GDPR & Data Protection
Motion Health is committed to protecting personal data and complying with the UK GDPR and the Data Protection Act 2018. This page summarises how we meet those obligations.
Our role
Depending on the service, Motion Health Ltd. acts as a data processor (processing personal data on behalf of our customers) or as a data controller (for example, for our own account and marketing data). Roles are set out in the applicable agreement.
Data Processing Agreement (DPA)
Where we process personal data on your behalf, we do so under a Data Processing Agreement. A copy is available on request.
Data residency
Personal data is stored and processed in the UK and/or European Economic Area.
International transfers
Where data is transferred outside the UK/EEA, we rely on an appropriate safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement, or Standard Contractual Clauses.
Data retention
We keep personal data only for as long as necessary for the purposes it was collected, after which it is securely deleted or anonymised. Specific retention periods depend on the type of data and any legal obligations.
Subprocessors
We use a small number of trusted subprocessors to help deliver our service. You can view the current list on our subprocessors page.
Your rights
Individuals whose data we process have rights under the UK GDPR, including:
the right to be informed about how their data is used;
the right of access to their personal data;
the right to rectification of inaccurate data;
the right to erasure (the “right to be forgotten”);
the right to restrict or object to processing;
the right to data portability.
Where we act as a processor, we will assist our customers in responding to these requests. To make a request or to ask us to erase your data, contact info@motion.org.uk.
Data protection contact
For any data-protection query, contact our data protection team at info@motion.org.uk. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).