Privacy notice
The Medical & Diagnostic Care Group Limited (company no. 09853305), trading as AWYN, is the data controller. Registered office: 27 Duke Street, Chelmsford, CM1 1HT. Privacy contact: info@mdcaregroup.co.uk. This notice covers patients, people making enquiries, training purchasers and delegates, and website visitors.
Information we collect
- Identity, contact, booking and transaction information, including your name, contact details, booking reference, service or course, payment status and receipt or invoice details. Card information is handled by the payment provider and is not stored by AWYN.
- Clinical and health information needed to assess suitability and provide care, including screening answers, questionnaires, consent records, information you or another authorised source provides, consultation records, reports and agreed outcomes.
- Training purchaser and delegate information, including organisation, selected course, prerequisite checks, accessibility requirements, attendance and certificate records.
- Messages, enquiry content, communication and marketing preferences, and technical, device and cookie information generated when you use the website.
How we use your information
- Respond to your enquiries
- Assess suitability for our services
- Provide and coordinate your care
- Maintain appropriate records
- Help keep our website and systems secure
- Meet our legal and regulatory duties
Lawful basis for using your information
- Consent, where consent is the appropriate basis, including separate consent for optional marketing.
- Taking steps at your request before entering a contract and performing our contract with you.
- Legitimate interests in operating, securing and improving our services, where those interests are not overridden by your rights.
- Compliance with legal, regulatory, safeguarding and professional obligations.
- For special-category health information, the applicable UK data-protection condition, including provision or management of health or social care, explicit consent where used, vital interests, substantial public interest or legal claims as appropriate.
Sharing your information
- Authorised AWYN staff, clinicians and trainers who need the information to carry out their role.
- Contracted providers that support booking, payment, secure clinical records, forms, video appointments or live training, website hosting and communications. They may use the information only for the agreed purpose and must apply appropriate safeguards. If information is processed outside the UK, we use an applicable adequacy decision or approved contractual safeguards and supplementary measures where required.
- Regulators, professional advisers, law-enforcement bodies or other organisations where disclosure is required by law, needed to establish or defend legal rights, or reasonably necessary to protect someone from serious harm.
How long we keep your information
We keep information only for as long as needed for the purpose collected and to meet clinical, legal, regulatory, tax, insurance and professional record-keeping requirements. Retention depends on the type of record, the service or course, the person's age, and any complaint, safeguarding concern or legal claim. Information is securely deleted or anonymised when it is no longer required.
Your rights under UK data protection law
- Access your personal information
- Ask us to correct inaccurate information
- Ask us to erase information where this is applicable
- Ask us to restrict how we use your information
- Object to certain types of use
- Ask for your information to be provided in a portable format, where this applies
- You also have the right to make a complaint to the Information Commissioner’s Office (ICO).
Cookies
Our use of cookies follows the choices you make in the site’s cookie settings. You can review and change your cookie preferences using the tools provided on our website.
Contact
For a privacy question or to exercise your data rights, email info@mdcaregroup.co.uk. We may need to verify your identity before acting on a request. You can also complain to the Information Commissioner's Office at ico.org.uk.
Last reviewed: September 2026