Privacy Policy

Who we are

MIPACE Ltd, trading as MIPACE, is responsible for the personal information described in this policy. MIPACE is an information-access platform that lets people create and control profiles and connect them to MIPACE devices.

MIPACE Ltd

Information we collect

• Account and contact details, including your name, email address and sign-in information.
• Profile information you choose to add, including emergency, support, accessibility, communication, medical or neurodiversity information.
• Information for child or dependant profiles where a parent, guardian or authorised adult manages the profile.
• Device, activation, order, delivery and payment-status information. Payment providers process full card details; MIPACE does not need to store them.
• Organisation relationships, permissions and assignment records.
• Messages, support enquiries, privacy requests and security reports.
• Technical, access and security information such as browser, device, IP address, timestamps and audit records.

How and why we use information

We use personal information to provide accounts and profiles, assign and activate devices, fulfil orders, provide support, protect the platform, prevent misuse, meet legal duties and improve MIPACE.

Our lawful bases may include performing a contract, complying with a legal obligation, pursuing legitimate interests and consent. Where profile content includes health or other special category information, we rely on an appropriate condition under data-protection law, normally the explicit choice and consent of the person or authorised profile manager who adds and shares it.

Profile visibility and sharing

MIPACE is not a public directory. A profile manager controls what is visible and which profile a device opens. Someone with physical access to an activated device may be able to view the information made visible through it. Dynamic access links may expire, but recipients could still record information they were permitted to see.

We may use carefully selected service providers for hosting, email, payments, fulfilment, analytics and support. We may also disclose information where required by law or needed to protect people, rights or the service. Organisations do not own an individual’s profile information merely because they provide or assign a device.

Storage, transfers and retention

We keep information only for as long as it is needed for the purpose collected, platform security, dispute handling and legal or accounting requirements. Retention periods vary by record. Where a supplier processes information outside the UK, we use an appropriate legal safeguard.

Your data rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or an objection to processing. You can also withdraw consent where consent is the basis used. Some rights have lawful exceptions.

Send a request to support@mipace.co.uk. You may also complain to the Information Commissioner’s Office.

Children, security and concerns

A child or dependant profile should be created and managed only by someone entitled to do so. Profile managers should use accurate, proportionate information and review it regularly.

We use technical and organisational safeguards, but no online service can guarantee absolute security. If you believe personal information or the platform may have been compromised, use the report a concern form promptly.