Privacy Policy
This privacy notice for Amba Health and Care Ltd (‘Amba’, ‘we’, ‘us’, or ‘our’,), describes how and why we collect, store, use, and/or share (‘process’) your personal data when you use our services (‘Services’), such as when you:
-
Visit our website at www.amba.co, use our web platform at www.amba.app or any website of ours that links to this privacy notice;
-
Download and use our mobile application (Amba), or any other application of ours that links to this privacy notice;
-
Engage with us in other related ways, including any sales, marketing, or events
We respect your privacy and are committed to protecting your personal data. This notice explains how we use, store and share the information we collect about you, how you can exercise your rights in respect of that information and the procedures that we have in place to safeguard your privacy.
We keep this notice under review and will reflect any updates or changes to practice within this notice (to reflect changes in operations and the way we process your data). This notice was last updated on 23rd March 2023.
Contacting Us
If you have any questions about this notice, including any requests to exercise your legal rights, please contact us at:
Amba Health and Care Ltd 71-75 Shelton Street London WC2H 9JQ United Kingdom
You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (ico.org.uk) or to any equivalent body in the relevant jurisdiction (collectively, the “ICO”). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
What personal data will we collect about you?
Personal data, or personal data, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
How will we collect your personal data?
We use different methods to collect data from and about you including:
Personal data provided by you
The personal data that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.
Third parties or publicly available sources
To enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behaviour data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion.
Information automatically collected
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. Like many businesses, we also collect information through cookies and similar technologies, which you can read more about in our Cookie Policy.
How do we use your personal data?
The following table sets out why we process your personal data and also our lawful basis for processing your personal data. We may rely on more than one lawful basis for processing your personal data depending on the context of the processing activity.
This privacy notice for Amba Health and Care Ltd (doing business as Amba) (‘Amba‘, ‘we‘, ‘us‘, or ‘our‘,), describes how and why we might collect, store, use, and/or share (‘process‘) your information when you use our services (‘Services‘), such as when you:
In certain circumstances, we will process your personal data based on our legitimate interests. We have decided this by carrying out a balancing exercise to make sure our legitimate interest does not override your privacy rights as an individual. We document the balancing exercises that we carry out when relying upon this lawful basis for processing your personal data.
How long will we keep your personal data?
We will only keep your personal data for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal data for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
Sharing your personal data
We will only disclose your personal data to:
-
Other third-party suppliers, business partners and sub-contractors for business administration, support, processing, services, or IT purposes.
-
A third party who has purchased or merged with our organisation, in which case personal data held by us, about you, will be transferred to that third party to carry on our business.
Security of your personal data
We aim to protect your personal data through a system of organisational and technical security measures.
We have taken reasonable steps to help protect the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These include training and awareness programmes for all staff and appropriate technical measures such as encryption of laptops, enforcement of strong password controls and virus and malware detection. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a legitimate business need to know.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
International transfers of your personal data
We may transfer your personal data to countries outside the United Kingdom to provide our Services. The laws in these countries may not offer the same level of protection for personal data as in the United Kingdom.
If we transfer personal data to countries outside of the United Kingdom, we will do so in a lawful way and may rely on:
-
An adequacy decision from the Secretary of State, which says that the recipient country provides an adequate level of protection of personal data.
-
Appropriate safeguards to protect the personal data (for example, the approved standard contractual clauses or international data transfer agreement).
-
A lawful exception to the rules relating to overseas data transfers (for example, the transfer is necessary to perform a contract with you, which is in your interests).
Your rights to access, amend or delete the information we hold
You have certain rights in relation to your personal data. We have summarised these rights below:
If you would like to contact us with any queries or comments, request further information or exercise any of your available rights set out above, please use the contact details in the ‘Get in Touch’ form at the bottom of this page.
All requests will be answered wherever possible within one month of receipt
