1 in 5 UK children have a probable mental health disorder. (NHS Digital, 2024)

82% of UK parents have shown signs of parental burnout. (Action for Children, 2024)

2 out of 3 parents take time off work due to children's mental health needs. (Nutfield Trust, 2024)

50% of mental health disorders are established by age 14. (Mental Health Foundation, 2024)

Nearly half of children referred to mental health services in the UK are under 13 years old. (Children's Commissioner Report, 2024)

lumin&us® App Privacy Policy

Sep 19, 2024 | Legal Documents

Last Updated: September 2024 

We are Beacon Services Resources CIC trading as lumin&us®, a community interest company incorporated in England and Wales with registered number 13239190 and with our registered office at The Community Hub, Farthing Lane, Sutton Coldfield B72 1RN and the creators of the “lumin&us®” App (referred to below as the ‘App’). 

This Privacy Policy may be updated from time to time – the “last updated” date is included at the top of the Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we may use and disclose your Personal Information. Any ‘material’ changes – those that affect the way your data is processed – will be notified to you directly. 

Contact details: 

Post: The Community Hub, Farthing Lane, Sutton Coldfield, B72 1RN 

Telephone: 0121 270 0590 

Email: resources@beaconservices.org.uk 

lumin&us® and your information  

 Beacon Services takes your privacy very seriously. We are registered with the Information Commissioner as a Data Controller and our registration information can be found by searching reference ZA582218 at  https://ico.org.uk/ESDWebPages/Search.  

If you have any questions or wish to make a request in relation to your information, please contact the Data Protection Officer at: info@beaconservices.org.uk 

The lumin&us® App collects information about you and your child’s thoughts, feelings and behaviours so it can recommend play therapy activities.    

When you create an account, our App collects, uses, stores and shares information about you with your consent. 

We adhere to the principles of data minimisation by collecting only the essential information necessary to deliver and enhance our services, ensuring that all data processing is relevant and limited to what is needed for the purposes for which it is processed. 

To ensure the effectiveness of our app in supporting children’s mental health through interactive play, it is necessary to process certain data. This data allows us to tailor the experience to each child’s specific needs, monitor engagement and progress, and ensure the safety and security of the app environment. Under GDPR, we are committed to handling this information responsibly and with the utmost care for privacy.  
 

However, opting out of all data processing would prevent the app from functioning as intended and delivering its therapeutic benefits. Therefore, while users can manage and limit some aspects of data processing, a complete opt-out is not possible without compromising the app’s ability to operate effectively and safely. 

How does lumin&us® collect my information? 

We will collect your information; 

  • From you when you register your account and add or amend your details. 

When you provide us with your initial account information, you are providing your explicit consent for the data to be processed by Beacon Services.   

  • Indirectly when we collect cookies or device information about your use of the lumin&us® 

lumin&us® App collects only the device or cookie information necessary to allow the system to run properly and ensure we can investigate any security issues. We can do this lawfully because these reasons form the ‘legitimate interests’ of a system provider. All user rights can be exercised and addressed within one month. 
 
The information we collect will be stored on computer and electronic systems. The information includes: 

Personal Data; 

  • basic details about you, such as name, date of birth, email, as well as: 

Sensitive Personal Data; 

  • where it is relevant to your support, and you have provided it;  
  • information, such as your own or your child’s diagnosis, if you choose to provide it; 
  • notes about your child’s emotional wellbeing that you choose to track within the App. 

How does lumin&us® use my information?  

 We will use your information in the following ways; 

  • You (parent/caregiver) will add you and your child (ren)s personal data to the system as a new user 
  • The data entered is (starred are mandatory); 
  • Name*  
  • Date of Birth* 
  • Contact Details* 
  • Relationship to child / adult users of the App 
  • Ethnic Origin  
  • Gender 
  • Details about child behaviour / wellbeing  
  • Details about the day-to-day experience of parenting your child 
  • Information about neurodivergence 
  • Details about your wellbeing as a parent / caregiver  
  • Marketing preferences 
  • You must take reasonable steps in the circumstances to ensure the accuracy of Health Information you upload to the system.  
  • The data is displayed by the software online, but it is stored and kept in the UK by Amazon Web Services (AWS).  

The system allows downloading and printing of a report you can share with other providers of support.    

Records are kept in the system until your child’s 25th birthday – this is because the NHSX Record Management Code of Practice recommends it. 

Who does lumin&us® share my information with?  

Beacon Services works hard to ensure that only the right people have your information and that they are only given the information they need. Beacon Services uses other companies to help us deliver some of our services such as; 

 
AWS  provide the storage space for your data and are based in the UK.  User data is encrypted when transferred between the device and AWS storage. o2h Technology provide maintenance of the app.  
 

We have contracts in place with these organisations that prevent them from using your information in any other way that how we tell them to. These contracts also require them to maintain good standards of security to ensure your confidentiality. 

Will lumin&us® share data without asking me? 

Sometimes we will be required by law to share your information and will not always be able to discuss this with you directly.  
 
Examples might be; 

  • Sharing with the police or tax authorities for the detection or prevention of crime 
  • Where it is in the wider public interest – to keep the public safe, for example 
  • To safeguard children or vulnerable adults 
  • Because the court has told us we must share. 

What are my Information Rights?   

Data protection law provides you with several rights that Beacon Services is committed to supporting you with; 

Right to Access 

You have the right to obtain: 

  • confirmation that your information is being used, stored or shared by Beacon Services 
  • a copy of information held about you 

If you only require a particular part of your record, tell us and this can reduce the time it takes to provide it We will respond to your request within one month of receipt or will tell you when it might take longer. 

We are required to validate your identity including the identity of someone making a request on your behalf. 

Right to Object or Withdraw Consent  

We collect, use, store and share your information because we are permitted to by law in order to deliver your support, but you do have a right to object to us doing this. 
 
When we collect, use, store or share your information based on your consent, you have a right to withdraw that consent at any time. We will notify users and re-obtain consent from individuals when necessary. 

Our Data Protection Officer will be happy to speak with you about any concerns you have. 

Right to Correction 

If information about you is incorrect, you are entitled to request that we correct it. 

There may be occasions, where we are required by law to maintain the original information – our Data Protection Officer will talk to you about this, and you may request that the information is not used during this time 

We will respond to your request within one month of receipt or will tell you when it might take longer. 

Right to Portability 

You can ask us to send your information to another organisation on your behalf if you wish. 

Does lumin&us® use profiling or automated decision making? 

No. Beacon Services does not undertake automatic profiling or automated decision making in relation to your information. Our Data Protection Officer will be happy to speak to you about this if you have concerns or objections. 

Complaints 

You also have the right to make complaints and request investigations into the way your information is used. Please contact our Data Protection Officer or visit the link below for more information. 

For more detailed information on your rights visit https://ico.org.uk/for-the-public/

How Does lumin&us® protect my information? 

Beacon Services are committed to ensuring the security and confidentiality of your information. There are several ways we do this: 

  • Staff receive regular training about protecting and using personal data 
  • Policies are in place for staff to follow and are regularly reviewed 
  • We check that only the minimum amount of data is shared or accessed 
  • We use controlled access to systems; this helps to ensure that the right people are accessing data – people with a ‘need to know’ 
  • We use encrypted emails and storage which would make it difficult for someone to ‘intercept’ your information 
  • We report and manage incidents to make sure we learn from them and improve 
  • We put in place contracts that require providers and suppliers to protect your data as well 

If you become aware of a child accessing our app and providing personal data without parental consent, please report this immediately to our dedicated support team at resources@beaconservices.org.uk.  

We take the privacy and safety of our users seriously and will take prompt action to address any unauthorised access and data provision in accordance with our child safety protocols and applicable laws.  

How long does lumin&us® store my information? 

Patient records are kept in the system until your child is 25 years old – this is because the NHSX Record Management Code of Practice recommends it. 

However, if you withdraw your consent to having an account, we will delete your account details. Please be aware that any information you have shared with any other healthcare or support provider may have already been added to their record. All user data will be removed from the servers and the account upon withdrawing user consent.