Data Protection & Security

Our approach

MIPACE is designed around data minimisation, user control and controlled access. People decide what information to add to their profiles and what is useful to make available through a connected MIPACE device. Security controls are layered across accounts, profile access, media, infrastructure and administration.

Account and administrator security

• Password-based account authentication and additional verification for supported sign-ins.
• Dedicated TOTP authenticator protection and recovery codes for WordPress administrators.
• Threat monitoring, rate limiting and controls designed to reduce automated abuse and user enumeration.
• Role and capability restrictions so different account types receive only the functions intended for them.

Profile access and session controls

MIPACE profiles are not presented as a searchable public directory. Activated devices open the profile assigned by the account holder. Standard profile access uses a 30-minute session timeout; child-profile access uses a shorter 15-minute timeout.

A profile is intentionally useful only if a helper can read the information the profile manager has chosen to share. Security therefore focuses on preventing unintended access while preserving the controlled access that makes the service useful.

Children and young people

Child profiles receive additional safeguards including first-name-only identification by design, parent or guardian management and shorter profile sessions. Organisations cannot independently create personal or medical profiles for children. Read our Children & Young People’s Privacy notice.

Profile images and protected media

Profile images and sensitive profile assets are handled separately from ordinary public website content and are subject to access controls intended to prevent them being treated as generally browsable WordPress media.

Administrative access

MIPACE is designed so routine administration does not require staff to browse users’ complete personal or medical profiles. Administrative interfaces, roles and operational tools are separated from the public profile experience and access is restricted according to operational need.

Location Assist security

Location Assist is optional. The account holder configures verified contacts, and a helper must actively choose to share the location of their own device. The browser requests location permission at the time. MIPACE does not use Location Assist as continuous background tracking.

Organisation separation

Organisation functionality is separated from personal-profile ownership. Organisations may manage their own operational relationships, people and devices according to their permissions, but they do not gain ownership of an individual’s personal or medical profile simply because a device is provided or assigned through an organisation.

Infrastructure and service providers

MIPACE uses established providers for services such as hosting, content delivery and security, email, payments and translation. We review the data each provider needs, contractual data-protection terms, processing locations and appropriate safeguards. Cloudflare forms part of the website security and traffic-protection layer.

Retention and deletion

We aim to keep personal information only for as long as it is needed for the purpose for which it was collected, to provide the service, meet legal requirements, resolve disputes or protect the platform. Account, profile and device controls allow information to be corrected, removed or unlinked, while some transaction, security or backup records may need to be retained for a defined period.

Security incidents and reporting

We maintain processes to identify, investigate and respond to security and personal-data incidents. Where a personal-data breach meets the legal reporting threshold, we will notify the Information Commissioner’s Office within the required period and notify affected people where the law requires it.

Assurance and independent verification

We maintain internal data-protection and security documentation, including risk assessment and evidence of technical controls. Independent schemes such as Cyber Essentials can provide additional assurance of defined cyber-security controls, but certification does not replace our continuing obligations under data-protection law.

Report a privacy or security concern

If you believe information has been exposed incorrectly, a device has been lost or misused, or you have another privacy or security concern, contact [email protected] as soon as possible.