Privacy Policy

Legal

Privacy Policy

Last updated: 13 August 2026

This policy explains what personal information New Maudsley Carers – Kent collects when you use this website, why we collect it, and what rights you have. We know that people come to us at difficult times, and we take the privacy of that seriously.

1. Who is responsible for your data

New Maudsley Carers – Kent is the data controller for the information described here. Our contact for data protection matters is Jenny Langley.

For anything to do with your data, contact jenny@newmaudsleycarers-kent.co.uk.

2. What we collect

If you buy something or create an account

  • your name and email address;
  • your billing address;
  • your order history and which resources you have access to;
  • your account username and an encrypted version of your password;
  • the IP address the order was placed from, which WooCommerce records against the order.

We do not receive or store your full card number. Card details are entered directly with Stripe and handled by them.

If you contact us

If you email us or complete a form on the site, we hold what you send us — typically your name, email address and the content of your message — so that we can reply and keep a record of the conversation.

You may sometimes choose to tell us about your own circumstances or those of someone you care for, which can include information about health. We do not ask for this, and you do not need to give it to receive our resources. Where you do share it, we treat it as confidential and use it only to respond to you.

When you browse the site

Our hosting and security infrastructure logs technical information such as IP addresses and browser type, which is used to keep the site running and protect it from abuse. We also use cookies, described in section 6.

3. Why we use it, and our lawful basis

  • To fulfil your order and give you access to what you bought — because it is necessary to perform our contract with you.
  • To send transactional emails such as order confirmations and password resets — performance of our contract.
  • To reply to your enquiries — our legitimate interest in responding to people who contact us, and your consent where you have volunteered sensitive details.
  • To keep financial records — to comply with our legal obligations.
  • To keep the site secure and prevent fraud — our legitimate interest in protecting the site and our users.
  • Non-essential cookies and analytics — only with your consent, given through our cookie banner.

We do not use your information to make automated decisions about you, and we do not sell it or share it for anyone else’s marketing.

4. Who we share it with

We use a small number of service providers who process data on our behalf. Each is bound to use it only for the purpose we have engaged them for:

  • Stripe — payment processing. Stripe receives your payment and billing details directly and acts as a controller in its own right for fraud prevention purposes.
  • Vimeo — hosts and streams our videos. When a video loads, Vimeo may set cookies and record playback data.
  • Our website host and content delivery network — store the site and its database and serve pages to visitors.
  • Our email provider — delivers order confirmations and other transactional emails.
  • CookieYes — records your cookie consent choices.

We may also disclose information if we are required to by law, or to establish or defend legal claims.

Some of these providers operate outside the UK. Where personal data is transferred abroad, it is protected by UK adequacy regulations or by standard contractual clauses.

5. How long we keep it

  • Order and transaction records — seven years, to meet accounting and tax requirements.
  • Your account — for as long as you keep it, so that you retain access to the resources you bought. If you ask us to close it, we will delete it, keeping only what we must for the financial record above.
  • Emails and enquiries — normally up to two years, unless there is a reason to keep them longer.
  • Server and security logs — a short period set by our host, typically a matter of weeks.

6. Cookies

Cookies are small files stored by your browser. We use:

  • Essential cookies, which keep you logged in, remember your basket, and allow checkout to work. The site cannot function without these.
  • Cookies set by Vimeo when a video is loaded on a page.
  • Cookies set by Stripe for payment processing and fraud prevention.
  • Consent and preference cookies set by CookieYes to remember your choices.

You can change your cookie choices at any time through the cookie settings on the site, or by clearing cookies in your browser. Blocking essential cookies will stop you from logging in or buying.

7. Your rights

Under UK data protection law you can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct anything inaccurate;
  • delete your data, where we do not have a legal reason to keep it;
  • restrict or object to how we use it;
  • transfer it to another provider in a portable format;
  • withdraw consent, where we relied on consent, at any time.

Email jenny@newmaudsleycarers-kent.co.uk and we will respond within one month. There is no charge.

You can also download or erase your personal data yourself from My Account, using the tools WordPress provides.

8. Keeping your data safe

The site runs over an encrypted HTTPS connection, passwords are stored hashed rather than in plain text, and access to the administration area is limited to people who need it. No system can be guaranteed completely secure, but we take reasonable steps to protect your information and will tell you and the ICO promptly if a breach occurs that is likely to affect you.

9. Children

Our resources are written for adults caring for someone else, and our shop is not intended for use by children. We do not knowingly collect data from anyone under 16. If you believe a child has given us their details, please contact us and we will remove them.

10. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

11. Changes to this policy

If we change how we use personal information, we will update this page and change the date at the top.