Privacy Notice

This Privacy Notice explains how The London Heart (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website at thelondonheart.com or get in touch with us.

We are committed to protecting your privacy and handling your data openly and transparently. This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Who we are

For the purposes of data protection law, the data controller is:

The London Heart
Email: enquiries@thelondonheart.com
Telephone: 0333 772 1175

If you have any questions about this policy or how we handle your data, please contact us using the details above.

The personal data we collect

We only collect personal data that you choose to give us, or that is gathered automatically when you use the site.

Information you give us through our contact form

When you complete the enquiry form on our website, we collect the information you provide. This typically includes your:

• Name
• Email address
• Telephone number (if you provide one)
• The contents of your message and any other details you choose to include

We use this information to respond to your enquiry and to communicate with you about it.

Information collected automatically

When you visit the site, we use Google Analytics to understand how visitors find and use our website. Google Analytics collects information such as:

• The pages you view and how long you spend on them
• How you arrived at the site (for example, a search engine or another website)
• Your approximate location, derived from your IP address
• The type of device, browser and operating system you are using

This information is collected through cookies and similar technologies. It helps us improve the site and the experience we offer. Google Analytics is configured to use this data only for our analytics purposes.

How we use your data and our lawful basis

Under data protection law, we must have a lawful basis for processing your personal data. We rely on the following:

You can withdraw your consent to analytics cookies at any time (see “Cookies” below). Withdrawing consent does not affect any processing carried out before you withdrew it.

Cookies

Cookies are small text files placed on your device when you visit a website. Our site uses:

• Analytics cookies set by Google Analytics, as described above. These are only used where you have given your consent.
• Strictly necessary cookies, if any, which are required for the site to function.

You can manage or disable cookies through your browser settings at any time. Most browsers let you refuse cookies or delete those already stored. Please note that disabling some cookies may affect how the site works.

For more detail on the cookies Google sets and how Google uses data, see Google’s privacy policy at https://policies.google.com/privacy and “How Google uses information from sites or apps that use our services” at https://policies.google.com/technologies/partner-sites.

Sharing your data

We do not sell your personal data. We share it only where necessary, and only with:

• Google, as our analytics provider, which processes website usage data on our behalf. Google may process this data outside the UK; where it does, appropriate safeguards (such as the UK Addendum to the EU Standard Contractual Clauses) are in place.
• Our website and IT service providers, who host the site and support our systems, and who process data on our instructions.
• Authorities or third parties where we are required to do so by law, or to protect our legal rights.

International transfers

Some of our service providers, including Google, may store or process data outside the United Kingdom. Where personal data is transferred outside the UK, we take steps to ensure it is protected by appropriate safeguards recognised under UK data protection law.

How long we keep your data

We keep personal data only for as long as we need it:

• Contact form enquiries: we retain these for as long as needed to deal with your enquiry and for a reasonable period afterwards, typically up to 24 months, in case you contact us again or for our own record-keeping.
• Analytics data: Google Analytics retains usage data according to the retention period we have set, currently 14 months.

When we no longer need your data, we securely delete or anonymise it.

Your rights

Under UK data protection law, you have the right to:

• Be informed about how we use your data (this policy)
• Access the personal data we hold about you
• Rectification of inaccurate or incomplete data
• Erasure of your data in certain circumstances
• Restrict our processing of your data in certain circumstances
• Object to processing based on legitimate interests
• Data portability for data you have provided to us
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, please contact us using the details at the top of this policy. We will respond within one month. There is normally no charge.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office Website: https://ico.org.uk Helpline: 0303 123 1113

We would, however, appreciate the chance to address your concerns first, so please do contact us.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page.