Privacy Notice
This Privacy Notice gives you information about how Joy collects and uses your personal data through your use of our app and when you communicate with us in any way, including any data you may provide when you sign up and use our services. This policy is designed to be simple, and clear to understand without the usual jargon included – within the document you will find out what information we collect, how we use it and what your rights and choices are relating to your personal data, this privacy policy is written in line with the EU GDPR and UK DPA 2018.
Who we are and how to contact us
Joy is the controller and responsible for your personal data (collectively referred to as Joy, "we", "us" or "our" in this Privacy Notice). Pungo Ltd is a company registered in England and Wales with company number 11914576 with its registered office at 25 Horsell Road, London, England, N5 1XL.
If you would like to contact us about anything in this Privacy Notice, or if you have any questions about how we use your information or if you would like to exercise any of your data subject rights, please contact us here: dataprotection@explorejoy.co.uk
The types of personal data we collect
Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data includes: full name, date of birth, GP surgery and NHS number.
- Contact Data includes: address, email address and telephone number.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
- Profile Data includes your username and password, your preferences, feedback and survey responses.
- Usage Data includes information about how you interact with and use our website, products and services.
- Health Data includes: any data about your health that you share with us when you express interest in, sign up for, and/or use our services.
Joy as a Data Controller
We collect information in a variety of ways including information that you provide to us or that is automatically collected during your interaction with the Services. When we collect your personal information for this, we must tell you the types of personal information that are collected, our reason (purpose) for our collection and processing of that information, and the legal basis/ bases that we rely on for such collection and processing to occur.
Cookies and website analytics
When you first visit this website we ask whether you accept analytics cookies. No analytics or tracking scripts run unless you choose to accept. If you accept, we use two services to understand how visitors use the site:
- Microsoft Clarity helps us see how pages are used (for example, which sections visitors scroll to) so we can improve the site.
- HubSpot helps us understand which pages are visited and, if you submit one of our resource request forms, connects your visit to the details you provide so we can follow up appropriately.
If you decline, neither service loads and no analytics cookies are set. You can change your mind at any time by clearing this site's data in your browser, which will show the choice again on your next visit.
Separately from cookies, our own server keeps a first-party record of pages viewed on this site. This record stores nothing on your device and never stores your IP address: we keep only a shortened, irreversible code derived from it, together with the organisation-level network it belongs to (for example, an NHS network). We use this to understand which organisations are interested in Joy. It identifies networks, not people.
Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.