Welcome to Amplify- Privacy Notice

-What we do
 
*Use the data provided in referrals, webforms and face-to-face requests provided by the you or from your employer representative (e.g. your manager or HR representative) on your behalf
 
​*Provide our core services of the Emotional and Psychological Wellbeing services:

- Advice & Signposting
- Case management
- Claims and referral advocacy
- Brief emotional containment work

*Contact you regarding the services we provide

*Responding to complaints

*Retain personal data under our data retention policy after the service with you has ended

*Report a crime, a significant risk to self or risk to others or comply with a legal investigation.

-UK and EU Lawful basis

*GDPR Article 6(1)(b) {performance of a contract} - when you or your employer’s representative provides us with your personal data or that of your relative, for instance to obtain advice and signposting, this is a necessary step to perform the contract.

*GDPR Article 6(1)(b) {performance of a contract}
- In providing the core services we are performing the contract with you, our data subject

*GDPR Article 6(1)(a) {Consent}
– we need consent from you to advocate on your behalf with your employer, medical insurance claims and referrals to care and wellbeing services (e.g., to the NHS)

*GDPR Article 9 (2)(h)
– {medical diagnosis, the provision of health or social care treatment or management of health or social care systems or a contract with a health professional} in order to provide emotional containment, preventative advice and support access to appropriate healthcare.

*GDPR Article 6(1)(f) {legitimate interests}
- we may contact you for our legitimate interests so that we can gather more information for the provision of our services, or to deliver those services most effectively; for example, to request you complete a customer service satisfaction survey.

*GDPR Article 6(1)(b) {performance of a contract}
- In responding to complaints we are performing the contract with you, our data subject.

*GDPR Article 6(1)(f) {legitimate interests}
- we need to retain the Investec employee’s personal data for only as long as necessary under the law to protect our legitimate interests. This includes providing your employer with anonymised aggregate data on activity and performance and using such aggregate data to provide analytical insights so your employer can be more responsive to its workforce wellbeing needs.

*GDPR Article 6(1)(c) {compliance with legal obligations}
- we must comply with our legal obligations

*GDPR Article 6(1)(d) {Protect the vital interests of the data subject or of another living person}
- we may need to share information to protect your life or the life of someone else if the person does not have capacity to make that decision; for example, the person is mentally incapacitated and we cannot rely on another lawful basis for sharing.