Privacy policy.
Lauri Williams Yoga is committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Looking after the personal information you share with me is very important. I want you to be confident that your personal data is kept safely and securely, and to understand how I use it to offer you a better and more personalised experience.
Should you have any questions about this policy please contact me at lauriwilliamsyoga@gmail.com.
What is personal data?
Personal data means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to me as part of your engagement with me as a yoga teacher. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the GDPR.
When do I collect your personal data?
When you contact me, including but not limited to via email, telephone call, text message/WhatsApp, or a contact form
When you fill in pre-class registration materials, either online or in hard copy
When you engage with me on social media
When you purchase a booking with me
When you attend a booking with me
When you choose to complete any feedback requests or surveys I send you
When you enter prize draws or competitions
When you attend a booking with me at spaces that have CCTV systems operated for the security of both customers and partners. These systems may record your image during your visit
What data do I collect and how do I use it?
In order to teach yoga safely, I may collect some or all of the following personal and non-personal data:
Name
Contact details
Dates and types of session bookings
Potentially sensitive information about your health, including current and past medical and injury history
Your baby’s date of birth, if you are attending postnatal teaching with me
I will only use this information to inform the teaching that I offer you, and to handle bookings. I may also share news, special offers and promotions if you have chosen to opt in to these communications, from which you may unsubscribe at any time.
I am only permitted to collect and use your personal data only where I have a proper reason to do so. The law says I must have one or more of these reasons:
Contract – your personal information is processed in order to fulfil a contractual arrangement e.g. to book a class
Consent – where you agree to me using your information in this way e.g. for receiving updates on a class
Legitimate Interests – this means the interests of Lauri Williams Yoga in managing my business to allow me to provide you with the best service in the most secure and appropriate way
Legal Obligation – where there is statutory or other legal requirement to share the information e.g. when I have to share your information for law enforcement purposes.
Third party services and how we share your data
I may contract with third parties to supply services to you on my behalf. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, I will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, my obligations, and the obligations of the third party under the law. In certain circumstances, I may be legally required to share certain data held by me, which may include your personal data, for example, where I am involved in legal proceedings, where I am complying with legal requirements, a court order, or a governmental authority.
I use the following third-party data processors who are based outside the EU, but who are protected by the Privacy Shield, which allows them to store EU data on US soil with the GDPR.
Google, California USA – I use Google as my email provider. I may compile statistics about the use of my website using Google Analytics including data on traffic, usage patterns, user numbers and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. I may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.
Where do I store your data?
Your data will be stored in the UK, with the exception of data stored by third-party data processors who are based outside the UK (see previous section).
How long do I keep your information?
If I collect your personal information, the length of time I retain it is determined by a number of factors, including the purpose for which I use that information and my obligations under other laws.
I may need your personal information to establish, bring or defend legal claims. For this purpose, I will always retain your personal information for 7 years after the date it is no longer needed by me for any of the purposes listed under ‘What data do I collect and how do I use it’. Exceptions to this may include:
The law requires me to hold your personal information for a longer period, or delete it sooner
You exercise your right to have the information erased (where it applies) and I do not need to hold it in connection with any of the reasons permitted or required under the law
I bring or defend a legal claim or other proceedings during the period I retain your personal information, in which case I will retain your personal information until those proceedings have concluded and no further appeals are possible
In limited cases, existing or future law or a court or regulator requires me to keep your personal information for a longer or shorter period.
Your rights
You have the following rights under the GDPR, which this Policy and my use of personal data have been designed to uphold:
Right to access – You have the right to request information about the personal data I hold about you at any time
Right to portability – Whenever I process your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to me
Right to rectification – You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed
Right to erasure – You have the right to erase any personal data processed by me at any time except for the following situations:
You have an unresolved complaints process ongoing
You have an unsettled debt with me, regardless of the payment method
You have misused or are suspected to have misused my services within the last four years
Your debt has been sold to a third party within the last three years, or one year for deceased customers
If you have made any purchase, I will keep your personal data in connection to your transaction for book-keeping purposes
I bring or defend a legal claim or other proceedings during the period I retain your personal information, in which case I will retain your personal information until those proceedings have concluded and no further appeals are possible
In limited cases, existing or future law or a court or regulator requires me to keep your personal information for a longer or shorter period.
Your right to object to processing based on legitimate interest
You have the right to object to processing of your personal data that is based on my legitimate interest. We will not continue to process the personal data unless we can demonstrate legitimate grounds for the process which overrides your interest and rights or due to legal claims.
If you have any cause for complaint about my use of your personal data, please contact me at lauriwilliamsyoga@gmail.com in the first instance in order that I can investigate thoroughly.
For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.
My use of cookies
Cookies are small encrypted text files that are stored on your device by a website. I use cookies to analyse website traffic. I don’t store personal information in the cookies I create, but personal information that I store about you may be linked to the information stored in and obtained from cookies.
By continuing to browse my site, you consent to our placing cookies on your computer (unless you have chosen to disable them via your browser). Certain features of my site depend on cookies to function. Cookie Law deems these cookies to be “strictly necessary”. Your consent will not be sought to place these Cookies. You may still block these Cookies by changing your internet browser’s settings but please be aware that my site may not work properly if you do so.