PRIVACY NOTICE
This Privacy Notice explains how Involve Visual Collaboration Ltd (“Involve”, “we”, “us”, or “our”) collects and processes personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR).
WHO ARE WE?
Involve Visual Collaboration Ltd provides the SQOD platform, a video appointment system enabling virtual meetings between service providers and service users.
- Controller/Processor Status:
In most cases, the organisation using SQOD (the “Service Provider”) is the data controller, and Involve acts as a data processor on their behalf.
Involve may act as a data controller for limited processing activities such as website analytics, marketing, and contract management.
Registered Office:
Martin Dawes House, Europa Boulevard, Westbrook, Warrington, WA5 7WH
Personal Data We Collect
We may collect and process the following categories of personal data:
Identity Data
name, title, date of birth, gender, NHS number (where applicable)
Contact Data
address, email, telephone number
Financial Data
bank account and payment card details
Transaction Data
details of services purchased
Technical Data
IP address, browser type, device information, login data
Profile Data
account details, preferences, feedback
Usage Data
how you use our website and services
Marketing and Communications Data
preferences for receiving marketing
How we collect your data
We collect personal data through:
- Direct interactions (e.g. contracts, enquiries, support requests)
- Use of our platform (including videoconferencing)
- Cookies and website tracking technologies, further Information is available in our Cookie Policy | Involve
- Third parties (e.g. your organisation/employer using SQOD)
How we use your personal data
We use personal data for the following purposes:
- To provide and manage access to the SQOD platform
- To deliver contracted services
- To communicate with you (support, service updates, enquiries)
- To improve our services and monitor system performance
- To conduct market research and business development
- To comply with legal and regulatory obligations
Lawful basis for processing
We rely on the following lawful basis:
- Contract – processing necessary to perform a contract
- Legal obligation – compliance with legal requirements
- Legitimate interests – business improvement, service monitoring, and marketing (where appropriate and balanced against your rights)
- Consent – where required (e.g. marketing communications, call recordings where applicable)
You may withdraw consent at any time.
Videoconferencing and Call Recording
- All video calls are encrypted in transit
- Recording is optional and only carried out with prior consent
- Responsibility for lawful recording typically rests with the Service Provider (controller)
- Recordings are stored securely and access is restricted
Sharing Your Personal Data
We may share your data with trusted third-party processors, including:
- Amazon Web Services (hosting and infrastructure)
- Whereby (video conferencing services)
- Brevo (notifications)
- Hedgehog Lab (technical support)
All third parties are contractually bound to process data securely and only on our instructions.
- see appendix A for safeguards that are in place to protect your personal data
Data Retention
We retain personal data only for as long as necessary:
- Contract data: duration of contract plus applicable legal retention periods
- Support call recordings: up to 3 months
- Other data: retained based on business need and legal obligations
Data is securely deleted or anonymised when no longer required.
Security Of Your Data
We implement appropriate technical and organisational measures to protect personal data, including:
- ISO 27001-certified information security management
- Encryption and access controls
- Secure data storage and transmission
Your Data Protection Rights
Under UK GDPR, you have the right to:
- Be informed about how your data is used
- Access your personal data
- Request correction of inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing (including direct marketing)
- Not be subject to automated decision-making
Contact and Complaints
If you would like to exercise any of your rights or you are not satisfied with how we handle your data, please contact our DPO using the following contact details:
Data Protection Officer
Involve Visual Collaboration Ltd
Martin Dawes House, Europa Boulevard, Warrington, WA5 7WH
Email: DPO@Involve.vc
Tel: 01925 918187
We may request proof of identity before processing your request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) directly (www.ico.org.uk).
However, we would appreciate if you could give us the chance to address your complaint and put it right first.