Data Protection Policy

 1. Introduction

AHPPI is committed to protecting the privacy and security of personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Data Protection Policy outlines how we collect, use, store, and protect personal data, and the rights of individuals regarding their personal data.

2. Purpose

The purpose of this policy is to ensure that AHPPI handles personal data in a manner that is lawful, fair, transparent, and respects the rights of individuals.

3. Scope

This policy applies to all employees, contractors, and third parties who handle personal data on behalf of AHPPI. It covers all personal data collected, processed, and stored by the company.

4. Definitions

• Personal Data: Any information relating to an identified or identifiable individual (data subject).
• Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, and deletion.
• Data Subject: An individual whose personal data is being processed.
  

5. Legal Basis for Processing Personal Data

AHPPI will process personal data only when there is a lawful basis to do so. The following legal bases may apply:

• Consent: The data subject has given clear consent for us to process their personal data for a specific purpose.
• Contract: Processing is necessary for the performance of a contract with the data subject.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which AHPPI is subject.
• Legitimate Interests: Processing is necessary for the purposes of legitimate interests pursued by AHPPI or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
  

6. Data Collection

AHPPI may collect personal data through various means, including but not limited to:

• Online forms
• Email communications
• Phone calls
• Surveys
• Contracts and agreements

Personal data collected may include, but is not limited to, names, contact details and financial information.

7. Data Storage and Security

AHPPI will take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction, or alteration. This includes:

• Encryption of sensitive data
• Regular software updates and security assessments
• Access controls to limit data access to authorised personnel only
• Staff training on data protection best practices

8. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations. Once the retention period has expired, personal data will be securely deleted or anonymised.

9. Data Subject Rights

Individuals have the following rights regarding their personal data under the UK GDPR:

• The right to access personal data
• The right to rectification of inaccurate or incomplete data
• The right to erasure (the right to be forgotten)
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent at any time where consent is the basis for processing

Requests to exercise these rights should be made in writing to AHPPI by emailing ahp.prepinstitute@gmail.com.

10. Data Breach Notification

In the event of a data breach that poses a risk to the rights and freedoms of individuals, AHPPI will notify the relevant supervisory authority within 72 hours and communicate the breach to affected individuals where required by law.

11. International Data Transfers

Where personal data is transferred outside the UK, AHPPI will ensure that adequate safeguards are in place to protect the data, in accordance with UK GDPR requirements.

12. Changes to This Policy

This Data Protection Policy may be updated from time to time to reflect changes in legislation or AHPPI's practices. All changes will be communicated to employees and made available on AHPPI's website.

13. Contact Information

For any questions or concerns regarding this Data Protection Policy or data protection practices at AHPPI, please contact:

Data Protection Officer
Octavia Palmer
ahp.prepinstitute@gmail.com
27 Old Gloucester Street, Holborn, London, WC1N 3AX