Privacy Policy | Barre and Body

Data Protection & Privacy Policy

This Service is operated by Elishea Boswell “Barre and Body”.

We respect the privacy of all who visit this web site. This privacy policy outlines the information we may collect and how we may use that information in accordance to the GDPR guidelines.

To assist us with improving the service we offer to you we may ask you to provide us with personal details such as your name, email and home address. We may use this information for the purposes of providing, monitoring, assessing and marketing Barre and Body. We may also use your personal information to inform you of information, new features, offers, services and products from Barre and Body from time to time. We will not sell, share, rent or otherwise distribute any personal information to third parties.

The Barre and Body Privacy Policy

This privacy policy outlines the information we may collect and how we may use that information in accordance to the GDPR guidelines.

Overview

Any information supplied by you to us via this web site will only be used in accordance with the Data Protection GDPR. The ICO states*:

The rules on electronic mail marketing are in regulation 22. In short, businesses must not send electronic mail marketing to individuals, unless:

• They have specifically consented to electronic mail from that business; or

• They are an existing customer who bought (or negotiated to buy) a similar product or service from that business in the past, and the business gave them a simple way to opt out both when you first collected their details and in every message you have sent.

• Businesses must not disguise or conceal their identity, and must provide a valid contact email address so they can opt out or unsubscribe.

Under the Data Protection Act guidelines Barre and Body will:

• Only collect information that you need for a specific purpose;

• keep it secure;

• ensure it is relevant and up to date;

• Only hold as much as needed, and for as long as needed; and

• allow the subject of the information to see or delete on request.

*Taken from the ICO website May 2018.

Scope and sources

This Policy governs the processing of personal data concerning Barre and Body members, participants or people interested in our activities and services.

Our sources are:

- This Site & PT Minder for Barre and Body (visits, registering, online request form, connection to members only parts of the Site, online forms, online actions, etc.),

- Information requests about our programmes and services,

- Subscription to our activities or services,

- Participation to Barre and Body actions

Personal data at stake

We collect your data when you decide to participate in our activities or actions, when you create an online account, when you contact us, visit our Site(s) or when you otherwise provide information about you to Barre and Body. For example, we collect:

- Surname, first name, date of birth, gender,

- email address or other electronic contact details,

- Home address,

- Phone number, mobile number,

- Login and password,

- Emergency contact information,

- Medical data (when you provided them to us in the framework of our services)

- Financial data (bank-related data, in the framework of a contract with us or for online purchasing.).

Please note that payment information is stored within Stripe and no access to this information, nor store any details. No personal or financial data is held on our servers or available to us once entered onto the payment platform.

Using collected information

Barre and Body may collect and use your personal information for the following purposes:

- For service subscription purposes:

- For information purposes on class video updates, website issues and our newsletter

- For marketing purposes with regards to special offers and promotions

If you wish to enrol using the online form which includes personal information such as your surname, first name, age, medical (relating to our activities) and your contact information.

Barre and Body is independently owned and operated. Barre and Body may retain your enrolment information to further contact you about: (a) subscription to our classes; (b) upcoming classes and videos, products and services, and promotions (c) our newsletter (d) on-line studio information

How we protect your information

We adopt appropriate data collection, storage and processing practices and security measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. We use PTMinder operational software for this purpose.

Sharing your personal information

Your personal data will never be shared with third parties.

We reserve the right to transfer any data we have about you in the event we sell or transfer all or a portion of our business or assets. Should such a sale or transfer occur, we will use reasonable efforts to ensure that the transferee uses the data you have provided to us in a manner that is consistent with this Privacy Policy. Following such a sale or transfer, you may contact the transferee with any inquiries concerning the processing of that information.

We will not transmit your contact data to third parties for marketing purposes.

We may organise common marketing campaigns with local businesses without transferring your personal data to them.

Users may, however, visit our Site anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us via registration on our Site. Users can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities.

Barre and Body website makes use of cookies to save and retrieve information about your visit to our sites. Cookies are small files of software which save and retrieve information about your visit to a website or application. They reside in your internet browser to help remember your preferences and previous activity. You can find more information about cookies at https://ico.org.uk/for-the-public/online/cookies.

Functional cookies

These cookies are essential in order to enable you to move around a site and use its features. We do not use information collected from functional cookies. These cookies cannot track your browsing activity on other websites. They do not gather any information about you that could be used for advertising or to record where you’ve been on the Internet outside our site.

Analytics cookies

In order to keep our website services relevant and up-to-date, we use Google Analytics services to help us understand how people use the site. Cookies allow web analytics services to recognize your browser or device and, for example, identify whether you have visited our website before, what you have previously viewed or clicked on, and how you found us. The information is anonymous and only used for statistical purposes, and it helps us to analyse patterns of user activity and to develop a better user experience. For further information about how Google Analytics uses cookies and IP address data, see: http://www.google.com/intl/en/analytics/privacyoverview.html.

Third party Websites

Visitors may find advertising or other content on our Site that link to the Sites and services of partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these Sites and are neither responsible for these contents, nor for their data protection practices. These Sites and services may have their own privacy policies and customer service policies; we invite you to consult them.

HOW WE USE YOUR PERSONAL DATA & OUR BASIS FOR USING IT

a) We may rely on one or more of the following legal bases when processing your personal data. We have set out below the purposes for which we may process your personal data:

PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA, THE TYPE OF PERSONAL DATA USED (SEE ABOVE FOR MORE DETAILS), AND THE BASIS ON WHICH WE CAN DO THIS (THIS IS WHAT THE LAW ALLOWS)

To register you as a new customer.

Individual Data;
Economic and Financial Data;
Account and Profile Data.

The processing is necessary
· To Perform a contract with you; and
· Our legitimate interest in the provision of goods and services to our customers

2. In order to perform our contractual obligations to you. This would include; processing and performing any order placed by you or orders placed by us where you are a supplier making or receiving payments, fees and charges and collecting and recovering money owed.

Individual Data
Economic and Financial Data and
Sales Data

The processing is necessary.
· To perform any contract entered into with you; and
· Our legitimate interest in recovering debts owed to us.

3. In order to comply with our own legal obligations, e.g. health and safety legislation, or to assist in an investigation (e.g. from the Police).

Individual Data;
Audio and Visual Data; and
Health Data

The processing is necessary for us to comply with the law.

4. In order to use your personal data in life or death situations and there is no time to gain your consent (e.g. in the event of an accident and we have to give your personal details to medical personnel).

Individual Data
Health Data

The processing is necessary in order to protect the vital interests of an individual.

5. In order to manage our relationship with you including:
· and to send you important notices such as communications about changes to our terms and conditions and policies
(including this Privacy Notice);

to provide you with important real-time information about products or services you have ordered from us (e.g. a change of time or location due to unforeseen circumstances); and

· To send you information you have requested;
· to deal with your enquiries; and
· to ask you to leave a review or feedback on us.

Individual Data;
Account and Profile Data
Sales Data and
Advertising and Marketing Data

The processing is necessary:
· to perform any contract entered into with you;
· to comply with the law; and
· for our legitimate interests in the management and operation of our business, to keep our records updated and to study how customers use our products/services.

6. In order to administer and protect our business, deal with any misuse of our website and to comply with our security policies.

Individual Data;
Account and Profile Data
Audio and Visual Data and
Information Technology Data

The processing is necessary:
· for our legitimate interest in provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise; and
· necessary to comply with the law.

7. In order to make suggestions and recommendations to you about goods or services that may be of interest to you, deliver relevant website content and advertisements to you and to measure or understand the effectiveness of our advertising.

Individual Data
Sales Data
Information Technology Data and
Advertising and Marketing Data

The processing is necessary for our legitimate interests (to study how customers use our products/services, to develop our products and services and ensure our marketing is relevant to you, to grow our business and to inform our marketing strategy.

8. For internal purposes to use data analytics, to identify usage trends, determine and measure the effectiveness of promotional campaigns and advertising and to improve our website, relationships and experiences.

Information Technology Data
Advertising and Marketing Data and
Advertising and Market Research Data.

The processing is necessary for our legitimate interests in defining types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy

9. To communicate with you about, and administer your participation in, special events, programs, promotions, any prize draws or competitions;

Individual Data
Account and Profile Data
Sales Data
Information Technology Data; and
Advertising and Marketing Data

The processing is necessary:
· For performance of a contract with you; and
· Necessary for our legitimate interests to promote our business.

10. To sell, make ready for sale or dispose of our business in whole or in part including to any potential buyer or their advisers.

Individual Data
Account and Profile Data
Sales Data
Information Technology Data and
Advertising and Marketing Data

The processing is necessary for our legitimate interests in the sale or disposal of our business or assets.

11. In order to enforce or apply our terms of use, terms and conditions of supply and other agreements with third parties.

Individual Data
Account and Profile Data;
Sales Data and
Economic and Financial Data.

The processing is necessary for our legitimate interests in protecting our business and property and recovering debts owed to us.

12. In order to deal with recruitment where you have submitted a CV or job application. We may for a reasonable period keep your details on file for future reference should a suitable position subsequently become available and we may send you information about job opportunities.

Individual Data

The processing is necessary for our legitimate interests in recruiting for our business.

In addition, we may lawfully process special categories of data in certain ways. We set these out below along with the linked purposes for which we can process these special categories of data:

PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

CATEGORIES OF PERSONAL DATA

THE BASIS ON WHICH WE CAN DO THIS (THIS IS WHAT THE LAW ALLOWS)

In order to use our knowledge of any health-related personal data you disclose to us in the event of illness or injury or some other related emergency.

Health Data

The processing is necessary in order to protect the vital interests of you or another individual where you or the individual is physically or legally incapable of giving consent.

In order to use information about your health in providing our goods and services to you, where you have published in a public forum that you are suffering from a particular health condition such as informing us at a class that you suffer from a medical condition.

Health Data

The processing relates to personal data which are manifestly made public by you.

In order to disclose any Special Categories of Data we hold on you, where to do so is in the substantial public interest, provided that when we do so we provide suitable measures to protect your rights.

The processing is necessary for reasons of substantial public interest, on the basis of applicable law and it is:
· proportionate to the aim pursued;
· respects the essence of the right to data protection; and
· provides for suitable and specific measures to safeguard the fundamental rights and the interests of the individuals.

In order protect against the threat of an epidemic.

The processing is necessary for
reasons of public interest in the area of public health for example:
· protecting against serious cross-border threats to health;
· ensuring high standards of quality and safety of healthcare and of medicinal products or medical devices.

The processing must be on the basis of applicable law which provides for suitable and specific measures to safeguard your rights and freedoms, in particular professional secrecy.

b) We do not need your consent if we process your data under one or more of the other legal bases set out above. In limited circumstances we may approach you for your written consent to allow us to process certain data. You should be aware that it is not a condition of your contract with us that you agree to any request for consent from us.

WHAT RIGHTS DO YOU HAVE IN RESPECT OF THE INFORMATION THAT WE HOLD ABOUT YOU?

You have several different rights in relation to the personal data that we hold about you. These are briefly described below.

Access: You have a right to find out what personal data we hold about you and certain other information such as how we are using it. From 25 May 2018, you also have a right to receive information in a portable format in certain circumstances.

Rectification: If you believe that the information that we hold about you is inaccurate or out of date, you have a right to get it corrected.

Withdrawal of consent / objection: Where we rely on your consent to use your personal data, you are free to withdraw that consent at any time. In any other cases, you can let us know that you object to us using your personal data (for example, if you do not want to receive marketing calls from us anymore).

Deletion: If you want us to delete your personal data, you can ask us to do so at any time. (However, you may wish us to retain your basic details on a suppression file so that we do not subsequently contact you if we receive your details again in the future.)

Restriction: You can ask us to restrict our use of your personal data in some circumstances, such as while we are verifying whether the information is accurate. While the information is restricted, it can only be used for certain limited purposes such as bringing or defending legal claims or protecting another person. It cannot be used or shared for ordinary purposes.

If you have any questions about our processing of personal information or the rights set out in these Privacy Policies and how to exercise them you can write to:

Elishea Boswell

1 Cheltenham Mount, HG1 1DW