Last updated 10 July 2023
This Privacy Policy has been written for people attending Wilson’s Wellbeing Yoga Classes
Contents
The information collected
The use and retention of the information provided
Security - including third party providers
Your rights
Complaints
The information collected
Before you book your first class you will need to complete a Registration & Health Information Form. You are required to provide the following information:
Your email, name, post code, telephone number, age range, what you would like to achieve from the class, your yoga experience, emergency contact name, emergency contact number, health conditions (yes/no answers).Consent to use: your email address, your phone number, and that you will take responsibility for your own well-being when you practice yoga.
The optional information requested:
how you heard about the class and a free text box for additional health information.
When you book a class you will need to provide:
your name; email address and phone number.Payment is by credit/debit card.
The use and retention of information provided
The legal basis on which information is collected and stored is either because it is contractually necessary, or because it is of legitimate interest. That is to say the information is needed in relation to the service provided.
Information is only kept for as long as it is needed. The length of time depends on what it is being used for. If there is no longer a customer, legal or business need to hold the information, the information will be deleted. Records are reviewed annually, and if you have not attended a class for one year, and there is no reason to retain your information, your record will be deleted.
Security
All information is stored on password protected systems.
Customers provide information through four service providers
-
Wix – initial enquiries can be made via Wilson’s Wellbeing website.This is hosted by Wix.Wix’s privacy policy can be found here https://www.wix.com/about/privacy
-
Bookwhen – bookings are made using this online booking system.Bookwhen’s GDPR compliance can be found herehttps://bookwhen.com/about
-
Stripe – card payments are made using this encrypted payment provider Stripe’s privacy policy https://stripe.com/en-gb/privacy
-
Microsoft 365 – the Registration and Health form is completed using MS Forms.MS 365 GDPR compliance can be found on their website https://www.microsoft.com/en-gb/trust-center/privacy/gdpr-overview
Information is not shared with third parties. Information will only be disclosed to a third party if there is a legal requirement to do so, or as a duty of care such as a health emergency.
If any data breaches occur, the students affected will be informed, and action taken to address the breach.
Your rights
All your information will be processed lawfully, fairly and transparently, and only used for specific purposes.
You have a right to request a copy of your information. This is called a subject access request (SAR) and it will be provided free of charge within one month. You have a right to have any inaccuracies in your information corrected. Please email sara@sarawilson.co.uk for this information.
You are asked to give consent to receive communications, and you can withdraw your consent at any time.
Complaints
If you have a complaint concerning the way your information is managed, please email sara@sarawilson.co.uk with details of your complaint. You can also contact the Information Commissioner’s Office (ICO)