1.1 We are committed to safeguarding the privacy of our clients, website visitors and service users.
1.2 This policy applies where we are acting as a data controller with respect to the personal data of our website visitors, service users and client forms (paper forms completed in person on site); in other words, where we determine the purposes and means of the processing of that personal data.
1.3 In this policy, “we”, “my, “us” and “our” refer to The Centre for Wellbeing.
How we use your personal data
2.1 We may process your account data (“account data“). The account data may include your name, email address, telephone number and postal address.
2.2 We may process information contained in any enquiry you submit to us regarding goods and/or services (“enquiry data“). The enquiry data may be processed for the purposes of offering, marketing and selling relevant goods and/or services to you.
2.3 We may process information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website (“transaction data“). The transaction data may include your contact details, your payment card details and the transaction details. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions.
2.4 We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters (“notification data“). The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters, the purposes of offering, marketing and selling relevant goods and/or services to you.
2.5 We may process information contained in or relating to any communication that you send to us (“correspondence data“). The correspondence data may be processed for the purposes of communicating with you, record-keeping and, the purposes of offering, marketing and selling relevant goods and/or services to you.
2.6 We may at times require to process your information within our publications. Publications such as books, resources and supporting materials to mindful workshops or events. The publication data will require your consent prior to your data being included in any such publication.
Providing your personal data to others
4.1 We will not disclose your personal data to any other companies without the data holders consent. All data will remain private and confidential.
4.2 Financial transactions relating to our website and services may be handled by our payment services providers; Paypal, Stripe or Woo Commerce. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
4.3 We may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Retaining and deleting personal data
5.1 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
5.2 We will determine the period of data retention of enquiry data, notification data and correspondence data, based on the period between consent being given and consent being withdrawn. If consent is withdrawn then enquiry data, notification data and correspondence data will be deleted.
5.3 We may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another natural person.
5.4 All electronic data will securely be stored on an encrypted server.
5.5 All paper data will be securely stored in locked and secure unit at our premises.
6.1 We may update this policy from time to time and will notify you of any changes made by email.
7.1 In this Section 7, we have summarised the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
7.2 Your principal rights under data protection law are: access, rectification, removal, restrict or object to processing, the right to complain to an authority and consent to withdraw.
8.1 Our registered office is at: 39 London Road, Sawbridgeworth, Hertfordshire CM21 9JH,
8.2 You can contact us by email, firstname.lastname@example.org
Data protection officer
9.1 Our data protection officer’s contact details are: Claire Evans, 39 London Road, Sawbridgeworth, Hertfordshire CM21 9JH,