PRIVACY POLICY
1. INTRODUCTION
I am committed to protecting and respecting any personal information you share with me. This statement describes what types of information I collect from you, how it is used by me, how I share it with others, how you can manage the information I hold and how you can contact me.
2. WHAT DATA DO I COLLECT ABOUT YOU
Personal data means any information capable of identifying an individual. It does not include anonymised data. I may process the following categories of personal data about you:
a. Communication Data that includes any communication that you send to me whether that be through the contact form on my website, through email, text, social media messaging, social media posting or any other communication that you send me.
b. For people who apply for taster sessions, practice days and 8-week mindfulness courses I may collect more sensitive information about any health needs, G.P and /or emergency contact details.
c. Feedback forms from my courses and events.
. WHAT IS MY LAWFUL BASIS FOR COLLECTING AND PROCESSING PERSONAL DATA
a. South Coast Mindfulness has a legitimate interest in using the personal data and sensitive personal data I collect to ensure that the mindfulness courses/events are suitable for you.
b. I may also ask for information on how you found my service for my own marketing research.
c. I may add your details to my email mailing list to let you know of future courses/events and you have the right to opt-out of this at any time.
4. HOW I USE THIS INFORMATION AND FOR WHAT PURPOSES
a. To provide you information on 8-week mindfulness courses and/or other mindfulness events arranged by me if you have requested these.
b. To process payment for my services.
c. By using your feedback to assess the efficacy of what I offer and to make improvements to my services.
d. By adding your details to my database to let you know of my services and events but only with your consent.
e. I take your privacy seriously. I will only use your personal information to provide the services you have requested from me.
. HOW DO I SHARE THIS INFORMATION
a. I do not share any of your information with third parties except for in exceptional circumstances e.g.:
• With my Professional Indemnity Insurer or legal adviser in the event of a claim.
• If you request me to share information with other professionals involved in your care or your employer. I will only do so with your written consent.
• When disclosure is in the public interest, to prevent a miscarriage of justice, or where there is a legal duty, for example a Court Order.
• When the information concerns risk of harm to the client, or risk of harm to another adult or child. I will discuss such a proposed disclosure with you unless I believe that to do so could increase the level of risk to you or to someone else.
b. I will never sell your information or share it for marketing purposes.
. HOW LONG DO I KEEP YOUR INFORMATION FOR
a. I am required by my Professional Indemnity Insurer to retain records of anyone who has been on a mindfulness course or on a practice session run by me for 6 years from the completion of the course. This is part of my legal contract with you.
. DATA SECURITY
a. I have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed.
b. My laptop and phone are password protected.
c. I use a secure cloud-based data storage to store your data. It is password protected, its servers are based in the EU and it states that it is GDPR compliant.
d. My email provider state that they are GDPR compliant.
e. My website provider states that it is GDPR compliant.
f. Electronic registration forms and feedback forms are kept on a password protected cloud-based data storage system which states that it is GDPR compliant. Paper registration forms and feedback forms are kept in a locked filing cabinet.
8. YOUR LEGAL RIGHTS
Under data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing and to withdraw consent.
You can see more about these rights at: data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of the rights set out above, please email me: info@southcoastmindfulness.com
If you are not happy with any aspect of how I collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). I should be grateful if you would contact me first if you do have a complaint so that I can try to resolve it for you.
9. THIRD-PARTY LINKS
South Coast Mindfulness website may include links to third-party websites, plug-ins and applications.
Clicking on those links or enabling those connections may allow third parties to collect or share data about you. I do not control these third-party websites and am not responsible for their privacy statements. When you leave my website, I encourage you to read the privacy notice of every website you visit.