Skip to content
8foldgovernance master
  • Services
    • AI Governance
    • Medical Devices
      • Regulatory Roadmap
      • ISO 13485 Design & Build your QMS
      • Quality Management as a Service
      • Technical File Creation & Registration
      • UK Responsible Person
      • Post Market Surveillance
    • International Standards
      • ISO 13485 Certification
      • ISO 42001 Certification
      • ISO 9001 Certification
      • ISO 27001 Certification
    • DTAC
      • DTAC Management
    • Information Governance
      • Data Security & Protection (DSPT)
      • DSPT Audit
      • HIPAA Compliance
    • Clinical Safety and Risk Management
      • DCB0129
      • DCB0160
      • Clinical Safety Officers (CSO)
    • CQC Services
      • CQC Compliance Assessment
      • CQC Registration Support
      • CQC-as-a-Service
      • CQC Regulatory Review & Strategy
    • Cyber Security
    • Governance, Risk & Compliance Advisory
    • 8foldTraining
  • About
    • Meet the Team
    • Partnerships
    • Join Us
  • Blog
  • Case Studies
  • Contact
  • Services
    • AI Governance
    • Medical Devices
      • Regulatory Roadmap
      • ISO 13485 Design & Build your QMS
      • Quality Management as a Service
      • Technical File Creation & Registration
      • UK Responsible Person
      • Post Market Surveillance
    • International Standards
      • ISO 13485 Certification
      • ISO 42001 Certification
      • ISO 9001 Certification
      • ISO 27001 Certification
    • DTAC
      • DTAC Management
    • Information Governance
      • Data Security & Protection (DSPT)
      • DSPT Audit
      • HIPAA Compliance
    • Clinical Safety and Risk Management
      • DCB0129
      • DCB0160
      • Clinical Safety Officers (CSO)
    • CQC Services
      • CQC Compliance Assessment
      • CQC Registration Support
      • CQC-as-a-Service
      • CQC Regulatory Review & Strategy
    • Cyber Security
    • Governance, Risk & Compliance Advisory
    • 8foldTraining
  • About
    • Meet the Team
    • Partnerships
    • Join Us
  • Blog
  • Case Studies
  • Contact
  • +44 (0)1273 569172
Book a Call

Policy Page

Privacy Policy, Cookie Policy & Modern Slavery Statement

Icon: document and smartphone messaging, representing content writing

Privacy Notice

1. Introduction

8foldGovernance Ltd. (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data when you visit our website or communicate with us. It also outlines your rights under the GDPR and how you can exercise them.

2. Who We Are

8foldGovernance Ltd. is a provider of professional services relating to healthcare and healthcare technology. We are registered in the United Kingdom (Company No. 12085647) with our registered address at Town Hall Platform 9, Church Road, Brighton and Hove, England, BN3 2AF. We are registered as a data controller with the Information Commissioner’s Office (ICO), Registration No. ZA546326.

3. Contact Information and Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee compliance with this Privacy Notice. For any questions regarding this Privacy Notice or our data protection practices, please contact us.

4. What Personal Data We Collect

We may collect and process the following personal data:

  • Identity Data: Name, job title, and organisation.
  • Contact Data: Email address, telephone number, and postal address.
  • Meeting Transcription Data: Audio and text transcripts of meetings, including participant names, speech content, and timestamps.
  • Online Account Information: Username, password, and profile details.
  •  E-Learning Data (if applicable): Account information, course participation data, progress tracking, assessment results, and certificates earned.
  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
  • Payment Information: Billing details to enable payment to be taken (processed securely via third-party payment processors).
  • Communication and Support Data: Queries, feedback, or technical support interactions.
  • Engagement Data: Analytics on how you interact with our services. This includes links you click on, and the time and frequency of your activities.” and “Chatbot History: A record of your conversations with our chatbot.

5. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

  • Direct Interactions: When you fill in forms or correspond with us by post, phone, email, online platforms, or otherwise.
  • Automated Technologies or Interactions: When you interact with our website or other online platforms, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
  • Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, including e-learning platforms or payment processors.

6. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Performance of Contract: Where we need to perform the contract we are about to enter into or have entered into with you.
  • Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Legal Obligation: Where we need to comply with a legal obligation.
  • Consent: Where you have provided your consent.

7. Purposes for Which We Will Use Your Personal Data

We have set out below a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so:

Purpose/Activity

Type of Data

Lawful Basis for Processing

To register you as a new client.

Identity, Contact.
Performance of a contract with you.

To manage our relationship with you.

Identity, Contact, Meeting Transcription Data, Marketing and Communications.
Performance of a contract with you; Necessary for our legitimate interests; Necessary to comply with a legal obligation.

To administer and protect our business and this website.

Identity, Contact, Technical.
Necessary for our legitimate interests; Necessary to comply with a legal obligation.
To deliver relevant website content and advertisements to you.
Identity, Contact, Technical, Usage, Marketing and Communications.
Necessary for our legitimate interests.
To register you for online platforms and manage your access.
Identity, Contact, Online Account Information, E-Learning Data, Technical, Usage, Marketing and Communications.
Performance of a contract with you; Necessary for our legitimate interests; Necessary to comply with a legal obligation.
To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
Technical, Usage.
Necessary for our legitimate interests.

Content and Service improvement

user engagement with content

Necessary for our legitimate interests

Client Relationship Management

Chatbot History

Necessary for our legitimate interests

To make suggestions and recommendations to you about goods or services that may be of interest to you.
Identity, Contact, Technical, Usage, Marketing and Communications.
Necessary for our legitimate interests.
To process payments.
Identity, Contact, Payment Information.
Performance of a contract with you.

8. Data Sharing

We may share your personal data with:

  • Service Providers: External third parties or sub-contractors who operate on our behalf under a legal contract.
  • Professional Advisers: Including lawyers, bankers, auditors, and insurers who require data for professional services.
  • Regulatory Authorities: Where required by law or to comply with regulatory obligations.

9. Your Rights

You have the following rights regarding your personal data:

  • Right to access your data.
  • Right to rectification of inaccurate data.
  • Right to erasure of your data.
  • Right to restrict processing of your data.
  • Right to data portability.
  • Right to object to processing.
  • Right to withdraw consent at any time.

If you wish to exercise any of these rights, please contact us.

10. Automated Decision-Making and Profiling

Some aspects of our e-learning services may use automated decision-making, such as auto-grading quizzes or providing course recommendations based on your activity. You have the right to request human intervention if you believe an automated decision affects you unfairly.

We use an AI-powered chatbot to provide you with instant answers and support. The conversation history helps us resolve your query and is used to improve our AI’s accuracy.

While this tool automates our initial responses, it is not used for making any final or significant decisions about you. Any action that could have a legal or major impact on you is reviewed and executed by a member of our team. The chatbot’s role is strictly to provide information and assistance

11. Marketing Communications

You will receive marketing communications from us if you have requested information from us or purchased services from us and you have not opted out of receiving that marketing. You can ask us to stop sending you marketing messages at any time by contacting us.

12. Cookies

Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy.

13. Third-Party Platforms and Learning Tools

Our e-learning platform may integrate with third-party service providers, including learning management systems (LMS), video hosting services, and payment gateways. These third parties may process personal data on our behalf, and we ensure they comply with GDPR regulations.

If you access courses via third-party platforms, their privacy policies will also apply.

14. How to make a complaint

We strive to meet the highest standards when collecting and using personal information. For this reason, we take any complaints very seriously. We encourage people to inform us if they think that any collection or use of information by us is

unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures. You can do this by contacting us.

If you remain dissatisfied, you have the right to make a complaint to the Information Commissioner’s Office (ICO). Please see the ICO’s website for more information:

www.ico.org.uk

15. Changes to this Privacy Notice

We may update this Privacy Notice periodically. We encourage you to review this page regularly for any changes.

Cookie Policy

About this cookie policy.

This Cookie Policy explains how 8foldGovernance Ltd. (“we”, “us”, “our”) uses cookies and similar technologies to recognise you when you visit our website at https://8foldgovernance.com (“Website”). It explains what these technologies are and why we use them, as well as your rights to control our use of them.
In some cases we may use cookies to collect personal information, or that becomes personal information if we combine it with other information.

What are cookies ?

Cookies are small text files that are used to store small pieces of information. The cookies are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make the website more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.

How do we use cookies ?

As most of the online services, our website uses cookies first-party and third-party cookies for a number of purposes. The first-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.

The third-party cookies used on our websites are used mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.

How can i control cookies?

You have the right to decide whether to accept or reject cookies. You can exercise your cookie rights by setting your preferences in the Cookie Consent Manager. The Cookie Consent Manager allows you to select which categories of cookies you accept or reject. Essential cookies cannot be rejected as they are strictly necessary to provide you with services. The Cookie Consent Manager can be found in the notification banner and on our Website. If you choose to reject cookies, you may still use our Website though your access to some functionality and areas of our Website may be restricted. You may also set or amend your web browser controls to accept or refuse cookies. The specific types of first- and third-party cookies served through our Website and the purposes they perform are described in the table below (please note that the specific cookies served may vary depending on the specific Online Properties you visit):

If you would like to manage your consent, click here.

Modern Slavery Statement

8foldGovernance Slavery and Human Trafficking Statement

This statement, approved by our Board of Directors, was prepared and is published in accordance to section 54 of the United Kingdom’s Modern Slavery Act 2015 (the “Act”). 

Modern slavery is the recruitment, movement, harbouring or receiving of children, women or men through the use of force, coercion, abuse of vulnerability, deception or other means for the purpose of exploitation. Individuals may be trafficked into, out of or within the UK, and they may be trafficked for a number of reasons including sexual exploitation, forced labour, domestic servitude and organ harvesting.

Our Commitment

We are committed to ensuring there is no modern slavery or human trafficking in our supply chains or any part of our business activity. Our commitment to social and environmental responsibility is covered by our approach to modern slavery and human trafficking, which is part of our safeguarding strategy and arrangements.

Equality & Inclusion

8foldGovernance celebrates difference and regardless of gender, ethnicity, disability, age, sexual orientation or religion is committed to providing a welcoming, safe and respectful working environment that values diversity and provides equality of opportunity.  Our approach to equality extends to ensuring that there is no modern slavery or human trafficking in any part of our services.

Reporting

We encourage employees and suppliers to report known or suspected illegal and unethical activities to certain designated contacts

Our arrangements

Safeguarding

Our commitment to ensure no modern slavery is reflected in a number of our policies and procedures. It includes guidance on initial contact with a suspected human trafficking victim and the National Referral Mechanism.

Training

Our safeguarding training includes role relevant modern slavery awareness and Treatment and Care for Trafficked People (PROTECT).

Suppliers

8foldGovernance complies with the Public Contracts Regulations 2015 Supplers are required to confirm their compliance with the Modern Slavery Act.

Modern slavery act – Section 54

Section 54 of the modern slavery act details the following:

(4) A slavery and human trafficking statement for a financial year is—

(a) a statement of the steps the organisation has taken during the financial year to ensure that slavery and human trafficking is not taking place—

(i) in any of its supply chains, and

(ii) in any part of its own business, or

(b) a statement that the organisation has taken no such steps.

(5) An organisation’s slavery and human trafficking statement may include information about—

(a) the organisation’s structure, its business and its supply chains;

(b) its policies in relation to slavery and human trafficking;

(c) its due diligence processes in relation to slavery and human trafficking in its business and supply chains;

(d) the parts of its business and supply chains where there is a risk of slavery and human trafficking taking place, and the steps it has taken to assess and manage that risk;

(e) its effectiveness in ensuring that slavery and human trafficking is not taking place in its business or supply chains, measured against such performance indicators as it considers appropriate;

(f) the training about slavery and human trafficking available to its staff.

This statement is made pursuant to section 54(1) of the Modern Slavery Act 2015 and constitutes our slavery and human trafficking statement for the last financial year.

Candidate Privacy notice

1. Introduction

8foldGovernance Ltd. (“we,” “us,” or “our”) is a “data controller.” This means we are responsible for deciding how we hold and use personal information about you. This notice makes you aware of how and why your personal data will be used for the purposes of the recruitment exercise, and how long it will be retained.

2. Data Protection Principles

We will comply with UK data protection law, which says that the personal information we hold about you must be:

  • Used lawfully, fairly, and transparently.
  • Collected only for valid recruitment purposes.
  • Accurate and kept up to date.
  • Kept only as long as necessary.
  • Kept securely.

3. The Information We Collect

In connection with your application, we will collect, store, and use the following categories of personal information:

  • Contact details: Name, title, address, telephone number, and personal email address.
  • Application documents: CV, cover letter, and any application forms.
  • Qualifications: Employment history, experience, and professional memberships.
  • Interview data: Information provided during interviews and results of any technical tests.
  • References: Information provided by your named referees.

 

We may also collect “Special Categories” of more sensitive personal data, such as:

  • Information about your health (e.g., to make reasonable adjustments).
  • Information about criminal convictions and offences (where legally permitted for the role).
  • Equal opportunities monitoring information (e.g., race, ethnicity, or sexual orientation).

4. How We Collect Your Data

We collect personal information through the following channels:

  • Directly from you: via your CV or application form.
  • Third parties: Recruitment agencies, background check providers, or former employers.
  • Publicly available sources: Such as LinkedIn.

5. How We Use Your Information

We will use your personal information to:

  • Assess your skills and suitability for the role.
  • Carry out background and reference checks.
  • Communicate with you regarding the recruitment process.
  • Comply with legal or regulatory requirements (e.g., Right to Work in the UK).

Lawful Basis: We process your data because it is necessary to take steps at your request prior to entering into a contract, to comply with legal obligations, or because we have a legitimate interest in recruiting the best candidate for our business.

6. Data Sharing

We will only share your personal information with the following third parties for the purposes of processing your application:

  • Internal hiring managers and HR personnel.
  • Service providers who facilitate our recruitment (e.g., ATS platforms or testing providers).
  • Former employers for references.

7. Data Retention

  • Unsuccessful Candidates: We will retain your personal information for 6 months after we have communicated our decision. This is to allow us to respond to any legal claims or inquiries. We may ask for your consent to keep your CV on file for longer if future roles arise.
  • Successful Candidates: Your recruitment data will be transferred to your personnel file and governed by our Employee Privacy Notice.

8. Your Rights

Under the UK GDPR, you have the right to:
    • Access: Request a copy of the data we hold about you.
    • Correction: Ask us to fix inaccurate information.
    • Erasure: Ask us to delete your data (the “right to be forgotten”).
    • Object/Restrict: Challenge how we are using your data.
  • 9. How to Complain

    If you have any questions about this notice or how we handle your data, please contact our Data Protection Officer at info@8foldgovernnace.com .

    In accordance with the latest UK requirements, we acknowledge all data-related complaints within 30 days. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

    8foldgovernance master

    +44 (0) 1273 569172

    info@8foldgovernance.com

    SERVICES

    • AI Governance
    • Medical Device Registration
    • ISO Compliance
    • Full DTAC Support
    • Information Governance
    • Clinical Safety
    • Data Security & Protection
    • CQC Services
    • Cyber Security
    • 8foldTraining

    LINKS

    • Contact
    • About
    • Meet The Team
    • Blog
    • Join Us
    • Case Studies
    • Charity Work
    • Partnerships
    • FAQs
    DSPT Data Security And protection Toolkit 8Fold
    Information Governance Badge 8 Fold
    NPSORE
    ABHI Member
    Cyber Essentials Plus certification badge

     © 2026 8fold | Privacy Policy | Cookie Policy | Terms & Conditions

    X We use cookies on our website to give you the most relevant experience by remembering your preferences and repeat visits. By clicking “Accept”, you consent to the use of ALL the cookies. However you may visit Cookie Settings to provide a controlled consent.
    Read More ACCEPT Cookie settings
    Manage consent

    Privacy Overview

    This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
    Necessary
    Always Enabled
    Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
    CookieDurationDescription
    cookielawinfo-checkbox-analytics11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
    cookielawinfo-checkbox-functional11 monthsThe cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
    cookielawinfo-checkbox-necessary11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
    cookielawinfo-checkbox-others11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
    cookielawinfo-checkbox-performance11 monthsThis cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
    viewed_cookie_policy11 monthsThe cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
    Functional
    Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
    Performance
    Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
    Analytics
    Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
    Advertisement
    Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
    Others
    Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet.
    Save & Accept