Privacy Policy
Introduction
This privacy policy sets out how Abed Graham Healthcare Strategies Ltd (‘we’ ‘our’ ‘us’). (company number 07787644) with trading address Suite 163, 295 High Road, Chiswick, W4 4HH, United Kingdom, complies with applicable data protection legislation (including but not limited to the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) pertaining to personal information that a user of its services (“you”, “your”) provides.
By continuing to use our site and by submitting personal data to us, you are agreeing to the terms of this privacy policy.
It is important to point out that we may amend this Privacy Policy from time to time. Please just visit this page if you want to stay up to date, as we will post any changes here.
If you are dissatisfied with any aspect of our Privacy Policy, you may have legal rights and, where relevant, we have described these as well.
A. What Kind of Personal Data do we Collect?
We may collect and process the following information when you engage with us, depending on if you are on our personal mailing list of if you are a Client of Abed Graham:
1. Mailing list members only
This includes personal information only, that is disclosed when you agree to participate in our mailing list, including but not limited to, personal email, full name, title and role, company details and telephone number.
2. Clients
In addition to the above in a), we may also hold and process data relevant to our work together. The full complement of this will be covered in our existing NDAs. Also, we will hold information relevant to Customers of Clients as is appropriate to our work together.
B. How do we collect your personal data?
1. Mailing list members only
This will be collected only from direct contact (personal meeting or phone call) or from business cards provided by you.
2. Clients
This personal data will only ever be collected by prior approved communication from you, and sent directly from you or your customers.
C. How do we use your personal data?
1. Mailing list members only
This data will solely be used for sending our circa 2-monthly mailshot which details new work, white papers, clients or services of Abed Graham that may be of interest to you and your business.
2. Clients
This personal data will only ever be used for completion of mutually agreed work either directly for you or for work on behalf of your customers.
D. We may use information held or received about you in the following ways:
1. Mailing list members only
We will only ever use this information for our mailshot as detailed above.
2. Clients
This personal data will only ever be used for completion of mutually agreed work either directly for you or for work on behalf of your customers.
If you do not want us to use your personal or company contact data for our mailshot purposes, please either unsubscribe from the direct list when they are sent or write directly to the Data Protection Officer (DPO) at the bottom of this policy.
E. Who do we share your personal data with?
1. Mailing list members only
We will not share this information with any other party, apart from the caveats below.
2. Clients
This personal data will only ever be used for completion of mutually agreed work either directly for you or for work on behalf of your customers. We will only share this data with people whom it is required to complete the work at hand. This includes the direct team at Abed Graham and our associate network, all of whom reside in the European Union.
Caveats - We may disclose your personal data to third parties if:
a) We sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
b) If Abed Graham or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
c) If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or to enforce or apply our terms and conditions, or to protect our rights and property, or our safety and that of our customers and third parties.
F. How do we safeguard your personal data?
We are committed to taking all reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures, not least our storage systems which are encrypted at rest and in transit. These include measures to deal with any suspected data breach. If you suspect any misuse or loss of or unauthorised access to your personal information please let us know immediately
G. How long do we keep your personal data for?
If we have not had meaningful contact with you (or, where appropriate, the company you are working for or with) for a period of two years, we will delete your personal data from our systems unless we believe in good faith that the law or other regulation requires us to preserve it (if for example, because of our obligations with any anticipated litigation).
H. How can you access, amend or take back the personal data that you have given to us?
In order to process any of the requests listed below, we may need to verify your identity for your security. In such cases your response will be necessary for you to exercise this right.
Your Rights
The right to access information we hold about you
At any point you can contact us to request details concerning the information we hold about you, why we have that information, who has access to the information and where we got the information. In most cases you may be entitled to copies of the information we hold concerning you. We will acknowledge receipt of the request within 48 hours. Once we have received your request we will respond within 30 days.
The right to correct and update the information we hold about you
If the data we hold about you is out of date, incomplete or incorrect, you can inform us and we will ensure that it is updated.
The right to have your information erased
If you feel that we should no longer be using your data or that we are illegally using your data, you can request that we erase the data we hold. When we receive your request, we will confirm whether the data has been deleted or tell you the reason why it cannot be deleted.
The right to object to processing of your data
You have the right to request that we stop processing your data. Upon receiving the request, we will contact you to tell you if we are able to comply or if we have legitimate grounds to continue. If data is no longer processed, we may continue to hold your data to comply with your other rights.
The right to ask us to stop contacting you with direct marketing
You have the right to request that we stop contacting you with direct marketing. On promotional emails we provide an ‘unsubscribe’ link at the bottom of the email which will unsubscribe you from that service.
The right to data portability
You have the right to request that we transfer your data to another controller. Once we have received your request, we will comply where it is feasible to do so.
The right to object to automated decision making and profiling
We do not use automated decision making or profiling in any of our operations.
The right to complain
You can make a complaint to us by contacting us via agraham@abedgraham.com, using GDPR in the subject title.
Contact Details
If you have any questions or issues about the information in this Privacy Policy or would like to enact any of the rights enclosed within, please send all correspondence to the Data Protection Officer at Abed Graham via our Contact Us page.