GDPR

Data protection and policies

Privacy policy

At Inspire & Rewire we are committed to maintaining the trust and confidence of both our visitors to our website and our clients. We may hold information about you if you have made enquiries about the services we provide, if you are our client and if you have signed up to our newsletter.

We would like you to know that if you provide us with information about yourself we will never sell it or allow any other business to use it for marketing purposes. You have the right to know how we use information about yourself and this Privacy Policy sets this out. Confidentiality of your information is a priority to Inspire and Rewire.

In this Privacy Policy we will set exactly how we look after and keep secure the information you provide us with.

Mailing Lists

You will be asked if you would like to subscribe to our newsletter when you book onto a course, a class or if you are a client.  This will be a very obvious question that you will need to ‘opt in’, if you are interested.  You will not be subscribed by missing anything or leaving any box un-ticked.  You will never be automatically added. You can also be added to our newsletter list by adding yourself from our website home page. If you sign up for our newsletter as part of the registration process onto a  we collect personal information – your name and contact details. We use that information for a couple of reasons: to tell you about services and offers at Inspire and Rewire; to contact you if we need to let you know a class is cancelled or to share that a new and relevant is coming up.  We will always provide an opportunity to ‘opt out’ on every email and also at any time by emailing data@inspireandrewire.com.  This applies for unsubscribing from our mailing list too.  In addition there is an unsubscribe button on each of our newsletters. We don’t share or sell our email lists to other organisations and businesses.

We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. MailChimp data is stored in the USA. MailChimp are compliant with EEU GDPR data protection standards. For more information, please see MailChimp’s privacy notice.

If you access our services

We may hold personal information about you to enable us to manage your appointments with us. The information we hold is: Your name, contact details including phone, email and post code; we may record dates of appointments you have had, or which class you have attended.  Emails are sent to an individual after booking and event/ one to one session or becoming a member with Inspire & Rewire with an option to opt out of data or newsletter at any point.

This is generally for keeping you updates on classes and sessions and to understand our audience.  We do not need your full postal address and so do not request this, however postcode can be useful when sharing with you events that might benefit you locally, based on your last participation with us e.g. when we run a workshop running near you. The other reason we collect data is in case of emergency if you injure yourself in a class, such as next of kin details, or doctors address and phone number.  For one to one clients we also store session outcomes for our progress working together.

You may decide to submit personal information which is of a more private nature, which we refer to as sensitive personal information, to us in order that we can for example generate a service quote or perhaps to answer or respond to your questions. For example, we may collect the following sensitive personal information, if you decide to give it to us and if we believe the processing of this data is necessary: Details regarding your physical or mental health conditions, details regarding your age, gender, ethnic origin and lifestyle information.

This information is stored on your personal file and details of where and how long is noted below.

We store the information in our booking system, Acuity.  They have their GDPR policy which can be found here.

Cookies

Our website places cookies, which are small data files, on your computer or handheld device. This is standard practice for all websites. Cookies are essential for helping us deliver a high quality website for our customers and we only use browser cookies to measure non-personal information, for example to learn about the behaviour of visitors to our website and how they respond to our marketing communications. The more we learn, the better we are able to provide relevant and interesting content and services. These first party cookies do not contain any personally identifiable information.

For more information see our Cookie Policy 

Looking after your data

Inspire and Rewire is committed to ensuring that your privacy is protected and comply with the requirements of the 2018 General Data Protection Regulation. In an effort to prevent unauthorised access or disclosure we have put in place physical, electronic and operational  procedures intended to safeguard and secure the information we collect online.

We store information on a cloud based storage facility only, called Google Drive.  Google are compliant with EEU GDPR data protection standards and only Inspire and Rewire has access to the information stored in our Cloud account.  Google GDPR policy can be found here.   Our data is kept in one file only which can only be accessed through a computer with a password, then via an online password and a file password.  These passwords are all different and stored in the owner, Nicola Wagstaff’s head and no one else knows these passwords

We have not gathered any paper copies since Jan 2018 and all previous paper forms have been shredded. We keep our online records for 8 years after which time electronic data is deleted.  Individualised Hypno recordings are kept for one month only and then deleted, however the notes are held for 8 years.  This is all in case the client would like to return to treatment at a later stage.

All payment details are not given to me and paypal is encouraged, however it is handled by an outside provider who is GDPR aligned – ‘Acuity Scheduling’.

Your rights

You have the right to have a copy of your data. If you would like a copy of the information held about you please contact Inspire and Rewire owner, Nicola Wagstaff by using the following email: data@inspireandrewire.com. Please let us know, of those products and services that you may have used, which you would like us to include in our reply. To further assist us in providing a prompt response, please make us aware of the details of the information you would like to see. We will provide the copy as soon as we are able and at the latest within one month of receiving your request.

You have the right for your data to be accurate and you should contact us at: data@inspireandrewire.com if you wish any corrections to be made.

You have the right to ask us to erase your personal information. However we will legitimately keep a copy of any personal information if you have been a customer at Inspire and Rewire in case you make a legal claim againstInspire and Rewire.

You have the right to make a complaint about the way we are holding or processing your personal information to the regulatory body, the Information Commissioners Office.

If you choose to provide us with information, which can be used to identify you, then your data will only be used in accordance with this privacy policy and our cookie policy. Any other data we collect that cannot be used to identify you will only be used to support us in making improvements to our services, website and to our general marketing.

We may amend this privacy and cookie policy from time to time. You should check this site from time to time to see if there have been any changes. By using this website and/or providing your personal information, you consent to the use of your data and information as described and/or referred to in this privacy and cookie policy.

Inspire & Rewire will retain your data for eight years  

You have rights over your data and these include the rights to

1) Request to see what data we hold about you

2) Ask us to erase information about you that we no longer need to hold

3) Ask us to limit what we do with your data

4) Request a copy of the information we hold about you

5) Object to what we do with your data and ask us to stop

If an email is sent incorrectly to the wrong person it should be deleted by the individual receiving it.  This is in a disclaimer on our signature and mail chimp emails. All organisations must notify the ICO of a breach to personal data which is likely to result in a risk to the rights and freedoms of individuals, e.g. it could result in discrimination, damage to reputation, financial loss, loss of confidentiality or any other significant economic or social disadvantage. An incorrectly sent email would not need to be reported to the ICO.

This summary is explained briefly in each form and each email sent in my signature and mail chimp emails linking to this webpage. 

You have the right to complain to the ICO if there’s a problem with the way we handle your data.


If you like this article please share by clicking on the icons below


© Inspire and Rewire 2019