Privacy Policy

 

Introduction:

HealsWay ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This privacy policy explains how we collect, use, disclose, and protect the personal data we gather through the HealsWay website (healsway.io) and related services. By accessing or using our website, you agree to the terms of this privacy policy:-

" To facilitate the processing of your application, we will conduct credit and identity checks through one or more credit reference agencies (CRAs). This involves sharing your personal information with CRAs, who will provide us with insights into your financial history. These checks are performed to evaluate your creditworthiness, suitability for our products, verify your identity, manage your account, mitigate risks related to debt, and prevent fraudulent activities.

Furthermore, we will maintain an ongoing exchange of information with CRAs, including updates on settled accounts and any outstanding debts. CRAs may also share your information with other relevant organizations. Additionally, your data may be linked with that of your spouse, joint applicants, or other financial associates.

For these purposes, we will share your personal information with CRAs, who will provide us with details such as your credit application, financial situation, history, and fraud prevention information sourced from public records, shared databases, and electoral registers.

The information obtained will be utilized to assess your creditworthiness, affordability of our products, ensure data accuracy, prevent criminal activities, manage accounts, recover debts, and tailor offers according to your circumstances.

As long as you maintain a relationship with us, we will continue to share information with CRAs, including updates on settled accounts. Any defaults on repayments may be recorded by CRAs and shared with other organizations.

Please be aware that when CRAs receive a search request from us, it may leave a footprint on your credit file visible to other lenders. In the case of joint applications or if you have a spouse or financial associate, your records may be linked, and you are advised to discuss this with them before applying. These links will persist until either party successfully requests a disassociation with the CRAs.

For detailed information regarding the CRAs' role, data handling practices, data retention policies, and your data protection rights, please refer to the Credit Reference Agency Information Notice (CRAIN) accessible through the following links:

- TransUnion: www.transunion.co.uk/crain
- Equifax: www.equifax.co.uk/crain
- Experian: www.experian.co.uk/crain

We encourage you to review the CRAIN document to understand how CRAs use and share personal information and to become familiar with your rights regarding data protection." 

 

1. Types of Personal Information We Collect:

We may collect various types of personal information from you, including but not limited to:

• Contact information (name, address, email address, phone number)
• Billing and payment details in encrypted format.
• Information related to your purchases and interactions with our website
• Demographic information
• Any other information you voluntarily provide to us

2. Lawful Basis for Processing:

We will only process your personal information when we have a lawful basis to do so, as required by the GDPR. The lawful bases may include the necessity of processing for the performance of a contract, compliance with a legal obligation, protection of vital interests, consent, or legitimate interests pursued by us or a third party.

3. Purposes and Legal Grounds for Processing:

We will process your personal information for the following purposes and based on the corresponding legal grounds:

• To fulfill orders and provide customer support: Necessity of processing for the performance of a contract.
• To personalize your experience and send marketing communications: Consent or legitimate interests.
• To conduct market research and improve our products and services: Legitimate interests.
• To comply with legal obligations: Compliance with a legal obligation.

4. Sharing Your Personal Information:

We may share your personal information with third parties in the following situations:

• Service providers: We may engage trusted third-party service providers to assist us in operating our business and delivering services to you. These providers are obligated to maintain the confidentiality and security of your personal information.
• Legal requirements: We may disclose your personal information if required to do so by law or in response to valid legal requests, such as court orders or government regulations.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.

5. International Data Transfers:

If we transfer your personal information outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place to protect your data, as required by the GDPR.

6. Data Retention:

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.

7. Your Rights under the GDPR:

Under the GDPR, you have certain rights regarding your personal information, including the right to access, rectify, restrict processing, erase, and portability. You also have the right to object to certain processing activities. To exercise these rights or for any privacy-related inquiries, please contact us using the information provided below.

8. Data Security:

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. We regularly review and update our security practices to maintain a high level of data protection.

9. Third-Party Links and Services:

Our website may contain links to third-party websites or services. This privacy policy does not apply to those third-party entities. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy:

Our website and services are not directed towards individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected personal information from a child, please contact us to request its deletion.

11. Changes to this Privacy Policy:

We reserve the right to update or modify this privacy policy at any time. Any changes will be effective immediately upon posting on our website. We encourage you to review this privacy policy periodically for any updates.

12. Contact Us:

If you have any questions, concerns, or requests regarding this privacy policy or our privacy practices, please contact us by using our contact details.