CONSUMER PRIVACY NOTICE

Your Menopause – Harley Street at Home
Version 1.0 | December 2025

1. Purpose of this Privacy Notice

This Privacy Notice explains how Harley Street at Home collects, uses, and protects your personal information when you join the Your Menopause community as a consumer user.

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Harley Street at Home
Melrose
Chapel Lane
Pirbright
Woking
Surrey
GU24 0JZ

Email for user data requests: support@harleystathome.com
Data Protection Lead / DPO: Mr Nigel Denby
DPO Email: nigel@nigeldenby.co.uk
ICO Registration: ZC042237

Harley Street at Home is the Data Controller for Your Menopause.

Circle provides the online community platform and acts as our Data Processor.

3. What Information We Collect

We collect the information you provide when you create an account or use the community. This includes:

• Name
• Email address
• Username
• Year of birth (if provided at signup)
• Practice name (if you sign up via an NHS link)
• Any profile information you choose to add
• Your activity in the community, including posts, comments, likes, event sign-ups, and webinar attendance
• Payment information for paid features (processed securely by Stripe; we do not store card details)

We do not request medical or clinical information as part of signup.

You may choose to share personal experiences or health information in posts, comments, or live sessions. This is entirely optional and can be removed by you at any time.

4. How We Use Your Information

We use your information to:

• Create and manage your account
• Provide access to community features, content, and events
• Send important service and account updates
• Moderate and protect the community
• Understand how people use the service
• Improve our platform and user experience

Your Menopause is a non-clinical community service.
We do not provide diagnosis, personalised medical advice, or treatment.
All webinars and discussions are for general information only.

If you disclose personal medical information in the community, clinicians will signpost you to appropriate NHS services and cannot comment on individual cases.

5. Legal Basis for Using Your Information

We rely on:

Contract – to provide your account and access to the community
Legitimate Interests – to operate, maintain, and improve the platform safely
Consent – for optional marketing emails or newsletters (you can withdraw consent at any time)

6. Who We Share Information With

We only share personal information with:

• Circle – community hosting, authentication, event delivery
• Stripe – secure payment processing
• Postmark – sending transactional emails (e.g., CPD records, study notifications)
• Hetzner – hosting the secure script for website signups
• NameCrane – website hosting
• Plausible – privacy-focused website analytics (no cookies, no tracking of individuals)
• Our internal administrative and support team, where required to help you

We do not sell personal information.
We do not share personal information with advertisers or social media platforms.

Any reporting to partners or commissioners is anonymous and aggregated.

7. International Transfers

Circle hosts community data in the United States.

Where data is transferred outside the UK, Circle provides appropriate safeguards such as Standard Contractual Clauses (SCCs) to protect your information under UK GDPR.

8. How Long We Keep Your Information

We keep your personal information for as long as your account is active.

If you close your account, we will delete your personal information within a reasonable period unless we need to keep certain information for legal or audit purposes.

Anonymous, aggregated usage information may be kept for longer as it does not identify you.

9. Your Rights

Under data protection law, you have the right to:

• Access your personal information
• Request corrections
• Request deletion of your account
• Object to certain uses of your information
• Withdraw consent for optional features
• Request portability of your data (where applicable)

To make a request, email: support@harleystathome.com
We will respond within the required legal timescales.

10. How We Keep Your Information Safe

We use a range of measures to protect your data, including:

• Secure hosting and encryption
• Role-based access controls
• Regular access reviews
• Two-factor authentication for staff accounts
• Admin-only visibility of the full member directory
• Monitoring of systems for suspicious activity
• Use of secure providers such as Google Workspace for internal documents and
• Zoom for live Health Care Professional events (not for patient involvement)

We regularly review our security arrangements.

11. Contact and Complaints

If you have any questions about this Privacy Notice or how we use your information:

Email: support@harleystathome.com

For data protection matters, you can contact:
nigel@nigeldenby.co.uk

You can raise concerns with the Information Commissioner’s Office (ICO) at any time. Website: https://ico.org.uk/make-a-complaint
Helpline: 0303 123 1113