Harbour Yoga Ltd may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 22 May 2018.
What we collect
We only collect information about you that is relevant to the services Harbour Yoga provides Please note some of this information may be ‘sensitive personal data’ within the meaning of the Data Protection Act 1998 and the GDPR, for example, information about your health.
· contact information including address, phone number and email address
· emergency contact information (name and phone number)
· medical information relevant to yoga or thai yoga massage services
· yoga practice history
· billing and payment information (incl bank details within my banking and payment processing apps)
· record of correspondence
· record of attendance (at yoga classes, TYM, workshops and retreats)
· demographic information such as postcode, occupation, date of birth
How we collect information about you
Harbour Yoga collects information about you from a variety of sources:
· Email (directly or through Harbour’s website or Facebook page)
· Facebook messenger
· Face to face conversation
· New joiners/first time visitors form
· Online booking system
What we do with the information we gather
We use the information you share with us to provide and develop the services (yoga classes, workshops and retreats or Thai Yoga Massage treatments) you have booked or expressed an interest in. Harbour Yoga does this on the basis of legitimate interest or on the basis of contract where we put one in place.
Harbour Yoga will keep your data for 7 years from the date of your last attendance at a Harbour yoga class/workshop/retreat /TYM, in line with our insurance requirements.
Sharing and Disclosure
Harbour Yoga relies on the use of services from third parties to operate its business. This requires these companies to collect, store and process your personal data. We only use trusted providers that comply with the relevant privacy laws and maintain the highest standards of data security. You can read about each company’s relevant polices by clicking the link.
Google– for email hosting
Easily – for email hosting
Squarespace – for website hosting
Instabook – for bookings
Stripe – for payment processing
DropBox – for data/document storage
If required by law, we may need to disclose your personal information to third parties (such as the police, regulatory bodies or legal advisors). This will only happen in response to a valid request in compliance with UK law.
Keeping your data safe
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical (eg secure form storage), electronic (eg encryption, https and two step authentication) and managerial procedures to safeguard and secure the information we collect both online and offline at the studio or any other locations we may use (such as other studio spaces, retreat venues etc). Please note that any communications via the internet are only secure if they’ve been encrypted. Your communications may go through a number of countries before they are delivered – such is the nature of the internet. We cannot accept responsibility for any unauthorised access or loss of Personal Data that is beyond our control.
Should Harbour Yoga encounter a breach/unauthorised access of personal data that is likely to “result in a risk for the rights and freedoms of individuals”, we will ensure that a notification is made within 72 hours of becoming aware of the breach.
Links to other websites
Our website may from time to time contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
We will only send you marketing information such as newsletters or other promotional material if you have explicitly opted in to receive this type of information when you filled in our registration form before your first class at Harbour. If you have previously opted in to us using your personal information for direct marketing purposes, you may change your mind at any time by emailing us at email@example.com, or calling us on 07967 088519.
As the owner of your personal data you have certain rights under GDPR. You may request to see details of the personal information that we hold about you. If you tell us any of the data we hold about you is inaccurate, we will delete or update it promptly (within 48 hours). You may withdraw your consent for Harbour Yoga to store your personal information at any time. Simply send an email to firstname.lastname@example.org including the full name (including any prefixes) and email address to be removed
If you have any other queries relating to Harbour Yoga’s use of your personal data, please let us know by mailing info@harbouryoga..co.uk .
You can also contact the Information Commissioners Office for further information relating to your rights.