How we use your data
We take your privacy — and your child’s privacy — seriously.
This page gives you a clear, straightforward overview of what data we use, why we use it, and how we keep it safe when you use Pop-able.
If you’d prefer the full legal detail, you can read our full privacy notice at the end of this page.
What Pop-able does
Pop-able is a digital platform designed to help children and young people feel more comfortable and informed when going through healthcare experiences. It includes:
- a mobile app for children and young people
- a parent or guardian portal
- a platform for clinicians and healthcare teams
Who’s responsible for your data
The healthcare organisation that invited you to use Pop-able (for example, your hospital or clinic) is responsible for your data. They decide how and why it is used.
Corporation Pop provides the technology behind Pop-able. We process data on behalf of the healthcare organisation and only act on their instructions.
We do not access or view personal data in the app unless we are asked to do so by the healthcare organisation.
What data we collect
We keep data collection to a minimum.
We only collect what’s needed to make the platform work:
- Parents and guardians: your email address, so we can set up and manage the account
- Children and young people: a first name to create the account. We also store user-generated content such as chatbot questions and questionnair responses when requested to do so by the healthcare organisation.
- Clinical staff and administrators: basic account information so they can use and manage the system
We do not ask for or store medical data such as medical records, diagnoses, or clinical notes
Sometimes, children may write free text (for example when asking a question) that mentions other people. This isn’t something we actively collect — it’s just a natural part of how people communicate.
Analytics and technical data
Pop-able is built using a platform called Unity.
Unity may collect technical information such as device type, IP address, or usage data. This helps us understand how the app is used and improve it over time.
- This data is anonymised and grouped together
- Corporation Pop cannot see individual-level data
Why we’re allowed to use your data
The healthcare organisation uses your data based on consent.
By accepting the invitation to use Pop-able, you’re agreeing to how your (and your child’s) data is used within the platform.
For children under 13, a parent or guardian must provide that consent.
How we keep your data safe
We take data security seriously.
We use a combination of technical and organisational measures to protect personal data, including:
- access controls
- encryption where appropriate
- secure systems and processes
We also have a data retention policy to make sure information isn’t kept for longer than necessary.
How long we keep data
Personal data is kept for up to one month after the account is closed by the healthcare organisation.
After that:
- data is deleted from our systems
- anything entered on the device stays only on that device and is not shared
- deleting the app will remove that local data
If you contact us directly, we may keep your email as part of our records so we can respond and maintain a history of correspondence.
Your rights
You have rights over your data, including the right to:
- access it
- correct it
- delete it
- restrict how it's used
- object to how it's used
- object to how it's usedwithdraw consent at any time
To exercise any of these rights, contact us using the details below. We’ll respond within one month.
Questions or concerns
If you have any questions about how your data is handled, you can contact:
Privacy Lead
info@corporationpop.co.uk
0161 838 0808
If you’re not happy with how your data has been handled, you also have the right to contact the Information Commissioner’s Office (ICO).
Want the full detail?
If you’d like to read the full version of our privacy notice, including all legal and technical detail: