{"id":308,"date":"2018-07-25T19:39:21","date_gmt":"2018-07-25T19:39:21","guid":{"rendered":"http:\/\/fipo.mysites.io\/?page_id=308"},"modified":"2026-06-28T10:22:20","modified_gmt":"2026-06-28T10:22:20","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/fipo.uk\/index.php\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h2><b>1. INTRODUCTION<\/b><\/h2>\n<p style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">1.1 This Privacy Notice explains how the Federation of Independent Practitioner Organisations (\u201c<\/span><b>we<\/b><span style=\"font-weight: 400;\">\u201d, \u201c<\/span><b>us<\/b><span style=\"font-weight: 400;\">\u201d, \u201c<\/span><b>our<\/b><span style=\"font-weight: 400;\">\u201d, or the \u201c<\/span><b>Federation<\/b><span style=\"font-weight: 400;\">&#8220;) collects, uses, stores, and protects your personal information when you use our litigation funding and registration platform at fipo.uk (the \u201c<\/span><b>Website<\/b><span style=\"font-weight: 400;\">\u201d).<\/span><\/p>\n<p style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">1.2 We are committed to protecting your privacy and complying with data protection laws, including the UK General Data Protection Regulation (\u201c<\/span><b>UK GDPR<\/b><span style=\"font-weight: 400;\">\u201d) and the Data Protection Act 2018.<\/span><\/p>\n<p style=\"font-weight: 400;\" aria-level=\"2\">1.3 <b>Please read this Privacy Notice carefully<\/b><span style=\"font-weight: 400;\"> before providing any personal information through our Website. By using our Website and providing your information, you acknowledge that you have read and understood this Privacy Notice.<\/span><\/p>\n<h2 aria-level=\"2\"><b>2. WHO WE ARE<\/b><\/h2>\n<p style=\"font-weight: 400;\" aria-level=\"2\">2.1 <b>Data Controller:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Federation of Independent Practitioner Organisations<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Company Number: 4148752<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Registered Office: <\/span><span style=\"font-weight: 400;\">2 St Marys Road, Tonbridge, Kent TN9 2LB<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Email:office at fipo.uk<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Telephone: 020 7205 4166<\/span><\/p>\n<p style=\"font-weight: 400;\" aria-level=\"2\">2.2 <span style=\"font-weight: 400;\">We are the data controller for the personal information you provide through this Website. This means we are responsible for deciding how we hold and use your personal information.<\/span><\/p>\n<p style=\"font-weight: 400;\" aria-level=\"2\">2.3 <b>Data Protection Officer:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">[Name\/Position]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Email: [DPO Email]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Address: [Address]<\/span><\/p>\n<p style=\"font-weight: 400;\" aria-level=\"2\">2.4 <span style=\"font-weight: 400;\">You can contact our Data Protection Officer if you have any questions about this Privacy Notice or how we handle your personal information.<\/span><\/p>\n<h2 style=\"font-weight: 400;\" aria-level=\"2\"><b>3. WHAT PERSONAL INFORMATION WE COLLECT<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We collect and process the following categories of personal information:<\/span><\/p>\n<p><b>3.1 Registration and Account Information<\/b><\/p>\n<p><span style=\"font-weight: 400;\">When you register for an account on our Website, we collect:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Full name<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Email address<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Telephone number (mobile and\/or landline)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Practice address(es)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">GMC (General Medical Council) registration number<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Professional qualification details<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Specialty and sub-specialty<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Professional organisation membership details<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Username and password (password stored in encrypted form only)<\/span><\/li>\n<\/ol>\n<p><b>3.2 Professional Practice Information<\/b><\/p>\n<p><span style=\"font-weight: 400;\">To assess eligibility and calculate potential damages, we collect:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Years qualified and in practice<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Current employment status (NHS\/private\/mixed)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Private Medical Insurance (PMI) provider relationships<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Approximate percentage of income from PMI work<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Practice size and patient volume (approximate)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Geographic location of practice<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Specialisation and service types offered<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Estimated annual income ranges (optional)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Estimated financial losses from PMI restrictions<\/span><\/li>\n<\/ol>\n<p><b>3.3 Financial Information<\/b><\/p>\n<p><span style=\"font-weight: 400;\">For litigation funding contributions, we collect:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Payment method selection (PayPal, BACS Direct Debit)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Payment confirmation details<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Contribution amount<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Payment date and status<\/span><\/li>\n<\/ol>\n<p><b>Important:<\/b><span style=\"font-weight: 400;\"> We do NOT store complete credit card or bank account numbers. Payment processing is handled by secure third-party payment processors (PayPal, Stripe) who maintain their own secure systems. We receive only transaction confirmation details.<\/span><\/p>\n<p><b>3.4 Uploaded Documents<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You may upload the following documents to our Website:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Proof of identity (passport, driving licence, other photo ID)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">GMC registration certificate<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Signed Deed of Assignment with witness details<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Witness identification documents<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Professional organisation membership certificates<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">PMI provider agreements and contracts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Fee schedules and payment records<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Correspondence with PMI providers<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Practice income evidence (tax returns, accounts &#8211; optional)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Other supporting documentation<\/span><\/li>\n<\/ol>\n<p><b>Legal Professional Privilege:<\/b><span style=\"font-weight: 400;\"> Some documents you upload may be legally privileged communications with solicitors. We treat all uploaded documents as potentially privileged and maintain appropriate confidentiality safeguards.<\/span><\/p>\n<p><b>3.5 Identity Verification Information<\/b><\/p>\n<p><span style=\"font-weight: 400;\">To verify your identity and professional credentials:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">GMC Register verification results<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Professional registration status checks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Referral code information (linked to affiliated organisation)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">IP address at time of registration<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Device information (browser type, operating system)<\/span><\/li>\n<\/ol>\n<p><b>3.6 Legal Documents and Consents<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Executed Deed of Assignment (with electronic signature)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Witness details for Deed execution<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Consent records (to assignment, data processing, participation)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Acknowledgments of terms and conditions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Tax implications acknowledgments<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Litigation participation agreements<\/span><\/li>\n<\/ol>\n<p><b>3.7 Communication Records<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Email correspondence with you<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Support queries and responses<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Telephone call records (if you contact us)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Messages sent through the Website<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Notification preferences<\/span><\/li>\n<\/ol>\n<p><b>3.8 Website Usage Information<\/b><\/p>\n<p><b>3.9 We automatically collect certain information when you visit our Website:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">IP address<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Browser type and version<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Operating system<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Pages visited and time spent<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Date and time of access<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Device type (desktop, mobile, tablet)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Clickstream data<\/span><\/li>\n<\/ol>\n<p><b>3.10 Cookies and Similar Technologies<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We use cookies and similar tracking technologies. See Section 12 for detailed information about our cookie practices.<\/span><\/p>\n<h2><b>4. HOW WE COLLECT YOUR INFORMATION<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We collect personal information through:<\/span><\/p>\n<p><b>4.1 Direct Provision<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Information you provide directly when you:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Register for an account<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Complete registration forms<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Upload documents<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Execute the Deed of Assignment electronically<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Make payment contributions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Contact us via email, phone, or contact forms<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Update your account or preferences<\/span><\/li>\n<\/ol>\n<p><b>4.2 Automated Collection<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Information collected automatically when you:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Visit our Website (usage data, cookies)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Navigate through pages<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Download documents or forms<\/span><\/li>\n<\/ol>\n<p><b>4.3 Third-Party Sources<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Information we receive from:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>GMC Register:<\/b><span style=\"font-weight: 400;\"> Professional registration verification<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Payment processors:<\/b><span style=\"font-weight: 400;\"> Payment confirmation (PayPal, Stripe)\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Professional organisations:<\/b><span style=\"font-weight: 400;\"> Membership verification (with your consent)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Our legal advisors:<\/b><span style=\"font-weight: 400;\"> Case-related information<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Referral organisations:<\/b><span style=\"font-weight: 400;\"> Confirmation of legitimate referral codes<\/span><\/li>\n<\/ol>\n<p><b>4.4 Public Sources<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">GMC Register (publicly available professional registration data)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Professional directory listings (where applicable)<\/span><\/li>\n<\/ol>\n<h2><b>5. LEGAL BASIS FOR PROCESSING YOUR INFORMATION<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Under UK GDPR, we must have a lawful basis to process your personal information. We rely on the following legal bases:<\/span><\/p>\n<p><b>5.1 Contract (Article 6(1)(b))<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Processing necessary for the performance of a contract with you, specifically:<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Managing your registration and account<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Processing your assignment of legal claims to the Federation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Managing your participation in collective litigation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Processing your contribution payments<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Providing access to your account dashboard<\/span><\/li>\n<\/ol>\n<p><b>5.2 Legal Obligation (Article 6(1)(c))<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Processing necessary to comply with legal obligations, including:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Financial record-keeping requirements<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Tax reporting obligations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Anti-money laundering checks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Court orders or regulatory requirements<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Disclosure obligations in litigation<\/span><\/li>\n<\/ol>\n<p><b>5.3 Legitimate Interests (Article 6(1)(f))<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Processing necessary for our legitimate interests or those of a third party, including:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Fraud prevention and detection<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Network and information security<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Enforcing our legal rights<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Managing and administering the litigation effectively<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Improving our Website and services<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Communicating about the litigation progress<\/span><\/li>\n<\/ol>\n<p><b>Balancing Test:<\/b><span style=\"font-weight: 400;\"> We have carefully balanced our legitimate interests against your rights and freedoms. We only rely on legitimate interests where your rights do not override our interests.<\/span><\/p>\n<p><b>5.4 Consent (Article 6(1)(a))<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Where we rely on your consent, you have the right to withdraw consent at any time. We rely on consent for:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Non-essential cookies and analytics<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Marketing communications (if any &#8211; we do not currently send marketing)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Sharing information beyond litigation requirements<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Optional data processing activities<\/span><\/li>\n<\/ol>\n<p><b>5.5 Legal Claims (Article 9(2)(f) for Special Category Data)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">For special category data (if any is inadvertently collected), we may rely on:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Establishment, exercise, or defence of legal claims<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Substantial public interest (Article 9(2)(g))<\/span><\/li>\n<\/ol>\n<p><b>Special Category Data:<\/b><span style=\"font-weight: 400;\"> We do not intentionally collect special category data (health data, racial\/ethnic origin, political opinions, religious beliefs, etc.). If such data is inadvertently included in documents you upload, we process it only to the extent necessary for the litigation.<\/span><\/p>\n<h2><b>6. HOW WE USE YOUR INFORMATION<\/b><\/h2>\n<p><b>6.1 Litigation Purposes<\/b><br \/>\n<span style=\"font-weight: 400;\">We use your information to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Assess your eligibility to participate in the litigation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Verify your professional credentials and identity<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Process your assignment of claims via Deed of Assignment<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Calculate your potential individual damages<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Prepare evidence for court proceedings<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Instruct expert witnesses<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Communicate with defendants<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Distribute damages if litigation is successful<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Manage settlement negotiations<\/span><\/li>\n<\/ol>\n<p><b>6.2 Financial Management<\/b><br \/>\n<span style=\"font-weight: 400;\">We use your information to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Process contribution payments<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Track funding threshold progress<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Manage trust accounting obligations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Process refunds if minimum threshold not reached<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Calculate cost recovery and distribution ratios<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Provide financial reports to solicitors and auditors<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Comply with tax reporting requirements<\/span><\/li>\n<\/ol>\n<p><b>6.3 Website and Account Management<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We use your information to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Create and manage your user account<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Provide access to secure member areas<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Authenticate your identity when you log in<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Send account-related notifications<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Respond to your queries and support requests<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Improve Website functionality and user experience<\/span><\/li>\n<\/ol>\n<p><b>6.4 Communication<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We use your information to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Send important updates about the litigation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Notify you of required actions or documents<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Respond to your inquiries<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Provide litigation progress reports<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Send confirmation emails (registration, payment, document uploads)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Notify you of changes to terms or policies<\/span><\/li>\n<\/ol>\n<p><b>Marketing:<\/b><span style=\"font-weight: 400;\"> We do NOT use your information for marketing purposes. All communications relate to the litigation or your account.<\/span><\/p>\n<p><b>6.5 Verification and Fraud Prevention<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We use your information to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Verify your GMC registration and professional status<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Validate referral codes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Detect duplicate or fraudulent registrations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Prevent unauthorised access to the Website<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Protect against cyber attacks and security breaches<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Monitor for suspicious activity<\/span><\/li>\n<\/ol>\n<p><b>6.6 Legal and Regulatory Compliance<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We use your information to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Comply with court orders and legal obligations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Respond to regulatory inquiries<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Maintain audit trails<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Respond to Solicitors Regulation (\u201c<\/span><b>SRA<\/b><span style=\"font-weight: 400;\">\u201d) inquiries and requirements (in consultation with our legal advisors)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Meet data protection obligations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Defend legal claims<\/span><\/li>\n<\/ol>\n<p><b>6.6 Analysis and Improvement<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We use aggregated or anonymised information to:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Analyse registration trends and patterns<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Improve Website functionality<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Identify technical issues<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Optimise user experience<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Assess litigation participation demographics<\/span><\/li>\n<\/ol>\n<h2>7. WHO WE SHARE YOUR INFORMATION WITH<\/h2>\n<p><span style=\"font-weight: 400;\">We share your personal information only when necessary and with appropriate safeguards.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Information you provide through this portal will be shared with [Harcus Parker], the solicitors acting in the claims, and with counsel and expert economists instructed in connection with those claims.\u00a0 All recipients are bound by legal professional privilege and applicable data protection obligations. Your information will be used solely for the purpose of pursuing the claims on your behalf.:<br \/>\n<\/span><br \/>\n<b>7.1 Legal Advisors<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> [Law Firm Name] and instructed barristers<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> To prosecute the litigation on your behalf<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> All information necessary for legal representation including registration details, financial information, uploaded documents, and damages calculations<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Professional legal privilege protects communications; solicitors bound by SRA rules and confidentiality obligations<br \/>\n<\/span><br \/>\n<b>7.2 Expert Witnesses<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> Economic experts, industry experts, and other expert witnesses<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> To prepare expert evidence for court proceedings<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Professional practice information, financial data, market analysis data (typically anonymised or pseudonymised where possible)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Expert witness confidentiality obligations; non-disclosure agreements<\/span><\/p>\n<p><b>7.3 The Court and Defendants<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> High Court of Justice, defendant insurance companies, and their legal representatives<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> Court disclosure obligations in litigation<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Information relevant to the legal claims, as required by court rules and orders<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Court rules govern disclosure; confidentiality orders may protect sensitive information; redaction of irrelevant personal data<\/span><\/p>\n<p><b>Important:<\/b><span style=\"font-weight: 400;\"> Once litigation commences, some of your information will become part of court proceedings and may be disclosed to defendants and potentially become public record. We will minimise disclosure to what is legally required and seek protective orders where appropriate.<\/span><\/p>\n<p><b>7.4 Payment Processors<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> PayPal, Stripe<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> To process contribution payments<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Payment transaction details (they collect payment card\/bank details directly, not through us)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Payment processors are PCI DSS compliant and have their own privacy policies<\/span><\/p>\n<p><b>7.5 IT Service Providers<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> Website hosting provider, email service provider, backup services, security services<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> To operate and secure the Website<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Technical access to database and systems (minimal personal information access)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Data Processing Agreements, confidentiality obligations, security standards (<\/span><span style=\"font-weight: 400;\">ISO 27001<\/span><span style=\"font-weight: 400;\"> or equivalent)<\/span><\/p>\n<p><b>7.6 Professional Verification Services<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><b>Who:<\/b><span style=\"font-weight: 400;\"> GMC Register database provider, identity verification services (if used)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> To verify your professional credentials and identity<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> GMC number, name, date of birth (for identity checks)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Data Processing Agreements, limited purpose use<\/span><\/li>\n<\/ol>\n<p><b>7.7 Accountants and Auditors<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> Federation&#8217;s accountants and auditors<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> Financial reporting, tax compliance, audit requirements<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Financial contribution records, trust accounting data<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Professional confidentiality obligations<\/span><\/p>\n<p><b>7.8 Regulatory Authorities<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> Information Commissioner&#8217;s Office (ICO), Solicitors Regulation Authority<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> Compliance with legal and regulatory obligations<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Information requested in formal inquiries or investigations<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Legal obligations limit sharing to what is required<\/span><\/p>\n<p><b>7.9 Law Enforcement<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> Police, fraud investigators, court orders<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> Legal obligation to comply with lawful requests<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Information specified in warrant, court order, or statutory requirement<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> We verify legitimacy of requests and provide only what is legally required<\/span><\/p>\n<p><b>7.10 Referral Organisations<\/b><\/p>\n<p><b>Who:<\/b> <span style=\"font-weight: 400;\">Professional organisations that issued referral codes<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> To verify legitimate use of referral codes and provide participation statistics<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Confirmation that member used their code (typically anonymised statistics)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Data Processing Agreements, limited information sharing<\/span><\/p>\n<p><b>7.11 Other Participants (limited)<\/b><\/p>\n<p><b>Who:<\/b><span style=\"font-weight: 400;\"> Other litigation participants<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Why:<\/b><span style=\"font-weight: 400;\"> Collective action coordination (if necessary)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>What:<\/b><span style=\"font-weight: 400;\"> Minimal information (typically just number of participants, not individual identities)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Safeguards:<\/b><span style=\"font-weight: 400;\"> Aggregated\/anonymised data only; individual identities protected<\/span><\/p>\n<p><b>We do NOT:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Sell your personal information to third parties<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Share your information for marketing purposes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Provide your information to data brokers<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Use your information for purposes unrelated to the litigation<\/span><\/li>\n<\/ol>\n<h2>8. INTERNATIONAL TRANSFERS<\/h2>\n<p>8.1 <b>UK-Based Processing:<\/b><span style=\"font-weight: 400;\"> We process your personal information primarily within the United Kingdom.<br \/>\n<\/span><br \/>\n8.2 <b>Limited International Transfers:<\/b><span style=\"font-weight: 400;\"> Some service providers may process data outside the UK\/EEA, including:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Cloud storage providers<\/b><span style=\"font-weight: 400;\"> (e.g., <\/span><span style=\"font-weight: 400;\">AWS, Google Cloud<\/span><span style=\"font-weight: 400;\">) &#8211; may have servers globally<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Payment processors<\/b><span style=\"font-weight: 400;\"> (PayPal, Stripe) &#8211; US-based companies with global operations<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Email services<\/b><span style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"> &#8211; may route through international servers.<\/span><\/span><\/li>\n<\/ol>\n<p>8.3 <b>Safeguards for International Transfers:<\/b><span style=\"font-weight: 400;\"> Where we transfer personal information outside the UK, we ensure appropriate safeguards including:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Adequacy Decisions:<\/b><span style=\"font-weight: 400;\"> Transfers to countries with UK adequacy decisions (e.g., EEA countries, specific approved countries)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Standard Contractual Clauses:<\/b><span style=\"font-weight: 400;\"> EU Commission approved contracts between us and the recipient<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>UK International Data Transfer Agreement:<\/b><span style=\"font-weight: 400;\"> ICO-approved transfer agreements<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Service Provider Certifications:<\/b><span style=\"font-weight: 400;\"><span style=\"font-weight: 400;\"> Processors certified under recognised frameworks.<\/span><\/span><\/li>\n<\/ol>\n<p>8.4 <span style=\"font-weight: 400;\">You can obtain information about specific safeguards by contacting our Data Protection Officer.<\/span><\/p>\n<h2><b>9. HOW LONG WE KEEP YOUR INFORMATION<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">We retain your personal information for different periods depending on the purpose:<\/span><\/p>\n<p><b>9.1 During Active Litigation<\/b><br \/>\n<b>Retention Period:<\/b><span style=\"font-weight: 400;\"> Throughout the litigation and until final resolution (including appeals)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> Necessary for legal claims and litigation management<\/span><\/p>\n<p><b>9.2 Post-Litigation<\/b><br \/>\n<b>Retention Period:<\/b><span style=\"font-weight: 400;\"> 7 years after final resolution of litigation<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Limitation periods for potential claims<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Regulatory and tax requirements<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Professional indemnity insurance requirements<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Audit and compliance needs<\/span><\/li>\n<\/ol>\n<p><b>9.3 Financial Records<\/b><\/p>\n<p><b>Retention Period:<\/b><span style=\"font-weight: 400;\"> Minimum 7 years from end of financial year<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> Tax law requirements, trust accounting obligations<\/span><\/p>\n<p><b>9.4 Legal Documents<\/b><\/p>\n<p><b>Retention Period:<\/b><span style=\"font-weight: 400;\"> Deed of Assignment and related legal documents retained permanently or for limitation period (12 years for deeds)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> Legal enforceability, proof of assignment<\/span><\/p>\n<p><b>9.5 If Litigation Not Commenced<\/b><\/p>\n<p><b>Retention Period:<\/b><span style=\"font-weight: 400;\"> 3 years if litigation does not commence<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> Administrative purposes, potential future litigation, regulatory<br \/>\n<\/span><b>Retention Period:<\/b><span style=\"font-weight: 400;\"> Deleted 1 year after litigation conclusion (subject to legal document retention requirements above)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> No ongoing need for account access<\/span><\/p>\n<p><b>9.6 Website Account Data<\/b><\/p>\n<p><b>Retention Period:<\/b><span style=\"font-weight: 400;\"> Deleted 1 year after litigation conclusion (subject to legal document retention requirements above)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> No ongoing need for account access<\/span><\/p>\n<p><b>9.7 Communications<\/b><\/p>\n<p><b>Retention Period:<\/b><span style=\"font-weight: 400;\"> 7 years from date of communication<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> Evidence of notifications, compliance records<\/span><\/p>\n<p><b>9.8 Cookies and Analytics<\/b><\/p>\n<p><b>Retention Period:<\/b><span style=\"font-weight: 400;\"> Up to <\/span><span style=\"font-weight: 400;\">26<\/span><span style=\"font-weight: 400;\"> months for analytics data<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Reason:<\/b><span style=\"font-weight: 400;\"> Statistical analysis, Website improvement<\/span><\/p>\n<p><b>9.9 Secure Deletion:<\/b><span style=\"font-weight: 400;\"> When retention periods expire, we securely delete or anonymise your information using industry-standard deletion methods.<\/span><\/p>\n<p><b>Exceptions:<\/b><span style=\"font-weight: 400;\"> We may retain information beyond these periods if:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Required by law or court order<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Necessary to defend legal claims<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">You have consented to longer retention<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Anonymised for statistical purposes (no longer personal data)<\/span><\/li>\n<\/ol>\n<h2><b>10. YOUR RIGHTS UNDER DATA PROTECTION LAW<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">You have the following rights regarding your personal information:<\/span><\/p>\n<p><b>10.1 Right of Access (Article 15)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Obtain confirmation whether we process your personal information<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Access your personal information<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Receive information about how we use your data<\/span><\/li>\n<\/ol>\n<p><b>How to exercise:<\/b><span style=\"font-weight: 400;\"> Submit a Subject Access Request to our Data Protection Officer. We will respond within one month (extendable by two months for complex requests).<\/span><\/p>\n<p><b>What we provide:<\/b><span style=\"font-weight: 400;\"> Copy of your personal information in commonly used electronic format (usually PDF).<\/span><\/p>\n<p><b>10.2 Right to Rectification (Article 16)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Correct inaccurate personal information<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Complete incomplete personal information<\/span><\/li>\n<\/ol>\n<p><b>How to exercise:<\/b><span style=\"font-weight: 400;\"> Log into your account and update information directly, or contact us with corrections.<\/span><\/p>\n<p><b>Timeframe:<\/b><span style=\"font-weight: 400;\"> We will correct errors within one month.<\/span><\/p>\n<p><b>10.3 Right to Erasure \/ \u201cRight to be Forgotten\u201d (Article 17)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to request deletion of your personal information in certain circumstances.<\/span><\/p>\n<p><b>IMPORTANT LIMITATION &#8211; Litigation Context:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your right to erasure is <\/span><b>significantly limited<\/b><span style=\"font-weight: 400;\"> because we process your information for legal claims. Under Article 17(3)(e), we can refuse erasure where processing is necessary for:<\/span><\/p>\n<p><b>Establishment, exercise, or defence of legal claims<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This means we <\/span><b>cannot delete<\/b><span style=\"font-weight: 400;\"> your information while:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Litigation is active or contemplated<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Limitation periods are running<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">We have legal\/regulatory retention obligations<\/span><\/li>\n<\/ol>\n<p><b>Limited Erasure Available:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">If you withdraw before litigation commences AND minimum threshold not reached<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">After all retention periods have expired<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">For information not necessary for legal claims (e.g., marketing preferences if we ever collect them)<\/span><\/li>\n<\/ol>\n<p><b>10.4 Right to Restriction of Processing (Article 18)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to request we restrict processing of your personal information in certain circumstances:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">You contest the accuracy of data (restriction while we verify)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Processing is unlawful but you don&#8217;t want erasure<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">We no longer need the data but you need it for legal claims<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">You have objected to processing (restriction while we verify grounds)<\/span><\/li>\n<\/ol>\n<p><b>Effect:<\/b><span style=\"font-weight: 400;\"> We store the data but don&#8217;t actively process it (except with your consent or for legal claims).<\/span><\/p>\n<p><b>10.5 Right to Data Portability (Article 20)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Receive personal information you provided in structured, commonly used format<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Transmit that data to another controller<\/span><\/li>\n<\/ol>\n<p><b>Limitations:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Only applies to information YOU provided (not information we generated)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Only where processing is based on consent or contract<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Only for automated processing<\/span><\/li>\n<\/ol>\n<p><b>Practical application:<\/b><span style=\"font-weight: 400;\"> Limited in litigation context as most processing is for legal claims, not based on consent.<\/span><\/p>\n<p><b>10.6 Right to Object (Article 21)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to object to processing based on legitimate interests.<\/span><\/p>\n<p><b>IMPORTANT LIMITATION:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You <\/span><b>cannot object<\/b><span style=\"font-weight: 400;\"> to processing that is:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Necessary for legal claims (litigation)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Required by legal obligation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Necessary for contract performance<\/span><\/li>\n<\/ol>\n<p><b>Where you CAN object:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Marketing (though we don&#8217;t do marketing)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Some analytics and profiling (limited application here)<\/span><\/li>\n<\/ol>\n<p><b>10.7 Rights Related to Automated Decision-Making (Article 22)<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right not to be subject to decisions based solely on automated processing that produce legal effects.<\/span><\/p>\n<p><b>Our Position:<\/b><span style=\"font-weight: 400;\"> We do NOT use automated decision-making or profiling that produces legal effects. All significant decisions involve human review.<\/span><\/p>\n<p><b>10.8 Right to Withdraw Consent<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Where processing is based on consent, you can withdraw consent at any time.<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Effect:<\/b><span style=\"font-weight: 400;\"> We will stop processing for that purpose (but can continue for other lawful purposes).<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Limitations:<\/b><span style=\"font-weight: 400;\"> Cannot withdraw consent for processing necessary for legal claims or legal obligations.<\/span><\/li>\n<\/ol>\n<p><b>10.9 Right to Complain<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to lodge a complaint with the supervisory authority:<\/span><\/p>\n<p><b>Information Commissioner&#8217;s Office (ICO)<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Wycliffe House<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Water Lane<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Wilmslow<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Cheshire<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">SK9 5AF<\/span><\/p>\n<p><b>Telephone:<\/b><span style=\"font-weight: 400;\"> 0303 123 1113<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Website:<\/b> <a href=\"http:\/\/www.ico.org.uk\"><span style=\"font-weight: 400;\">www.ico.org.uk<\/span><\/a><\/p>\n<p><b>Our Preference:<\/b><span style=\"font-weight: 400;\"> We encourage you to contact us first so we can try to resolve your concern.<\/span><\/p>\n<h2><b>11. HOW TO EXERCISE YOUR RIGHTS<\/b><\/h2>\n<p><b>11.1 Contact Methods:<\/b><\/p>\n<p><b>Email:<\/b><span style=\"font-weight: 400;\"> [Data Protection Email]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Post:<\/b><span style=\"font-weight: 400;\"> Data Protection Officer, Federation of Independent Practitioner Organisations [Address]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Online Form:<\/b><span style=\"font-weight: 400;\"> [<\/span><span style=\"font-weight: 400;\">If available on website<\/span><span style=\"font-weight: 400;\">]<\/span><\/p>\n<p><b>11.2 What to Include:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Your full name and contact details<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Description of your request<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Proof of identity (to protect your information)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Account username (if applicable)<\/span><\/li>\n<\/ol>\n<p><b>11.3 Our Response:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Timeframe:<\/b><span style=\"font-weight: 400;\"> One month (extendable to three months for complex requests)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Free of charge:<\/b><span style=\"font-weight: 400;\"> Generally no fee (we may charge for manifestly unfounded or excessive requests)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Verification:<\/b><span style=\"font-weight: 400;\"> We may request additional information to verify your identity.<\/span><\/li>\n<\/ol>\n<h2>12. COOKIES AND TRACKING TECHNOLOGIES<\/h2>\n<p><b>12.1\u00a0What Are Cookies? <\/b><span style=\"font-weight: 400;\">Cookies are small text files stored on your device when you visit our Website. They help the Website function properly and provide usage information.<\/span><\/p>\n<p><b>12.2 Types of Cookies We Use<\/b><\/p>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>1. Strictly Necessary Cookies<\/b><span style=\"font-weight: 400;\"> (No consent required)<\/span>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(i) Session management and authentication<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(ii) Security and fraud prevention<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iii) Essential Website functionality<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iv) Load balancing<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p><b>Example:<\/b><span style=\"font-weight: 400;\"> Login session cookie keeping you logged in<\/span><\/p>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>2. Performance\/Analytics Cookies<\/b><span style=\"font-weight: 400;\"> (Consent required)<\/span>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(i) Website traffic analysis<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(ii) Understanding how visitors use the Website<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iii) Identifying errors and issues<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p><b>Example:<\/b> <span style=\"font-weight: 400;\">Google Analytics (if used)<\/span><span style=\"font-weight: 400;\"> &#8211; anonymised<\/span><\/p>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>3. Functional Cookies <\/b> (Consent required)<span style=\"font-weight: 400;\"> (Consent required)<\/span>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(i) Remember your preferences<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(ii) Enhance user experience<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iii) Remember language\/region settings<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p>12.3 <b>We do NOT use:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Marketing\/advertising cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Third-party advertising cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Social media tracking cookies (except if you share content)<\/span><\/li>\n<\/ol>\n<p><b>12.4 Third-Party Cookies <\/b><span style=\"font-weight: 400;\">We may use carefully selected third-party services that set cookies:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Google Analytics (if used<\/span><span style=\"font-weight: 400;\">) &#8211; for Website statistics<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Payment processors (during payment process only)<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">reCAPTCHA (for security)<\/span><\/li>\n<\/ol>\n<p><b>12.5 Managing Cookies<\/b><\/p>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>1. Browser Settings:<\/b><span style=\"font-weight: 400;\"> You can control cookies through your browser settings. Most browsers allow you to:<\/span>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(i) See what cookies are stored<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(ii) Delete cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iii) Block all cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iv) Block third-party cookies<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>2. Browser Help Resources:<br \/>\n<\/b><\/p>\n<ol style=\"list-style: none;\">\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(i) Chrome: chrome:\/\/settings\/cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(ii) Firefox: support.mosilla.org\/en-US\/kb\/cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iii) Safari: support.apple.com\/guide\/safari<br \/>\n<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iv) Edge: support.microsoft.com\/microsoft-edge<br \/>\n<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p><b>12.6 Impact of Blocking Cookies: <\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Strictly necessary cookies: Website may not function properly<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Other cookies: Functionality may be limited but core features work<\/span><\/li>\n<\/ol>\n<p><b>12.7 Our Cookie Banner:<\/b>When you first visit, you&#8217;ll see a cookie banner allowing you to:<\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Accept all cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Reject non-essential cookies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Manage cookie preferences<\/span><\/li>\n<\/ol>\n<p><b>12.8 Cookie List<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Cookie Name<\/b><\/td>\n<td><b>Type<\/b><\/td>\n<td><b>Purpose<\/b><\/td>\n<td><b>Duration<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">session_id<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Strictly Necessary<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Login session management<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Session<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">csrf_token<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Strictly Necessary<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Security protection<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Session<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">cookie_consent<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Strictly Necessary<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Remember your cookie preferences<\/span><\/td>\n<td><span style=\"font-weight: 400;\">1 year<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">_ga<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Analytics (if used)<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Google Analytics visitor identification<\/span><\/td>\n<td><span style=\"font-weight: 400;\">2 years<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">_gid<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Analytics (if used)<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Google Analytics session identification<\/span><\/td>\n<td><span style=\"font-weight: 400;\">24 hours<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><i><span style=\"font-weight: 400;\">This list will be updated as cookies are implemented<\/span><\/i><\/p>\n<h2>13. SECURITY MEASURES<\/h2>\n<p><span style=\"font-weight: 400;\">We take the security of your personal information seriously and implement appropriate technical and organisational measures:<\/span><\/p>\n<p><b>13.1 Technical Measures<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Encryption:<\/b><span style=\"font-weight: 400;\"> All data transmission uses <\/span><span style=\"font-weight: 400;\">HTTPS\/SSL<\/span><span style=\"font-weight: 400;\"> encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Secure Storage:<\/b><span style=\"font-weight: 400;\"> Encrypted storage for sensitive documents and data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Access Controls:<\/b><span style=\"font-weight: 400;\"> Role-based access limiting who can view data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Firewalls:<\/b><span style=\"font-weight: 400;\"> Web application firewall protection<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Security Monitoring:<\/b><span style=\"font-weight: 400;\"> 24\/7 monitoring for threats and intrusions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Regular Updates:<\/b><span style=\"font-weight: 400;\"> Security patches and software updates<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Backup Systems:<\/b><span style=\"font-weight: 400;\"> Regular encrypted backups stored securely<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Authentication:<\/b><span style=\"font-weight: 400;\"> Strong password requirements, optional two-factor authentication<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Antivirus\/Malware:<\/b><span style=\"font-weight: 400;\"> Protection against malicious software<\/span><\/li>\n<\/ol>\n<p><b>13.2 Organisational Measures<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Staff Training:<\/b><span style=\"font-weight: 400;\"> Data protection training for all personnel with data access<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Confidentiality Agreements:<\/b><span style=\"font-weight: 400;\"> All staff and contractors bound by confidentiality<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Access Logs:<\/b><span style=\"font-weight: 400;\"> Audit trails of who accesses personal information<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Data Minimisation:<\/b><span style=\"font-weight: 400;\"> We collect only information necessary for purposes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Need-to-Know:<\/b><span style=\"font-weight: 400;\"> Access granted only to those who require it<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Incident Response Plan:<\/b><span style=\"font-weight: 400;\"> Procedures for handling security breaches<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Vendor Management:<\/b><span style=\"font-weight: 400;\"> Security assessment of third-party processors<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Physical Security:<\/b><span style=\"font-weight: 400;\"> Secure facilities for any physical records<\/span><\/li>\n<\/ol>\n<p><b>13.3 Security Limitations<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>No Absolute Security:<\/b><span style=\"font-weight: 400;\"> Despite our measures, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Your Responsibility:<\/b>\n<ol style=\"list-style: none; padding-left: 20px;\">\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(i) Keep your login credentials confidential<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(ii) Use a strong, unique password<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iii) Log out after using shared devices<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(iv) Report suspicious activity immediately<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"4\"><span style=\"font-weight: 400;\">(v) Keep your email account secure (password reset emails)<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p><b>13.4 Data Breach Notification: <\/b><span style=\"font-weight: 400;\">If a personal data breach occurs that is likely to result in high risk to your rights:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">We will notify you <\/span><b>without undue delay<\/b><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">We will notify the ICO within <\/span><b>72 hours<\/b><span style=\"font-weight: 400;\"> of becoming aware<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">We will provide information about the breach and steps taken<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">We will advise on measures you can take to protect yourself.<\/span><\/li>\n<\/ol>\n<h2>14. CHILDREN&#8217;S PRIVACY<\/h2>\n<ol style=\"list-style: none; padding-left: 0;\">\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">14.1 Our Website is not intended for children under 18 years of age.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">14.2 We do not knowingly collect personal information from anyone under 18. Registration for participation in the Litigation is only for qualified medical professionals.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">14.3 If we become aware we have inadvertently collected information from someone under 18, we will delete it promptly.<\/span><\/li>\n<\/ol>\n<p><b>15. LINKS TO OTHER WEBSITES<\/b><\/p>\n<ol style=\"list-style: none; padding-left: 0;\">\n<li style=\"font-weight: 400;\" aria-level=\"2\"><span style=\"font-weight: 400;\">15.1 Our Website may contain links to third-party websites (e.g., GMC Register, payment processors, legal resources).<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\">15.2 <b>Important:<\/b><span style=\"font-weight: 400;\"> We are not responsible for the privacy practices of other websites. This Privacy Notice applies only to our Website.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"2\">15.3 <b>Recommendation:<\/b><span style=\"font-weight: 400;\"> Read the privacy policy of any website you visit after leaving ours.<\/span><\/li>\n<\/ol>\n<h2>CHANGES TO THIS PRIVACY NOTICE<\/h2>\n<p><span style=\"font-weight: 400;\">16.1 We may update this Privacy Notice from time to time to reflect:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Changes in law or regulation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Changes to our practices<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">New features or services<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Feedback or complaints.<\/span><\/li>\n<\/ol>\n<p>16.2 <b>Notification of Changes:<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Material Changes:<\/b><span style=\"font-weight: 400;\"> We will notify you by email or prominent Website notice<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Minor Changes:<\/b><span style=\"font-weight: 400;\"> Updated version posted on Website with new \u201cLast Updated\u201d date<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Your Responsibility:<\/b><span style=\"font-weight: 400;\"> Review this Privacy Notice periodically<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><b>Continued Use:<\/b><span style=\"font-weight: 400;\"> Your continued use of the Website after changes constitutes acceptance of the updated Privacy Notice.<\/span><\/li>\n<\/ol>\n<p>16.3 <b>Archives:<\/b><span style=\"font-weight: 400;\"> Previous versions available on request from our Data Protection Officer.<\/span><\/p>\n<h2>17. CONTACT INFORMATION<\/h2>\n<p>17.1 <b>Data Protection Queries<\/b><\/p>\n<p><b>Data Protection Officer:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">[Name\/Position]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Federation of Independent Practitioner Organisations<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">[Address]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Email: [DPO Email]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Tel: [Phone Number]<\/span><\/p>\n<p>17.2 <b>General Website Queries<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Email: [General Email]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Tel: [Phone Number]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Website: [URL]<\/span><\/p>\n<p>17.3 <b>Litigation Queries<\/b><\/p>\n<p>17.4 For questions about the litigation itself (not data protection):<\/p>\n<p><span style=\"font-weight: 400;\">[<\/span><span style=\"font-weight: 400;\">Contact Information<\/span><span style=\"font-weight: 400;\">]<\/span><\/p>\n<p>17.5 <b>Complaints<\/b><\/p>\n<p><b>First Step:<\/b><span style=\"font-weight: 400;\"> Contact our Data Protection Officer<\/span><\/p>\n<p><b>Supervisory Authority:<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Information Commissioner&#8217;s Office (ICO)<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Tel: 0303 123 1113<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">Website: <\/span><a href=\"http:\/\/www.ico.org.uk\"><span style=\"font-weight: 400;\">www.ico.org.uk<\/span><\/a><\/p>\n<h2>18. YOUR ACCEPTANCE OF THIS PRIVACY NOTICE<\/h2>\n<p>18.1 <span style=\"font-weight: 400;\">By using our Website, registering for an account, and providing personal information, you acknowledge that:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2713 You have read and understood this Privacy Notice<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2713 You consent to the collection, use, and disclosure of your information as described<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2713 You understand your rights and how to exercise them<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2713 You understand the limitations on your rights in the litigation context<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2713 You understand information may be disclosed in court proceedings<\/span><\/p>\n<p><b>If you do not agree<\/b><span style=\"font-weight: 400;\"> with this Privacy Notice, please do not use our Website or provide personal information.<\/span><\/p>\n<p><b>Document Version:<\/b><span style=\"font-weight: 400;\"> 1.0<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Last Updated:<\/b><span style=\"font-weight: 400;\"> [Date]<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Next Review Date:<\/b><span style=\"font-weight: 400;\"> [Date + 12 months]<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><i><span style=\"font-weight: 400;\">This Privacy Notice has been prepared in accordance with UK GDPR, the Data Protection Act 2018, and guidance from the Information Commissioner&#8217;s Office. It has been reviewed by [<\/span><\/i><i><span style=\"font-weight: 400;\">Law Firm Name<\/span><\/i><i><span style=\"font-weight: 400;\">] as legal advisers to the litigation.<\/span><\/i><\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. INTRODUCTION 1.1 This Privacy Notice explains how the Federation of Independent Practitioner Organisations (\u201cwe\u201d, \u201cus\u201d, \u201cour\u201d, or the \u201cFederation&#8220;) collects, uses, stores, and protects your personal information when you use our litigation funding and registration platform at fipo.uk (the \u201cWebsite\u201d). 1.2 We are committed to protecting your privacy and complying with data protection laws, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-308","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/fipo.uk\/index.php\/wp-json\/wp\/v2\/pages\/308","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fipo.uk\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/fipo.uk\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/fipo.uk\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fipo.uk\/index.php\/wp-json\/wp\/v2\/comments?post=308"}],"version-history":[{"count":0,"href":"https:\/\/fipo.uk\/index.php\/wp-json\/wp\/v2\/pages\/308\/revisions"}],"wp:attachment":[{"href":"https:\/\/fipo.uk\/index.php\/wp-json\/wp\/v2\/media?parent=308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}