Privacy Policy
Last updated: 1 June 2025
Momentum Wellbeing CIC takes your privacy seriously. This policy explains how we collect, use and protect your personal data. If you have any questions, please contact us at momentumwellbeing@hotmail.com.
1. Who we are
Momentum Wellbeing CIC is a Community Interest Company registered in England and Wales (Company Number 17298212). Our registered address is 174 Church Leys, Harlow, England, CM18 6DB. We are the data controller for personal information collected through this website and our services. You can contact us at momentumwellbeing@hotmail.com.
2. What personal data we collect
We may collect the following types of personal data: your name, email address, phone number, date of birth, and health information where provided (e.g. for referral purposes). We also collect information about how you use our website through cookies and analytics tools. We only collect the data necessary to provide our services and fulfil our legitimate purposes.
3. How we use your data
We use your data to: respond to enquiries and contact form submissions; process volunteer applications and referrals; deliver and improve our wellbeing programmes; send newsletters where you have subscribed; comply with our legal obligations; and measure and report on our community impact. We will never sell your data to third parties.
4. Our legal basis for processing
We process your data on the following legal bases under UK GDPR: Consent — where you have given explicit permission (e.g. newsletter signup, referral consent). Legitimate interests — where processing is necessary for our activities and does not unduly impact your rights. Contract — where processing is necessary to fulfil a service you have requested. Legal obligation — where we are required to process data by law.
5. How long we keep your data
We retain data only for as long as necessary. Contact enquiries are kept for 24 months. Referral information is retained for 3 years from the end of a participant's engagement with our services. Volunteer records are kept for 6 years in line with employment legislation. Transactional records are kept for 7 years for financial compliance purposes.
6. Sharing your data
We may share your data with: our partner GP practices and NHS services where relevant and with your consent; third-party services that help us operate (e.g. our secure CRM system, email platform); statutory bodies where legally required. All third-party processors are bound by data processing agreements and may not use your data for any other purpose.
7. Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data deleted ('right to be forgotten'); object to processing; restrict processing; data portability. To exercise any of these rights, please contact us at momentumwellbeing@hotmail.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
Our website uses cookies to improve your experience and analyse site traffic. Please see our Cookie Policy for full details and to manage your preferences. We use Google Analytics to understand how visitors use our site — this is configured to anonymise IP addresses and we do not permit Google to use your data for its own purposes.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated via our website. The date at the top of this page shows when the policy was last updated. Continued use of our services following an update constitutes acceptance of the revised policy.
For any data-related enquiries, contact: momentumwellbeing@hotmail.com