Privacy Notice

Diligram Limited · Last updated 1 August 2026

This notice explains how Diligram Limited collects and uses personal data when you visit diligram.com, contact us, or deal with us as a customer, supplier or prospective customer. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.

Two different roles. For this website and for our own business contacts, Diligram is the controller — we decide why and how the data is used, and this notice applies. When a hospital or other organisation deploys the MyStaff app, that organisation is the controller of its staff and operational data, and Diligram acts as its processor under a written data processing agreement. This notice does not govern that relationship; the customer's own privacy information does.

1. Who we are

Diligram Limited, registered in England & Wales, company number 12865051, VAT GB 440 512 730.
Registered office: 923 Finchley Road, London NW11 7PE, United Kingdom.

For any question about this notice or your personal data, contact info@diligram.com. We have not appointed a Data Protection Officer, as we are not required to; enquiries are handled by the company's directors.

2. What we collect

Contact and business data — name, job title, employer, business email address, business telephone number, and the content of your correspondence with us.
Website usage data — IP address, browser and device type, pages viewed, referring page, and time of visit.
Cookie data — see section 8.

We do not seek health data or other special category data through this website, and we ask that you do not send it to us by email.

3. Why we use it, and our lawful basis

Purpose	Lawful basis	Notes
Responding to enquiries and providing information you ask for	Legitimate interests	Our interest in answering people who contact us.
Contacting organisations that may have a professional need for MyStaff	Legitimate interests	Business-to-business contact with named professionals in their work capacity. You may object at any time and we will stop.
Providing and administering our services, and managing contracts	Performance of a contract	Or steps taken at your request before entering one.
Operating, securing and improving the website	Legitimate interests	Keeping the site available, safe and usable.
Meeting statutory obligations, including accounting and tax	Legal obligation
Non-essential cookies and analytics	Consent	Only where you have given it; you can withdraw it at any time.

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we have concluded that it is not for the limited business-contact processing described above.

4. Where we get your data

Most often from you directly. For business development we also use information that is publicly available or professionally published — for example an organisation's own website, a published directory, a professional network profile, or a public register. Where we hold data about you that did not come from you, this section is our notice to you under Article 14 of the UK GDPR, and you may ask us at any time what we hold and where it came from.

5. Who we share it with

We do not sell personal data. We share it only with service providers acting on our instructions, and with professional advisers or authorities where the law requires. Our principal providers are:

Microsoft — email and productivity (Microsoft 365).
Netlify — website hosting and delivery.
Weglot — website translation.

6. International transfers

Diligram Limited is a UK company operating within a Swiss-British group. Personal data may therefore be transferred to, or accessed from, Switzerland and the EEA, and by our providers from other countries.

Where data leaves the UK we rely on the UK Government's adequacy regulations for the country concerned — which cover Switzerland and the EEA — or, where no adequacy decision applies, on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.

7. How long we keep it

Data	Retention
Enquiries that do not become a business relationship	24 months from the last contact
Business development contacts	Reviewed every 24 months and deleted if no longer relevant
Customer, supplier and contract records	7 years after the relationship ends (statutory accounting periods)
Website and server logs	Up to 12 months

8. Cookies

We use cookies that are strictly necessary for the site to function, and, only with your consent, cookies that help us understand how the site is used. You can withdraw consent or block cookies through your browser at any time; strictly necessary cookies cannot be switched off without affecting the site.

9. Your rights

Under the UK GDPR you have the right to:

be told how your data is used, and to obtain a copy of it (access);
have inaccurate data corrected (rectification);
have data deleted where there is no good reason for us to keep it (erasure);
restrict how we use it while a concern is resolved;
receive data you gave us in a portable format;
object to processing based on legitimate interests, including any business development contact; and
withdraw consent at any time, where we rely on consent.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any right, email info@diligram.com. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

10. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113 · ico.org.uk/make-a-complaint

If you are in Switzerland or the EEA, you may instead complain to your local supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

11. Changes to this notice

We review this notice regularly and will publish any change on this page with a new date. Where a change materially affects how we use your data, we will tell you directly.

12. Contact

Diligram Limited, 923 Finchley Road, London NW11 7PE, United Kingdom · info@diligram.com · www.diligram.com