This privacy notice for Amba Health and Care Ltd (‘Amba’, ‘we’, ‘us’, or ‘our’,), describes how and why we collect, store, use, and/or share (‘process’) your personal data when you use our services (‘Services’), such as when you:
We respect your privacy and are committed to protecting your personal data. This notice explains how we use, store and share the information we collect about you, how you can exercise your rights in respect of that information and the procedures that we have in place to safeguard your privacy.
We keep this notice under review and will reflect any updates or changes to practice within this notice (to reflect changes in operations and the way we process your data). This notice was last updated on 23rd March 2023.
Contacting us
If you have any questions about this notice, including any requests to exercise your legal rights, please contact us at:
Amba Health and Care Ltd 71-75 Shelton Street London WC2H 9JQ United Kingdom
You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (ico.org.uk) or to any equivalent body in the relevant jurisdiction (collectively, the “ICO”). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
What personal data will we collect about you?
Personal data, or personal data, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
| Category | Personal Data Items |
| Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name |
| Internet or other similar network activity | Online behaviour and interactions with our and other websites, applications, systems, and advertisements |
| Professional or employment-related information | Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us |
How will we collect your personal data?
We use different methods to collect data from and about you including:
Personal data provided by you: The personal data that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.
Third parties or publicly available sources: To enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behaviour data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion.
Information automatically collected: We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. Like many businesses, we also collect information through cookies and similar technologies, which you can read more about in our Cookie Policy.
How do we use your personal data?
The following table sets out why we process your personal data and also our lawful basis for processing your personal data. We may rely on more than one lawful basis for processing your personal data depending on the context of the processing activity.
This privacy notice for Amba Health and Care Ltd (doing business as Amba) (‘Amba‘, ‘we‘, ‘us‘, or ‘our‘,), describes how and why we might collect, store, use, and/or share (‘process‘) your information when you use our services (‘Services‘), such as when you:
| Purpose/activity | Lawful basis for processing | Personal Data Categories | Third Party Recipients |
| To progress you job application: Your personal data is processed when you apply for a job role with us. Once we receive your contact details and CV, it is uploaded and stored within our Applicant Tracking System | This processing is carried out in Amba’s legitimate interests for us to be able to review and progress your job application. | Full name Email address Phone Number Home address Work experience Salary expectation Interview notes | Asana |
| To respond to your inbound queries: When you raise a request or query via our website, Amba will process your personal data to be able to provide a response. | This processing is carried out in Amba’s legitimate interests for us to respond to your inbound queries. | Full name Email address Home address Phone number | HubSpot Gmail |
| To enter into a contract with you: Your personal data will be processed when you are party to a contract or agreement with Amba, such as for the supply of Services to your organisation. | This processing is necessary for the performance of a contract. | Full name Signature Job title | Google Drive DocuSign |
| To facilitate account creation and authentication and otherwise manage user accounts: Your personal data will be processed within our client database for us to administer access to the Amba application. | This processing is necessary for the performance of a contract. | Full name Email address | Heroku |
| To send you marketing and promotional communications: From time to time, we may email you about our Services which may be of interest to you or your organisation. We will only ever contact you with these communications if we consider you to be a ‘Corporate subscriber’ and the content is relevant to your role as an employee at the organisation you work for. | This processing is carried out in our legitimate interests for us to promote our Services to your organisation. You can tell us not to contact you with updates and information regarding our Services by following the unsubscribe instructions on any communications sent to you. You also have the right to opt-out of marketing at any time by emailing [email protected]. | Full name Job title Email address Phone number | HubSpot |
| To identify usage trends: We will process information about how you use our Services to better understand how they are being used so we can improve them. | This processing is carried out in Amba’s legitimate interests so that we can better understand and improve our Services. | IP Address | Google Analytics |
In certain circumstances, we will process your personal data based on our legitimate interests. We have decided this by carrying out a balancing exercise to make sure our legitimate interest does not override your privacy rights as an individual. We document the balancing exercises that we carry out when relying upon this lawful basis for processing your personal data.
How long will we keep your personal data?
We will only keep your personal data for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal data for longer than the period of time in which users have an account with us.
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.
Sharing your personal data
We will only disclose your personal data to:
Security of your personal data
We aim to protect your personal data through a system of organisational and technical security measures.
We have taken reasonable steps to help protect the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These include training and awareness programmes for all staff and appropriate technical measures such as encryption of laptops, enforcement of strong password controls and virus and malware detection. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a legitimate business need to know.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
International transfers of your personal data
We may transfer your personal data to countries outside the United Kingdom to provide our Services. The laws in these countries may not offer the same level of protection for personal data as in the United Kingdom.
If we transfer personal data to countries outside of the United Kingdom, we will do so in a lawful way and may rely on:
Your rights to access, amend or delete the information we hold
You have certain rights in relation to your personal data. We have summarised these rights below:
| Right | Description |
| To be informed | A right to be informed about the personal data we hold about you. |
| Of access | A right to access the personal data we hold about you. |
| To rectification | A right to require us to rectify any inaccurate personal data we hold about you. |
| To erasure | A right to ask us to delete the personal data we hold about you. This right will only apply where (for example): We no longer need to use the personal data to achieve the purpose we collected it for. Where you withdraw your consent if we are using your personal data based on your consent. Where you object to the way we process your data (see the right to object described below). If you request us to delete your data, we will retain minimum personal data to document these requests and thereby avoid using your personal data for any other purpose. |
| To restrict processing | In certain circumstances, a right to restrict our processing of the personal data we hold about you. This right will only apply where (for example): You dispute the accuracy of the personal data held by us. Where you would have the right to ask us to delete the personal data but would prefer that our processing is restricted instead. Where we no longer need to use the personal data to achieve the purpose we collected it for, but you need the data for the purposes of establishing, exercising or defending legal claims. |
| To data portability | In certain circumstances, a right to receive the personal data you have given us, in a structured, commonly used and machine-readable format. You also have the right to require us to transfer this personal data to another organisation, at your request. |
| To object | A right to object to our processing of the personal data we hold about you where our lawful basis is for the purpose of our legitimate interests, unless we are able to demonstrate, on balance, legitimate grounds for continuing to process the personal data which override your rights, or which are for the establishment, exercise or defence of legal claims. In particular, you can exercise your right to object to marketing communications being sent to you by utilising opt-out mechanisms in emails we send to you. |
| In relation to automated decision-making and profiling | A right for you not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affects you. |
| To withdraw | A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with brochures and newsletters). |
| To complain | You have the right to make a complaint to our supervisory authority, which is the UK’s Information Commissioner’s Office. |
If you would like to contact us with any queries or comments, request further information or exercise any of your available rights set out above, please use the contact details in the ‘Contacting Us’ section at the top of this policy.
All requests will be dealt with wherever possible within one month of receipt