Privacy Policy

Mayden House Limited trading as Mayden (We or Us) is committed to protecting and respecting your privacy.

This Policy explains when and why We collect personal information about individuals who visit our website, how We use it, the conditions under which We may disclose it to others and how We keep it secure. It applies to information We collect about visitors to our websites, surveys and job applications.

We may change this Policy from time to time so please check occasionally to ensure that you are happy with any changes. By using our website, you are agreeing to be bound by this Policy and our Terms and Conditions.

Any questions regarding this Policy and our privacy practices should be sent by email to or by writing to the Data Protection Officer, Mayden, 1 Widcombe Crescent, Bath, BA2 6AH.

Who are we

Mayden provides end-to-end managed web applications and bespoke system development to the healthcare sector. We specialise in innovative, flexible and cloud-based software solutions. The registered address is 1 Widcombe Crescent, Bath, BA2 6AH.

We are registered with the Information Commissioner’s Office as a data controller under registration number Z5351045.

The legal basis for our use of your personal data will be for the legitimate interests of administering and managing the Orbit website.

Information you provide

This Privacy Policy sets out the basis on which any personal information that We collect from you, or that you provide to Us, will be processed by Us. Some of this information will be personal data, which is specifically protected under Data Protection Legislation.

To the extent that you supply Us with personal data about third parties (for example, your employer) you are confirming that you are entitled and authorised to disclose such data to Us and that We are entitled to use such information in the same way that we use information about you as described in this Privacy Policy.

We may send and store data about you to a destination outside the European Economic Area (“EEA”) which may be processed by staff operating outside the EEA who work for Us or for one of our suppliers (third parties). We will ensure that the appropriate due diligence and safeguards are in place with the relevant third parties to protect your data in accordance with applicable laws.

For clarity no data entered into the Orbit system in the UK is stored outside of England. All Orbit system content is stored in data centres located in England.

By accessing and browsing our website, you confirm that you accept and give your consent to the processing of your personal data as described in this Policy.

You are advised to read this Policy carefully before using our website.

Personal information Mayden collects from you

There are a number of ways in which you may explicitly and intentionally provide Mayden with consent to the collection of certain personal information.

We will only collect and process data about you in the following circumstances:

  1. When you fill in our ‘contact us’ form to request information about our products and services We will require your name, telephone number and email address.
  2. When you complete surveys on this site, We will require your email address.
  3. When you register on this site to sign up to our newsletters We will require your email address, name, job title and organisation name.
  4. When you contact Us to make requests or report faults. We may keep a record of our correspondence.
  5. Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data.
  6. We may collect information about your computer, including where available, your IP address, operating system and browser type. This is statistical data about our users’ browsing actions and patterns and is collected for system administration purposes and is not personalised to you. This is carried out using Google Analytics.

The anonymous information generated by Google Analytics cookies about your use of this website is transmitted to Google. This statistical information is processed to compile statistical reports on website activity for this site. This information helps us to optimise our content to better meet the needs of our customers.

We confirm that We do not provide, sell or otherwise disclose personal information We hold about you to third parties without your express permission or where we are under duty to do so by applicable law.

Your choices

You have a choice about whether or not you wish to receive information from Us. If you do not want to receive direct marketing communications from Us about our products and services, then you can select your choices by ticking the relevant boxes situated on the form on which We collect your information. If you wish to stop receiving marketing communications from Us by email you have the option to unsubscribe at any time.

We will not contact you for marketing purposes by email, phone or text message unless you have given your prior explicit consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us by email: or telephone 01249 701100.

Your rights

Under Data Protection Legislation, you have the rights as an individual which you can exercise in relation to the information We hold about you.

You have a right to access and obtain a copy of the personal data that We hold about you and to ask Us to correct your personal data if there are any errors or it is out of date. In some circumstances you may also have a right to ask Us to restrict the processing of your personal data until any errors are corrected. You have the right to object to the processing of your data where the organisation is relying on legitimate interests as the legal ground for processing, and you have the right to have your personal data erased which is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances. You can obtain further information about these rights from the Information Commissioner’s Office at: or via their telephone helpline (0303 123 1113).

If you would like to exercise any of these rights you can do this by sending an email message to or by writing to Us at 1 Widcombe Crescent, Bath, BA2 6AH.

You have the right to lodge a complaint if you believe that We have not complied with your data protection rights. You can complain to the Information Commissioner’s office through their website or via their telephone helpline.

How you can access and update your personal information

The accuracy of your information is important to Us. Mayden complies with all applicable regulation when giving people access to their personal information. You can find out if We hold any personal information by making a ‘subject access request’ under Data Protection Legislation. If We do hold information about you, We will;

  • give you a description of it;
  • tell you why we are holding it;
  • tell you who it could be disclosed to; and
  • let you have a copy of the information in an intelligible form.

If you would like to access any of the information We hold about you or have any concerns regarding the way We have processed your information then please email

If We do hold information about you, you can ask Us to correct any mistakes by, once again, contacting Us on the email above.


We are committed to ensuring that your information is secure. We have a number of security measures in place to protect against the loss, misuse and alteration of any personal information We receive from you via this website.

We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this policy. For example, our website uses an encrypted connection to make it difficult for unauthorised people to view information travelling between our server and your device.

Unfortunately, the transmission of information via the internet can never be guaranteed to be 100% secure. As a result, while We strive to protect your personal information, We cannot guarantee the security of any information you transmit to Us, and you do so at your own risk. Once We receive information, We make our best effort to ensure its security on our systems. Once We have received your information, We will use strict internal procedures and security measures to try to prevent unauthorised access.

We have ISO27001:2013 and our Information security policies and procedures are subject to regular external assessments by a UKAS accredited certification company.

How do we use cookies?

The Orbit website uses ‘cookies’ to help you personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you. They collect statistical data about your browsing actions and patterns and do not identify you as an individual.

One of the primary purposes of cookies is to provide a convenience feature to save you time. The purpose of a cookie is to tell the Web server that you have returned to a specific page. For example, if you personalize Mayden pages, or register with the Mayden site or services, a cookie helps us to recall your specific information on subsequent visits. This helps Us to improve our website and deliver a better more personalised service.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.

The below list details the cookies used in our website.

__cf_bm30 minutesThis cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
_ga2 yearsThe _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.
_gat1 minuteThis cookie is installed by Google Universal Analytics to restrain request rate and thus limit the collection of data on high traffic sites.
_gat_UA-37505502-11 minuteA variation of the _gat cookie set by Google Analytics and Google Tag Manager to allow website owners to track visitor behaviour and measure site performance. The pattern element in the name contains the unique identity number of the account or website it relates to.
_gcl_au3 monthsProvided by Google Tag Manager to experiment advertisement efficiency of websites using their services.
_gid1 dayInstalled by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously.
_hjAbsoluteSessionInProgress30 minutesHotjar sets this cookie to detect the first pageview session of a user. This is a True/False flag set by the cookie.
_hjFirstSeen30 minutesHotjar sets this cookie to identify a new user’s first session. It stores a true/false value, indicating whether it was the first time Hotjar saw this user.
_hjIncludedInPageviewSample2 minutesHotjar sets this cookie to know whether a user is included in the data sampling defined by the site's pageview limit.
_hjIncludedInSessionSample2 minutesHotjar sets this cookie to know whether a user is included in the data sampling defined by the site's daily session limit.
_hjSession_132220330 minutesNo description
_hjSessionUser_13222031 yearNo description
AnalyticsSyncHistory1 monthNo description
bcookie2 yearsLinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID.
bscookie2 yearsLinkedIn sets this cookie to store performed actions on the website.
cookielawinfo-checkbox-advertisement1 yearSet by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category .
cookielawinfo-checkbox-analytics1 yearSet by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Analytics" category .
cookielawinfo-checkbox-functional1 yearThe cookie is set by the GDPR Cookie Consent plugin to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary1 yearSet by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Necessary" category .
cookielawinfo-checkbox-others1 yearSet by the GDPR Cookie Consent plugin, this cookie is used to store the user consent for cookies in the category "Others".
cookielawinfo-checkbox-performance1 yearSet by the GDPR Cookie Consent plugin, this cookie is used to store the user consent for cookies in the category "Performance".
CookieLawInfoConsent1 yearRecords the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie.
fullCSS7 daysNo description
langsessionLinkedIn sets this cookie to remember a user's language setting.
li_gc2 yearsNo description
lidc1 dayLinkedIn sets the lidc cookie to facilitate data center selection.
test_cookie15 minutesThe test_cookie is set by and is used to determine if the user's browser supports cookies.
UserMatchHistory1 monthLinkedIn sets this cookie for LinkedIn Ads ID syncing.
vuid2 yearsVimeo installs this cookie to collect tracking information by setting a unique ID to embed videos to the website.

Links to other websites

Our website may contain links to other websites run by other organisations. This privacy policy applies only to our website, so We encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition if you linked to our website from a third-party site, We cannot be responsible for the privacy policies of the owners and operators of the third-party site and recommend that you check the policy of that third party site.


We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy. We may notify you of changes to this policy.