Kath’s Dru Yoga Data Protection Policy and Privacy Notice
Last updated: 22 May 2018
Business Name: Kath’s Dru Yoga
Data Protection Officer: Kathrine Parker Stead
Who has access to data collected: Kathrine Parker Stead and cover teachers *
* only in relation to the class they are covering for
Personal Data Collected at the Time of Booking a Kath’s Dru Yoga class
A certain amount of personal data is collected by Kath’s Dru Yoga at the first attendance at a class or workshop. This is for the purposes of meeting Insurance Company criteria (Balens Limited) as well as for your health and safety at yoga. Health information is also used to tailor sessions to suit your individual needs.
All information gathered by Kath’s Dru Yoga either on paper or email is treated as confidential and will not be shared with a third party (except for customers attending classes at Royal Derby Hospital, see below). If you grant permission, it is kept securely in a locked metal cabinet and only viewed by Kath’s Dru Yoga or cover teachers. There is an opt-in box on the paper form.
For classes at Royal Derby Hospital, PAR-Q health forms are shared with Occupational Health Department, for the purposes of overseeing the validity of the classes (forms are valid for 12 months) and email addresses are shared with Occupational Health so customers can be notified of any class cancellations/changes.
My Insurance Company request that I keep a record of my customer’s data and health forms for seven years after your last class with me. Paper forms are kept in secure storage (locked metal cabinet) for 7 years. Forms are reviewed every 7 years, and any customers that have not attended for over 7 years, their paper forms will be destroyed using cross-cut shredding.
E-mail addresses kept for 7 years in a password protected folder, then deleted if not needed after 7 years. EMAILS from students deleted once a week.
If you wish to alter any of your data, review how it is used or wish to request its return to you, please contact Kathrine Parker Stead on firstname.lastname@example.org or 07586 298809.
You may, of course, decline to submit personally identifiable information to Kath’s Dru Yoga, in which case Kath’s Dru Yoga may not be able to provide certain services to you.
Existing customers who already have a prior relationship with Kath’s Dru Yoga (have attended a class or workshop)
In line with the Privacy and Electronic Communications Regulations (EU Directive 2003), existing customers will be sent information about classes and workshops by Kath’s Dru Yoga. From the 26th May 2018, these customers will be offered an ‘opt-out’ option to decline further marketing.
How I use your contact information
When attending a class or workshop, you will be asked to sign a disclaimer on a paper form. In doing so you are agreeing to your email and phone number being used by Kath’s Dru Yoga to inform you of class changes, and service updates directly relating to the service you have accessed.
You may, of course, decline to submit your email and phone number to Kath’s Dru Yoga, which in some cases may mean that Kath’s Dru Yoga is not able to provide certain services to you.
I may, from time to time, use your phone number to contact you about urgent class changes or to inform you if a waiting list place has become available. If you do not wish me to contact you in this way, please inform me in person or by emailing email@example.com
Emergency Contact Information
Emergency Contact Information is collected solely for use in an emergency, should Kath’s Dru Yoga need to contact your next of kin or give this information to the emergency services. This is the only information that would be shared with a third party, and only in the context of an emergency.
Notifying you of Changes to this Notice
If there is a change to Kath’s Dru Yoga privacy notices or how we use your data we shall contact you via email notice, written or hard copy notice, or through conspicuous posting of the notice on my website. I reserve the right to determine the form and means of providing notifications to you, and you may have opted out of certain means of notification as described in this Privacy Notice.
Links to Other Web Sites
Kath’s Dru Yoga is not responsible for the practices employed by websites linked to or from Kath’s Dru Yoga nor the information or content contained in them. Please remember that when you use a link to go from Kath’s Dru Yoga to another website, our Privacy Notice is no longer in effect. Your browsing and interaction on any other website, including those that have a link on our website, is subject to that website’s own rules and policies. Please read over those rules and policies before proceeding.
Changes to our Privacy Notice
Kath’s Dru Yoga may update its Privacy Notice from time to time, and so you should review this Notice periodically. When we change the notice in a material way, we will update the ‘last modified’ date at the top of the Privacy Notice. Changes to this Privacy Notice are effective when they are posted on this page. If you have any questions about this Privacy Notice, the practices of this site, or your dealings with this website, please contact Kathrine Parker Stead at firstname.lastname@example.org or 07586 298809.
Data Protection Law means that you have extensive rights regarding the collection, storage and use of your data.
Under the GDPR (General Data Protection Regulation) you have the following rights as an individual regarding your data:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
If you would like to find out more about these rights, or if you would like to report a breach of them then you can contact the ICO (Information Commissioners Office)
or call their helpline on 0303 123 1113