Privacy Policy — Moore Than Arthritis

Moore Than Arthritis Ltd ("we", "us", "our") is a social enterprise and community platform supporting people living with arthritis across the UK. Our website is operated at moorethanarthritis.co.uk.

Registered company: Moore Than Arthritis Ltd — Company No. 17336617
VAT registration: VAT No. 524 6484 80
ICO registration: Moore Than Arthritis is registered with the Information Commissioner's Office as a data controller — ICO Registration No. ZC220376.

For data protection enquiries, contact us at [email protected].

We may collect the following personal data when you interact with our platform:

• Contact information — your name and email address when you register interest in a partnership or contact us directly.
• Community profile data — if you create an account, we store your name, email address, and any profile information you choose to provide (such as arthritis type and location).
• Purchase data — if you make a purchase or donation, payment is processed securely by Stripe. We do not store your card details. We may retain a record of the transaction amount and date.
• Usage data — we may collect anonymised analytics data (such as pages visited and time on site) to help us improve the platform.
• Cookie data — please see our Cookie Policy for full details.

We use your personal data for the following purposes:

• To respond to enquiries and partnership requests.
• To manage your community account and provide access to member features.
• To process donations and purchases securely via Stripe.
• To improve our website and understand how our community uses it.
• To comply with our legal obligations.

Under UK GDPR, we rely on the following legal bases:

• Consent — for non-essential cookies. You may withdraw consent at any time.
• Legitimate interests — for improving our platform and communicating with existing community members.
• Contractual necessity — for processing purchases and donations.
• Legal obligation — where required by law.

We do not sell your personal data. We may share it with trusted third-party service providers who help us operate the platform, including:

• Customer.io — for sending transactional emails (EU data region).
• Stripe — for secure payment processing.
• GoDaddy — for website hosting and infrastructure.

All third-party processors are contractually required to handle your data securely and only for the purposes we specify. We will not share your data with any other third party without your explicit consent, except where required by law.

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Account data is retained while your account is active and for a reasonable period thereafter. You may request deletion of your data at any time (see Your Rights below).

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data ("right to be forgotten").
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We use cookies to improve your experience on our website. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is handled exclusively by Stripe, which is PCI DSS compliant. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or by email. The "last updated" date at the top of this page reflects the most recent revision.

If you have concerns about how we handle your data, please contact us first at [email protected]. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). Moore Than Arthritis is registered as a data controller with the ICO under registration number ZC220376. You can contact the ICO at ico.org.uk or by calling their helpline on 0303 123 1113.