1. Scope and who we are
This Privacy Policy applies to MDHP Resource Centre and its websites, applications, platforms, products, consulting services and related communications (collectively, the “Services”). In this policy, “MDHP”, “we”, “our” and “us” refer to the MDHP entity responsible for the relevant Service.
Depending on the context, MDHP may act as a data fiduciary/controller determining why and how personal data is processed, or as a processor/service provider acting on documented instructions from a customer.
2. Information we collect
Information you provide
- Identity and contact information, including name, organisation, job title, email address, telephone number and postal address.
- Account, authentication and profile information.
- Commercial and transaction information, including service enquiries, proposals, contracts, invoices and payment status. Payment card details are generally handled by authorised payment providers.
- Content submitted through forms, support requests, demonstrations, events, surveys or business communications.
- Recruitment information, including CVs, employment history and professional qualifications.
Information collected automatically
- Device, browser, operating system, IP address, approximate location, referring pages and usage events.
- Cookie identifiers, preferences, analytics and security logs.
- Diagnostic and performance information used to maintain availability and prevent misuse.
Customer-controlled data
Some MDHP products process information supplied or controlled by schools, colleges, universities, enterprises or other customers. For such data, the customer normally determines the purpose and lawful basis, and MDHP processes it under the applicable agreement.
3. How and why we use information
- To provide, configure, secure, support and improve the Services.
- To create and administer accounts, authenticate users and manage access.
- To respond to enquiries, prepare proposals and perform contracts.
- To process billing, maintain records and meet tax or accounting obligations.
- To send operational messages and, where permitted, relevant marketing communications.
- To monitor reliability, investigate incidents, prevent fraud and protect users, systems and rights.
- To comply with law, regulatory requests and enforceable legal process.
- To conduct analytics, research and product development using aggregated, de-identified or appropriately protected data where feasible.
We rely on consent, performance of a contract, compliance with legal obligations, legitimate uses/interests recognised by applicable law, and other lawful grounds as appropriate to the processing context.
4. Artificial intelligence and automated systems
MDHP may use artificial intelligence or automated tools to assist with analytics, support, software development, security, recommendations or workflow automation. We apply reasonable governance controls and do not intentionally use customer-confidential or personal information to train public models unless authorised by the customer or clearly disclosed. Where applicable law grants rights relating to significant automated decisions, requests may be submitted using the contact details below.
7. International transfers
Services may involve processing in India or other countries where MDHP, customers or service providers operate. We use contractual, organisational and technical safeguards appropriate to applicable transfer requirements, including recognised contractual clauses where relevant.
8. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including contract performance, security, dispute resolution, legal compliance and recordkeeping. Retention periods vary by data type, customer instructions, risk and legal requirements. Data is deleted, anonymised or securely archived when no longer required.
9. Your privacy rights
Depending on your location and the applicable law, you may have rights to access information, obtain a copy or summary, correct inaccuracies, erase data, withdraw consent, restrict or object to processing, opt out of certain disclosures or automated processing, nominate another person, or lodge a grievance or complaint.
We may verify identity and authority before completing a request. We will not discriminate against you for exercising a legally protected privacy right. Where MDHP processes data solely for a customer, we may direct the request to that customer.
10. Children’s information
MDHP’s public website is intended for business and institutional audiences. Some education products may process children’s information on behalf of an educational institution or guardian. Such processing is governed by customer instructions, contractual safeguards and applicable consent requirements. We do not knowingly use children’s information for behavioural advertising.
11. Security
We maintain reasonable administrative, technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure, loss or misuse. Measures may include access controls, encryption where appropriate, logging, backups, vulnerability management, secure development practices and incident response procedures. No system can be guaranteed completely secure.
12. Third-party links and services
Our Services may link to third-party websites or integrate with external services. Their privacy practices are governed by their own notices, and MDHP is not responsible for independent third-party processing.
13. Updates to this policy
We may update this policy to reflect legal, operational or technology changes. The revised version will be posted on this page with an updated effective date. Material changes may also be communicated through the Services or by other appropriate means.
14. Contact and grievance handling
Submit privacy requests with enough detail for us to identify the relevant service and information. Do not send passwords, payment card data or unnecessary sensitive information.