At Mental Health First Aid England CIC, we’re committed to protecting and respecting your privacy.
This Privacy Notice explains when and why we collect personal information about people who visit our website and interact with MHFA England CIC via telephone, email, and any other forms of correspondence. It covers how we use this information, the conditions under which we may disclose it to others, and how we keep it secure.
As our business and technology evolves, we might need to change this Privacy Notice. We encourage you to regularly review this Privacy Notice to make sure you are up to date with how MHFA England is using your personal data. By using this website and corresponding with MHFA England CIC, you agree to be bound by this notice.
Any questions regarding this notice and our privacy practices should be sent by email to info@mhfaengland.org or by writing to Freepost MHFA England. Alternatively, you can telephone 0203 928 0760.
We’re MHFA England CIC, a social enterprise that offers expert guidance and training to support mental health. Our vision is to improve the mental health of the nation, which we will achieve through our mission to train one in ten of the population of England in Mental Health First Aid (MHFA) skills.
MHFA England CIC is a registered company limited by guarantee (no. 7021392). The registered address is 21 Prescot Street, London, E1 8BB.
MHFA England CIC is registered under the Information Commissioners Office (registration reference: Z2064743).
We obtain information about you when you use the website, Online Learning Hub, Mental Health First Aider Support app, email, telephone or correspond with MHFA England CIC, for example when you contact us about products and services.
We also collect data from other legitimate sources such as via our Instructor Members, who deliver all education and training courses on behalf of MHFA England. Some Instructor Members are independent and some work within other organisations, therefore please refer to the Lead Instructors Privacy Notice for more information on their privacy practices and how they process your personal data.
The personal information we collect might include your name, address, email address, IP address and information regarding what pages are accessed and when. If you purchase a product from us, your card information is not held by us, it is collected by our third-party payment processors, who specialise in the secure online capture and processing of credit / debit card transactions.
Below is an in-depth summary of the different categories of data we may use.
Reflective notes - when you save a reflective note, we automatically encrypt and store the reflective log data. The duration, date, situation, and any signposting tags are taken, anonymised and used for reporting purposes in which individuals are not identifiable.
User data – this includes data about how you use the app. This user data is anonymous, and we process it to understand how many users are accessing the various signposting options and resources, to inform whether we continue to provide them and how we can expand on the resources available. Aggregated user data may be shared with third parties who are signposted to within the app, to help them understand the take-up of their services.
Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide us with that data when requested, we may not be able to fulfil the contract. If you do not provide us with the requested data, we may have to cancel a product or service you have ordered but if we do, we will notify you at the time.
We will only use your personal data for the purpose it was collected for or a reasonably compatible purpose if necessary. If we need to use your details for an unrelated new purpose, we will let you know and explain the legal grounds for processing.
We may process your personal data without your knowledge or consent where this is required or permitted by law.
We may use your information to:
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes.
Instructor Members
If you are attending one of our MHFA education and training courses, whether face-to-face or online, we will share your personal information with your assigned Instructor. This is to ensure the Instructor Member can notify you of essential course details, provide necessary materials, ascertain attendance and completion of the course, and ensure you receive any additional assistance you may need. Some Instructor Members are independent and some work within other organisations, however all of our Instructor Members are under contract and are bound by strict confidentiality clauses to help protect your personal data.
Trustpilot
We may contact you via email to invite you to review any services and/or products you received. To assist us we use an independent third-party review service platform called Trustpilot to collect feedback. This means that we will share your name and email address with Trustpilot for this purpose. Trustpilot will not use your personal details for any other purpose other than assisting us with the collection of reviews. If you want to read more about how Trustpilot process your data, you can find their Privacy Policy here.
We may also use such reviews in other promotional material and media for our advertising and promotional purposes.
Royal Society for Public Health
The Mental Health First Aid qualification is an Ofqual regulated Royal Society for Public Health (RSPH) Level 3 Award. When registering with MHFA England for the qualification, we will share your contact details with RSPH to register you as a candidate. You will then receive a candidate confirmation email and a system check email from RSPH.
As MHFA England is an approved RSPH Centre, your personal information will be protected in line with RSPH’s privacy policy. You can find out more about the privacy and security of your personal information processed by the RSPH here.
Third Party Service Providers working on our behalf
We may pass your information to our third-party providers, agents, subcontractors, and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example: to process payments and send you mailings and/or materials related to your course).
However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not use it for their own direct marketing purposes.
Please be reassured that we will not release your information to third parties for them to use for their own purposes, unless you have requested us to do so, or we are required to do so by law, for example, by court order or for the purposes of prevention of fraud or other crime.
We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganization, or if we’re under a duty to disclose or share your personal data in order to comply with any legal obligation or to enforce or apply our terms of use or to protect the rights, property or safety of our supporters and customers. However, we will take steps with the aim of ensuring that your privacy rights continue to be protected.
You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us, then you can select your choices by ticking the relevant boxes situation on the form on which we collect your information.
We will not contact you for marketing purposes by email, phone, or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us by email: info@mhfaengland.org or telephone on 0203 928 0760.
Under data protection laws you have rights in relation to your personal data. These rights include the right to request access, rectification, erasure, restriction, transfer, to object to processing, to portability of data and where the lawful ground of processing is consent, to withdraw consent.
The accuracy of your information is important to us. We’re working on ways to make it easier for you to review and correct the information that we hold about you. In the meantime, if you change email address, or any other information we hold is inaccurate or out of date, or you wish to exercise any of the rights set out above, please email us at info@mhfaengland.org, or write to us at Freepost MHFA England. Alternatively, you can telephone 0203 928 0760.
You can also opt-out of marketing communications by clicking on the “unsubscribe” link provided in each email you might receive.
You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive or refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case we will notify you.
We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use your personal information to detect fraud and credit risk.
Like many other websites, the MHFA England CIC website uses cookies. “Cookies” are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns and do not identify you as an individual. It is possible to switch off cookies by setting your browser preferences.
For more information, please click ‘Learn more’ on the cookie consent banner when you access our website.
Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website, so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
Similarly, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the policy of that third-party site.
As part of the services offered to you through this website, the information which you provide to us will not be transferred to countries outside of the European Economic Area (EEA). The Microsoft servers which are used to store our data are located within the EEA. Microsoft is a GDPR compliant organisation whose Standard Contractual Clauses were approved by the EU’s Article 29 Working Party – Microsoft was the first cloud service provider to receive a letter of endorsement and approval from the group.
If you use our services while you are outside the EEA, your information may be transferred outside the EEA in order to provide you with those services.
Our website may also use the Click Dimensions website recording service. Click Dimensions is a product which may record mouse clicks, mouse movements, page scrolling and any text keyed into website forms. The information collected does not include bank details or any sensitive personal data. Data collected by Click Dimensions is for MHFA England CIC’s internal use only. The information collected is used to improve our website usability and is stored and used for aggregated and statistical recording.
We have put in place technical and security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We also allow access to your personal data only to those employees and partners who have a business need to know such data. They will only process your personal data on our instructions, and they must keep it confidential. We have procedures in place to deal with any suspected data breach and will notify you and any applicable regulator of a breach if we are legally required to do so. Any sensitive information (such as credit or debit card details) is encrypted and protected.
Non-sensitive details (your email address etc.) are transmitted normally over the internet and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we will make our best effort to ensure its security on our systems. Where we have given (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including the purpose of satisfying any legal, accounting or reporting requirements.
When deciding what the correct time is to keep data for, we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.
For tax purposes the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.
In some circumstances we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
We are committed to working with you to settle any complaint or concern about privacy. If you are not happy with how we have dealt with your complaint or concern, you can complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
You can contact the ICO directly Online or call their helpline on 0303 123 1113.