposed by an applicable law;
  • Whether we have a business reason to continue to process your personal information;

How we secure your personal information
We take appropriate technical and organisational measures to secure your personal information and protect it against unauthorised or unlawful processing as well as against its accidental loss or destruction or damage including:

  • Using secure servers to store your personal information;
  • Using Secure Sockets Layer (SSL) software or other similar encryption technologies to encrypt confidential data in transit and at rest;
  • Verifying the identity of individuals that access your personal information;
  • Providing access to the minimum personal data necessary, using appropriate restrictions and anonymisation/pseudonymisation whenever possible

Transfer of your personal information to other countries
We make every effort to store all our data within the UK or the European Economic Area (EEA), however, in the exceptional circumstance where we may need to transfer your personal information to countries outside the European Economic Area (EEA) we ensure that we have assessed and implemented appropriate information security contract terms.

Our use of cookies and similar technologies
We use cookies and similar technologies on our website. For further information on how we use cookies and similar technologies, including the information we collect through our use of cookies please see our Cookies Policy. The Cookies Policy is available through this link.

Questions and Concerns
If you have any question, complaint or concern on how we collect, handle, store or secure your personal information, contact our Data Protection Officer using the details below:

Cardinal Management Ltd
Frenkel House
15 Carolina Way
Salford
Manchester
M50 2ZY
Tel: 0330 043 2829

If you feel that your complaint has not been handled as it should have been within the terms of Data Protection regulations, you also have the right to lodge a complaint with the Supervisory Authority and for the UK this is the Information Commissioner’s Office (ICO). Cardinal Management is registered with the ICO and our registration number is ZA149117.

The ICO’s contact details are:

Information Commissioner’s Office
Wycliffe House
Water Lane, Wilmslow
Cheshire, SK9 5AF
Tel: 0303 123 1113

W: ico.org.uk