Privacy Policy
Introduction
AddictionHub ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and store your personal information when you use our website or services.
We adhere to the UK Data Protection Act 2018, the UK GDPR, and the EU General Data Protection Regulation (GDPR) to ensure your data is handled lawfully, fairly, and transparently.
Data Controller
AddictionHub is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:
- Email: privacy@addictionhub.co.uk
Information We Collect
We may collect the following types of information:
Personal Information
- Name and contact details (email address, phone number)
- Demographic information (such as postcode, preferences, and interests)
- Payment information when you subscribe to our services
- Information about your rehabilitation facility if you're registering as a service provider
Sensitive Personal Information
Given the nature of our services, we may collect information related to addiction and recovery needs. This is considered special category data under data protection laws and is handled with additional care and security.
Technical Information
- IP address
- Browser type and version
- Operating system
- Referral source
- Length of visit, page views, website navigation
- Location data
How We Collect Your Information
We collect information through:
- Forms you complete on our website
- Correspondence via email, phone, or other methods
- Your use of our website (via cookies and similar technologies)
- Third parties or publicly available sources (with your consent)
How We Use Your Information
We use your personal information for the following purposes:
- To provide you with information about treatment facilities based on your needs
- To process subscriptions and payments
- To manage our relationship with you
- To administer and protect our business and website
- To deliver relevant content and measure the effectiveness of our services
- To use data analytics to improve our website, services, and user experience
Legal Basis for Processing
We process your personal data on the following legal grounds:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose
- Contract: Where processing is necessary for the performance of a contract with you
- Legal obligation: Where processing is necessary for compliance with a legal obligation
- Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party (provided your interests and fundamental rights do not override those interests)
For sensitive personal data related to addiction and recovery, we process this information based on your explicit consent and/or because it is necessary for the provision of health or social care.
Data Sharing
We may share your personal information with:
- Treatment facilities that match your requirements (with your consent)
- Service providers who provide IT and system administration services
- Professional advisers including lawyers, bankers, auditors, and insurers
- HM Revenue & Customs, regulators, and other authorities
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They can only process your personal data for specified purposes and in accordance with our instructions.
International Transfers
We may transfer your personal data outside the UK or European Economic Area (EEA). Whenever we do this, we ensure a similar degree of protection is afforded to your data by ensuring at least one of the following safeguards is implemented:
- Transferring data to countries that have been deemed to provide an adequate level of protection
- Using specific contracts approved by the European Commission or UK authorities
- Using providers based in the US that are part of Privacy Shield (where applicable)
Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.
Your Legal Rights
Under data protection laws, you have rights including:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Right to withdraw consent where we rely on consent to process your personal data
You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. We may also refuse to comply with your request in these circumstances.
Cookies
Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Privacy Policy on this page and, where appropriate, notifying you by email.
Complaints
If you have any concerns about how we handle your data, please contact us first. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).