CBH Privacy Policy

This is the privacy notice of breathworkfortheheart.co.uk. In this document “we”, “our”, or “us” refer to breathworkfortheheart.co.uk.

Introduction

1.This is a notice to inform you of our policy about all information that we record about you. It sets out the conditions under which we may process any information that we collect from you, or that you provide to us. It covers information that could identify you (“personal information”) and information that could not. In the context of the law and this notice, “process” means collect, store, transfer, use or otherwise act on information.

2.We regret that if there are one or more points below with which you are not happy, your only recourse is to leave our website immediately.

3.We take seriously the protection of your privacy and confidentiality. We understand that all visitors to our website are entitled to know that their personal data will not be used for any purpose unintended by them and will not accidentally fall into the hands of a third party.

4.We undertake to preserve the confidentiality of all information you provide to us.

5.Our policy complies with UK law accordingly implemented, including that required by the EU General Data Protection Regulation (GDPR).

6.The law requires us to tell you about your rights and our obligations to you regarding the processing and control of your personal data. We do this now, by requesting that you read the information provided at knowyourprivacyrights.org

7.Except as set out below, we do not share, or sell, or disclose to a third party, any information collected through our website.

The basis on which we process information about you

The law requires us to determine under which of six defined bases we process different categories of your personal information, and to notify you of the basis for each category. If a basis on which we process your personal information is no longer relevant, we shall immediately stop processing your data. If the basis changes, then if required by law we shall notify you of the change and of any new basis under which we have determined that we can continue to process your information.

Information we process because we have a contractual obligation with you

When you buy a product or service from us, or otherwise agree to our terms and conditions, a contract is formed between you and us. In order to carry out our obligations under that contract we must process the information you give us. Some of this information may be personal information. We may use it in order to provide you with our services.

Data we collect about you

Personal Information:

Name, address, email address, telephone numbers, date of birth.

GP details, emergency contact details

Any details you offer on your initial registration form regarding past and present health - physical, emotional and psychological.

How your data is stored

Some of our records are in paper form and some in electronic form.

Paper records are stored in a secure locked cabinet and are destroyed 7 years after we have finished our work together.

Our financial, email , and mobile phone systems are all electronic and are password protected.

We will delete mobile phone data relating to you one month after ending our work together.

Data on the email and computer system will be kept for 7 years and then deleted.

Access to, or change of, your Data

You can make a subject access request in respect of your personal information held by us by making a request in writing. Once we receive the written request we will respond within 14 days

You may also request that inaccurate data is amended.

Use of Information

This will be kept in order for us to provide a professional and effective service. We may need to contact you regarding workshops and courses or to send you invoices or receipts. We will keep a record of your attendance of sessions and we may keep a short, factual record of some or all of the workshops & courses you have attended,

Information we process with your consent

Through certain actions when otherwise there is no contractual relationship between us, such as when you browse our website or ask us to provide you with more information about our business and services, you provide your consent to us to process information that may be personal information.

Wherever possible, we aim to obtain your explicit consent to process this information, for example, by asking you to agree to our use of cookies. Sometimes you might give your consent implicitly, such as when you send us a message by e-mail to which you would reasonably expect us to reply. Except where you have consented to our use of your information for a specific purpose, we do not use your information in any way that would identify you personally. We never pass your name and contact information to others. We will continue to process your information on this basis until you withdraw your consent, or it can be reasonably assumed that your consent no longer exists.

You may withdraw your consent at any time by instructing us: info@breathworkfortheheart.co.uk

If you request to be added to our newsletter, your name, surname and email address will be added to the CBH Mailerlite account. You can withdraw your consent to receive our newsletters by clicking the “unsubscribe” button at the bottom of any of the emails you receive from us.

Information we process because we have a legal obligation

We are subject to the law like everyone else. We may share data if required by law, or if ordered to by a court, or if you tell us about risk of serious harm to yourself or someone else. In line with professional body requirements, practitioners have regular clinical supervision, where they talk about their work in both general and specific terms, but would only ever use the first name of any client work.

All payments are recorded in our respective accounts using your initials (or in the case of bank transfers, whatever reference name you have provided), and these might be shared with HMRC if an audit is required.

Complaints regarding content on our website

If you complain about any of the content on our website, we shall investigate your complaint. If we feel it is justified or believe the law requires us to do so, we shall remove the content while we investigate.

Information relating to your method of payment

When using the online booking system, your payment will be processed by Stripe, which is fully PCI compliant. All payment data is fully secure and safe. No payment details are kept on our website or servers.

Sending a message to us

When you contact us, whether by telephone, through the website or by e-mail, we collect the data you have given to us in order to reply with the information you need. We record your request and our reply in order to increase the efficiency of our business. We keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications and provide a high-quality service.

Use of information we collect through automated systems when you visit our website

Cookies

Cookies are small text files that are placed on your computer’s hard drive by your web browser when you visit any website. They allow information gathered on one web page to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and the website owner with statistics about how you use the website so that it can be improved. Some cookies may last for a defined period of time, such as one day or until you close your browser. Others last indefinitely. Your web browser should allow you to delete any cookies you choose. It also should allow you to prevent or limit their use. Our website uses cookies. They are placed by software that operates on my servers, and by software operated by third parties whose services I use.

Our website is managed by Webhealer, who uses cookies to track how you use our website.

Personal identifiers from your browsing activity

Requests by your web browser to our servers for web pages and other content on our website are recorded. We may record information such as your geographical location, your Internet service provider and your IP address. We may also record information about the software you are using to browse our website, such as the type of computer or device and the screen resolution. We use this information in aggregate to assess the popularity of the webpages on our website and how we perform in providing content to you. If combined with other information we know about you from previous visits, the data possibly could be used to identify you personally, even if you are not signed in to our website.

Our use of re-marketing

Re-marketing involves placing a cookie on your computer when you browse our website in order to be able to serve to you an advert for our products or services when you visit some other website. We never practice this form of marketing.

Information we obtain from third parties

No information is obtained from third parties via our website.

Third party advertising on our website

There are no third parties advertising on our website.

Data may be processed outside the European Union

Our website is hosted in the USA. Stripe is also not UK based

Other matters

Use of site by children

We do not sell products or provide services for purchase by children, nor do we market to children.

Encryption of data sent between us

We use Secure Sockets Layer (SSL) certificates to verify our identity to your browser and to encrypt any data you give us. Whenever information is transferred between us, you can check that it is done so using SSL by looking for a closed padlock symbol or other trust mark in your browser’s URL bar or toolbar.

How you can complain

If you are not happy with our privacy policy or if have any complaint then you should tell us via email. Our address is info@breathworkfortheheart.co.uk.

If a dispute is not settled then we hope you will agree to attempt to resolve it by engaging in good faith with us in a process of mediation or arbitration.

If you are in any way dissatisfied about how we process your personal information, you have a right to lodge a complaint with the Information

Commissioner’s Office. This can be done at https://ico.org.uk/concerns/

Retention period for personal data

Except as otherwise mentioned in this privacy notice, we keep your personal information only for as long as required by us:

to provide you with the services you have requested

to comply with other law, including for the period demanded by the tax authorities

to support a claim or defence in court.

Compliance with the law

Our privacy policy has been compiled so as to comply with the law of every country or legal jurisdiction in which we aim to do business. If you think it fails to satisfy the law of your jurisdiction, we would like to hear from you. However, ultimately it is your choice as to whether you wish to use our website.

Review of this privacy policy

We may update this privacy notice from time to time as necessary. The terms that apply to you are those posted here on our website on the day you use our website. We advise you to print a copy for your records. If you have any question regarding our privacy policy, please contact us: info@breathworkfortheheart.co.uk