Privacy Policy
Last modified: 31/01/2025
Who ‘we’ are
​
In this document, the terms ‘we’, ‘us’ and ‘our’ refer to MedLighten Ltd.
Contact Details
​
If you’d like to contact us, you can do so via our online form or using the details below:
​
Email: drshah@medlighten.co.uk
Address: Medlighten Ltd
Kemp House
152-160 City Road
London
EC1V 2NX
How we collect information
​
Information we collect from you is provided to us directly from you through our online forms or other social media platforms. We may also request data through these platforms and other mediums such as email, telephone and face to face meetings. With your express consent, we may also collect video footage to provide you with post-course feedback.
The type of information we collect
​
The information we may collect from you and process includes, but may not be limited to the following:
-
Identity data, including first name, last name and title
-
Contact data which may include your address, contact telephone number and email address
-
Financial data which may include bank details or PayPal account addresses
-
Dietary information
-
Video recordings
With your consent, we may also request information to evaluate learning needs and provide you with a better service. You have the right to withdraw your consent at any time.
How we use your information
​
Identity data and contact data collected from you will be used by us to contact you and deliver our services. We collect financial data for the purpose of collecting payments for our services. Dietary information may be used to help offer appropriate and safe food at any of our in-person courses or events. Video recordings of courses will be used by us for training and for sharing with other customers who purchase the recordings. Any video recordings sent to us for review as part of our free review service will be reviewed by us to provide you with feedback as part of our service provision.
Our lawful basis for processing your data
​
The lawful bases for collecting your data are detailed in Article 6 of the GDPR and are as follows:
(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
(c) Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations).
(d) Vital interests: the processing is necessary to protect someone’s life.
(e) Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law.
(f) Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if you are a public authority processing data to perform your official tasks.)
The data we collect and the lawful basis for processing that data is outlined below:
​
Third parties
​
For the site’s operation, third parties may collect and process data. See our cookie policy here for more details.
To offer some of our services, we may use third party applications. These may have their own information usage and data collection policies which we encourage you to read before booking using our services.
In some circumstances, we may also be required to share your data in order to fulfil any legal obligation.
How we store your data
​
Data protection is very important to us and we make every effort to ensure data security. Any information you provide us with is stored securely and is only accessible to staff of MedLighten.
Data retention period
​
Your data will be held by us for a time period of up to two years from your last communication with us. After this time period, your data will be securely deleted. You can ask us to remove your data from our records at any time in line with your data protection rights.
Your data protection rights
​
Under data protection law, you have rights including:
​
Your right of access - You have the right to ask us for copies of your personal information.
​
Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
​
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
​
Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
​
Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.
​
Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
​
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
​
Please contact us through the details provided above to make a request.
Making a Data Complaint
​
You can also complain to the ICO if you are unhappy with how we have used your data.
​
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
​
Helpline number:
0303 123 1113