28.09.2026
We’re a Disability Confident employer
Mirus has achieved Disability Confident Committed status, recognising our commitment to creating an inclusive workplace where disability is not a barrier to employment or career development.
At mirus, we’re committed to protecting and respecting your privacy.
This Policy provides information about the use of personal information while you are using our internet site “website”.
We may change this Policy from time to time so please check this page occasionally to ensure that you’re happy with any changes.
Any questions regarding this Policy and our privacy practices should be sent by email to GDPR@mirus-wales.org.uk alternatively, you can telephone 02920 236216 and speak to delegated data protection officer lead for IT.
Who we are
We are a not-for-profit charity providing specialist support to children and adults of all ages with disabilities, autism, physical disabilities, dementia, mental health, complex health and complex need associated with behaviours that challenge.
- Mirus-Wales is a registered charity (no. 517149) and company limited by guarantee (no. 1966665).
- Our registered address is Unit 5, Cleeve House, Lambourne Crescent, Llanishen, Cardiff CF14 5GP.
- mirus is registered with the Care Inspectorate Wales
- mirus runs respite care homes, supports over 150 people in their own homes and more than 100 people within the community.
Aims of this notice
mirus is required by law to tell you about your rights and our obligations regarding our collecting and processing any of your personal information, which you might provide to us. We have a range of policies and procedures to ensure that any personal information you supply is only with your active consent and will always be held securely and treated confidentially in line with the applicable regulations.
What is ‘personal information’?
‘Personal information’ means any information which relates to or identifies you as an individual
How we collect and use the information about you?
We collect information about you when you browse through our website through cookies and google analytics.
We also collect information when you voluntarily complete surveys or poll and provide feedback. Website usage information is collected using cookies.
Use of Cookies
Like many other websites, the mirus website uses cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit.
They collect statistical data about your browsing actions and patterns and do not identify you as an individual. This helps us to improve our website and deliver a better more personalised service.
We will not use cookies to collect personal data about you.
However, if you wish to restrict or block the cookies which are set by our websites, or indeed any other website, you can do this through your browser settings.
The ‘Help’ function within your browser should tell you how. Alternatively, you may wish to visit www.aboutcookies.org which contains comprehensive information on how to do this on a wide variety of browsers. You will also find details on how to delete cookies from your machine as well as more general information about cookies.
Please be aware that restricting cookies may impact on the functionality of our website
Google Analytics
We may collect information about your computer, including where available your IP address, operating system and browser type and for system administration. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.
For the same reason, we may obtain information about your visit to our site, which pages you used etc.
Full details on the cookies set by Google Analytics are published on the Google website. Google also publishes a browser add-on to allow you to choose that information about your website visit is not sent to Google Analytics.
Plug Ins or Embedded Media
On number of pages we use ‘plug ins’ or embedded media; for example, we might embed YouTube videos on some pages or use plugins to gather information through polls of surveys.
The suppliers of these services may also set cookies on your device when you visit the pages where we have used this type of content.
These are known as ‘third-party’ cookies. To opt-out of third-parties collecting any data regarding your interaction on our website, please refer to their websites for further information.
How can I access my personal information?
You have the right to access the personal information that is held about you by mirus.
You also have the right to ask us to correct any inaccurate personal information we hold about you, to delete personal information, or otherwise restrict our processing, or to object to processing or to receive an electronic copy of the personal information you provided to us.
Who can I contact?
If you have any questions about how your personal information is used, or wish to exercise any of your rights, please consult GDPR@mirus-wales.org.uk.
How long we keep information
There are strict protocols in place that determine how long mirus will keep the information, which are in line with the relevant contracts, legislation and regulations.
How we keep your information safe
mirus has a range of policies that enable us to comply with all data protection requirements. Foremost are:
- Data Protection Policy
- Password Policy
- Data Retention and Destruction Policy
- IT Security Policy
- IT Acceptable Usage Policy
- Reporting a Security Breach
- Confidentiality Policy
- Social Media Policy
- Bring Your Own Device Policy
mirus is also accredited with Cyber Essentials Plus.
How do I complain?
If you are not happy with the way your information is being handled, or with the response received from us, you should follow our Complaints Policy. If you are still not happy them you can contact the Information Commissioner’s Office. (https://ico.org.uk/).
How we keep our privacy policies up to date
The staff appointed to control and process personal information in mirus are delegated to assess all privacy risks continuously and to carry out comprehensive reviews of our data protection policies, procedures and protocols at least annually.
We keep this Policy under regular review.
This Policy was last updated in May 2018.
