Privacy Policy
This Privacy Policy sets out the data processing practices of Muuvment Ltd. (Muuvment). Please note that all data thus captured will be used and held in accordance with the requirements of the Data Protection Act 2018.
Muuvment provides businesses with tools to deliver staff programs via media, for users to take action, and to track impact for a wide range of employee and customer uses e.g. Corporate Social Responsibility, Culture, Wellness, Mental and Physical health.
Muuvment is the data controller. If you have any requests concerning your personal data or any queries with regard to how we handle your data, you can contact the Muuvment Data Privacy Officer (DPO) by email privacy@muuvment.com or write to us at Privacy, Muuvment Ltd., Cumberland House, 7th Floor, 1 Victoria Street, Hamilton HM11, Bermuda.
Your Privacy
We respect your right to privacy. You can choose not to allow your personal data to be used and can opt out at any time. Please note that blocking access to some data types might impact your experience of the application and could impact some of the services that we offer.
This policy
This policy details the types of information we will be collecting and why.
Purpose of processing your personal data
Activity
•
Delivery of services
•
Communication around services and service delivery (current and future)
Type of Data
•
Surname
•
Given Name
•
•
IP Address
•
Role (Employee, Manager or Administrator access to the application)
•
Gender
•
Birthdate
•
Country
•
State/Province
•
City
•
Job Title
•
Job Grade
•
Department, Office
Purpose of Processing
•
Muuvment will collect the names, email addresses and IP addresses of users to set up accounts and deliver services.
•
At the client's option, Muuvment may also collect employee city, country, office location, job title and department, to enable further reporting & analytics capabilities.
•
Study employee actions on muuvment.com to allow further improvements to Muuvment product and platform
Lawful Basis
•
Purpose of fulfilling a contract with you.
•
Consent / Legitimate interests
Purpose of processing your sensitive data
Activity
•
Delivery of services
•
Communication around services and service delivery (current and future)
Type of Data
•
Optional current high-level indicative COVID-19 medical status for the staff member.
•
Optional current high-level indicative COVID-19 medical status for the staff member’s household.
•
Optional mental and physical details in response to questionnaires and services offered to support the staff member.
•
Location data to assist in knowing where the staff member is currently working from.
Purpose of Processing
•
Muuvment will collect this information to deliver services to users e.g. certain mental and/or physical health approved programs provided in response to answers and information provided by the user.
•
Study employee actions on muuvment.com to allow further improvements to Muuvment product and platform
Lawful Basis
•
Purpose of fulfilling a contract with you.
•
Consent / Legitimate interests
1. MARKETING
We would like to use your personal data to email you details of products or services that we offer that we have identified as likely to be of interest to you based on your actions and enquiries. We will only send you information in line with the preferences you indicated when you provided the personal data.
If at any point you would like to opt-out of receiving communications from Muuvment, please contact us at privacy@muuvment.com or write to DPO at Privacy, Muuvment Ltd., Cumberland House, 7th Floor, 1 Victoria Street, Hamilton HM11, Bermuda.
2. RECIPIENTS/CATEGORIES OF RECIPIENTS
We use third-party providers to deliver our email communications. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see the privacy notices for these services. You can unsubscribe to general mailings at any time by clicking the unsubscribe link at the bottom of any of our emails.
The following third parties will have access to some portion of user data, acting as data sub-processors, to support processing activity. Their GDPR compliance materials/policies are linked below.
•
Amazon Web Services:
•
Segment:
•
Mode Analytics:
•
Google Analytics:
•
customer.io:
3. RETENTION PERIODS
We will keep your personal data in connection with the services/products that Muuvment provides to you for 5 years after the last purchase. We need to retain this data for our own accounting purposes and for legal and tax purposes.
In terms of personal data we use for marketing, we will keep this data for as long as we are able to market to you and until if/when you withdraw your consent or opt-out of marketing communications.
4. DATA SUBJECT’S RIGHTS
You have rights in respect of your personal data.
•
The right to be informed
You have the right to be told about the collection and use of the personal data you provide. This privacy policy sets out the purpose for which we process your personal data, how long we will keep your data, who we will share your data with. If you have any questions on how and why we process your data, please contact the DPO. If you want to know more about this right, the ICO has more guidance on their website:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-be-informed/•
Right of access
You have the right to know whether we are processing your personal data, and to a copy of that data. We would need as much information as possible to enable us to locate your data. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-of-access/•
Right of rectification
You have the right to have any incorrect personal data corrected or completed if it is incomplete. You can make this request verbally or in writing. We will need as much information as possible to enable us to locate your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-rectification/•
Right to erasure
This right, often referred to as the right to be forgotten, allows you to ask us to erase personal data where there is no valid reason for us to keep it. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/•
Right to restrict processing
You have the right to ask us to restrict processing of your data. We will look at any request and inform you of our decision within 28 days of receiving the request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/•
Right to data portability
You have the right to move, copy or transfer your personal data from one IT environment to another. This right applies to data that you have provided to us and that we are processing on the legal basis of consent or in the performance of a contract and that processing is by automated means. We will respond to your request within 28 days of receipt of your request. If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-data-portability/•
Right to object
You have the right to object to our processing of your personal data based on (i) legitimate interests, or for the performance of a task in the public interests/exercise of official authority (including profiling); (ii) direct marketing (including profiling); and (iii) for purposes of scientific/historical research and statistics.
•
Legitimate interests/legal task: Your objection should be based on your particular situation. We can continue to process the data if we can demonstrate compelling legitimate grounds which override your interests.
•
Direct marketing: You have an absolute right to ask us to stop processing for the purposes of direct marketing. We will action your request as soon as possible.
•
Scientific/historical research and statistics: Your objection should be based on your particular situation. If we are conducting research where the processing is necessary for the performance of a public task, we can refuse to comply with your objection.
If you want to exercise this right, please contact the DPO at the contact details above. If you want to know more about this right, the ICO has more guidance on their website:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-object/5. PROCESSING BASED ON CONSENT
Where we process your personal data based on your consent you have the right to withdraw that consent at any time without reason. You can opt-out by using the unsubscribe/opt-out in any marketing we send you and you can contact the DPO at the contact details above.
6. THE RIGHT TO LODGE A COMPLAINT TO THE SUPERVISORY AUTHORITY
If you have any concerns regarding any aspect of our handling of your data outside of Bermuda, please contact the Information Commissioner’s Office.
Website:
If you have any concerns regarding any aspect of our handling of your data in Bermuda, please contact the Department of ICT Policy and Innovation.
Address:
Government Administration Building,
3rd Floor, 30 Parliament Street
Hamilton HM 12
Bermuda
Telephone:
+1 441 294-2774
Email:
7. COOKIES
A cookie is a small piece of information sent by a web server to a web browser, which enables the server to collect information from the browser. Find out more about cookies on http://www.allaboutcookies.org/
We use cookies to identify you when you visit this website and to keep track of your browsing patterns and build up a demographic profile.
Our use of cookies also allows registered users to be presented with a personalised version of the site, carry out transactions and have access to information about their account.
Most browsers will allow you to turn off cookies. If you want to know how to do this please look at the menu on your browser, or look at the instruction on http://www.allaboutcookies.org/
Please note however that turning off cookies may limit the full enjoyment and use of our website.
COOKIES WE USE
COOKIE
WHAT IT DOES
CONSEQUENCES OF DISABLING
8. THIRD PARTY WEBSITES
Our website may contain links to other websites that are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours.
9. CHANGES TO THE PRIVACY POLICY
This privacy policy is regularly reviewed and will be updated when necessary. If we make any significant changes to the policy, we will communicate these to you. This privacy policy was last updated on 14 December 2020.