Privacy notice

Who we are

Mwanga Mental Health Assessment Hub, 7 Alexandra Road, Blackpool, FY1 6BU. We are the data controller for information collected through this website. And we are registered with the Information Commissioner's Office.

Company registration number 17011896
Information commissioner's office number C2017742

What this notice covers

This notice covers information collected through this website. It does not cover clinical records created during an assessment, which are governed by our clinical records policy.

What we collect

If you send a message through our contact page, we receive your name, email address, telephone number if you provide one, the category of your enquiry, and the content of your message.

If you send a referral through our referral page, we receive your name, organisation, contact details, the type of assessment requested, and any practical notes you add. We ask you not to include health information in either form. If you do include it, we will treat it as special category data and handle it accordingly.

Our wellbeing check-in does not collect anything. Your answers stay in your browser, are not sent to us, and disappear when you close the page

Why we use it, and our lawful basis

We only use your information for the reasons set out below, and we do not use it for anything else without telling you first.

• Responding to your enquiry or referral. Our lawful basis is legitimate interests: we need to be able to reply to people who contact us, and you would reasonably expect us to.
• Telling you when services open, where you have asked us to. Our lawful basis is consent. You can withdraw it at any time by replying to any message from us.
• Health information you choose to include. Where you send us information about your health, we rely on Article 9(2)(h) of the UK GDPR, which covers the provision of health and social care. We do not ask for this information and we would rather you did not send it through a web form.

How we protect your information

We keep the amount of information we hold to the minimum we need. Our forms deliberately ask for contact details rather than clinical detail, and anything sensitive is taken by telephone or through an agreed secure route instead.

Information you send us is held in accounts protected by strong passwords and two-factor authentication, and access is limited to the people who need it to do their job. Every organisation that processes information on our behalf is bound by a written data processing agreement.

We review what we hold and delete anything we no longer need. If something does go wrong and there is a risk to your rights or freedoms, we will report it to the Information Commissioner's Office within 72 hours and tell you where we are required to.

Who we share it with

We do not sell your information and we do not share it for marketing. We use the following service providers:

• Our website host, which processes technical data such as IP addresses in server logs.
• Our email provider, which processes messages you send us.
• We may also share information where the law requires it, or where there is a safeguarding concern about a child or an adult at risk.

Your rights

Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have it corrected, to have it erased in some circumstances, to object to or restrict how we use it, and to withdraw consent where consent is the basis we rely on.

To exercise any of these rights, contact us using the details on our contact page.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

This website does not set cookies and does not use analytics or tracking.

Changes to this notice

We will update this page when our practices change. This version was published in August 2026.