GDPR Policy

GDPR Privacy Policy for Rxbuild Mental Health and Wellbeing Foundation

Last Updated: FEB 2025

At Rxbuild Mental Health and Wellbeing Foundation, we are committed to ensuring that your privacy is protected and that your personal data is handled in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, store, and protect your personal data when you engage with our services.

1. Introduction
Rxbuild Mental Health and Wellbeing Foundation is dedicated to improving mental health and wellbeing by providing resources, support, and services. This document is designed to help you understand how we collect, use, and protect your personal data, as well as to inform you of your rights under the GDPR.

2. Data Controller
The data controller for your personal data is:

Rxbuild Mental Health and Wellbeing Foundation  
5 Hallsworth Bridge, SK13 2NA
Rob@Rxbuild.co  
07368 464 538

3. Types of Personal Data We Collect
We may collect the following types of personal data depending on the services you access:

- Contact Information: Full name, email address, phone number, postal address
- Demographic Information: Age, gender, marital status, occupation
- Health Information: Any mental health and wellbeing-related information that you provide (e.g., self-reported mental health conditions, treatment history, therapy sessions, etc.)
- Payment Information: If you make donations or payments to the Foundation, we may collect financial details (but not payment card details, which are processed securely by third-party providers)
- Communication Data: Any communication between you and Rxbuild (e.g., emails, forms, survey responses, or feedback)
- Website Usage Data: Information about how you interact with our website (e.g., IP address, browser type, and device information)

4. How We Use Your Personal Data
We process your personal data for the following purposes:

- Providing Services: To provide you with access to our mental health support services, events, and resources.
- Communicating with You: To send you newsletters, updates, event invitations, and other communications related to the Foundation.
- Donation Processing: To process your donations and payments securely.
- Improving Services: To analyze and improve our services, programs, and user experience.
- Legal and Compliance: To fulfill our legal obligations and protect our legal rights.
- Marketing (with consent): We may contact you about our services or events, but only if you have given us consent.

5. Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds under GDPR:

- Consent: When you provide us with consent (e.g., signing up for a newsletter or agreeing to receive communications from us).
- Contractual Necessity: To fulfill our contractual obligations with you (e.g., providing mental health services).
- Legitimate Interests: For purposes that are in our legitimate interest, such as improving services or contacting you regarding updates.
- Legal Obligation: To comply with our legal obligations.

6. How We Protect Your Personal Data
We take the security of your personal data seriously. We have implemented appropriate technical and organizational measures to safeguard your data from unauthorized access, alteration, or disclosure. This includes encryption, secure data storage, and restricted access to sensitive information.

7. Sharing Your Personal Data
We do not sell, trade, or otherwise transfer your personal data to third parties except for the following reasons:

- Service Providers: We may share your data with trusted third-party service providers who assist us in delivering our services (e.g., payment processors, email platforms).
- Legal Requirements: We may share your data if required by law or to protect our rights or the safety of others.
- Analytics and Marketing (with consent):  We may share aggregated or anonymized data with marketing or analytics partners.

8. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. When data is no longer needed, it will be securely deleted.

9. Your Rights Under GDPR
As a data subject, you have several rights under the GDPR:

- Right to Access: You have the right to request copies of your personal data.
- Right to Rectification: You have the right to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You can request that we erase your personal data under certain conditions.
- Right to Restrict Processing: You can request that we restrict processing of your data in certain situations.
- Right to Data Portability: You can request a copy of your personal data in a commonly used format.
- Right to Object: You can object to the processing of your data for certain purposes, including marketing.
- Right to Withdraw Consent: If we process data based on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at Info@Rxbuild.co

10. Cookies
Our website uses cookies to enhance your experience and analyze site traffic. You can manage your cookie preferences in your browser settings. For more information, please refer to our Cookie Policy

11. International Transfers
If we transfer your personal data outside of the European Economic Area (EEA), we will take appropriate measures to ensure that your data is protected in accordance with GDPR requirements.

12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website, and the updated policy will indicate the "Last Updated" date.

13. Contact Us
If you have any questions or concerns about how we handle your personal data, or if you wish to exercise your rights under GDPR, please contact us at:

Rxbuild Mental Health and Wellbeing Foundation  
Info@Rxbuild.co

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or the relevant supervisory authority in your country. complies with applicable regulations.