I apologise in advance but this is the formal, legal GDPR information which must be shared.
GDPR AND WHAT IT MEANS FOR YOU AND MY MINDFUL COUNSELLOR
WHAT PERSONAL DATA DO YOU COLLECT, HOLD AND PROCESS?
When you send us an enquiry, sign up for a course or request to be added to a mailing list, we will ask for some personal information that may include name, address, email, phone number, other information necessary for your enquiry or application.
E-mail addresses on our mailing lists where you have added yourself to a contact us page
Booking and payment information if you book onto a course including how much you paid and what is outstanding.
Information provided on course/retreat registration forms such as health, wellness questionnaires.
Information shared regarding a hom stay which include any dietary needs, allergy or relevant medical information and emergency contact details.
E-mail communication between us.
Brief notes (labelled with only your initials) about 1:1 sessions held together
WHY WE COLLECT AND HOW WE USE YOUR DATA
We collect this data so we can communicate with you and offer the best service suited to your needs, for your convenience and safety and to keep yourself safe. We are required to keep client notes for a period of 6 years, by our insurers. We may let you know about our news and events from time to time and we use your email address for this. We may need to contact you with regards an event you have registered on, and we may use your phone number for this
E-mail addresses on our mailing lists - are used to communicate to you about services, news, articles and blogs posted or other relevant matters.
Our booking and payment systems are used to administer our courses and payments. Information provided on course/retreat registration forms are used to run our courses/retreats effectively. Some essential information is held to ensure your home stay is smooth and safe. All booking information after the homestay or course is destroyed, except that which is required for insurance purposes which is client assessment forms.
WE DO NOT SHARE YOUR DATA WITH ANY THIRD PARTIES AND WE DO NOT USE YOUR DATA FOR ONLINE ADVERTISEMENTS.
Below is more information on how you can manage your data we hold.
DATA SUBJECT RIGHTS
In plain English, a data subject is any UK or EU citizen from which My Mindful Counsellor is collecting personal data. GDPR compliance requires data subjects to be granted certain rights. What follows is not an exhaustive list, but those rights that are relevant to the collection, processing, and storage of personal data on this website, through the course of the work we do together and on application forms.
Explicit consent has to be obtained before data collection can take place. In other words, before the user submits the form, they must be made aware that this form is collecting personal data with the intent to store that data. The Mindful Counsellor is also responsible for letting the user know how that data will be stored and used and this is outlined in this policy. This policy is that notification.
RIGHT TO ACCESS
Data subjects must be able to request and obtain confirmation that data is or is not being collected on them, and if so exactly what data is being collected, how, where, and for what purpose. That data must also be provided to them in an electronic format free of charge on request. Please email your request using the contact details below*.
RIGHT TO BE ADDED
Data subjects must be provided a quick and clear way to give consent to being included in our mailing list and contacts. By signing up on the form on the website or any course, contact or email we will use that to contact you. You can request to be removed at any time.
RIGHT TO BE FORGOTTEN
Data subjects must be provided a quick and painless way to withdraw consent and have collected data purged. Please use the email below to request delete all personal data, including all electronic data and not to be contacted (we must retain data for our insurance purposes if you have received a service).*
Similar to the Right to Access, Data Portability requires that data subjects are able to request, obtain, and/or transfer possession of collected data at any time.
Please contact me via the email below outlining your request.*
If a breach/unauthorized access of personal data takes place that is likely to “result in a risk for the rights and freedoms of individuals”, notification must be made within 72 hours of becoming aware of the breach.
* You can withdraw this by emailing, writing, texting or calling and requesting not to be contacted in future. Please ensure you include all contact details: names, address, phone, email so we can ensure the full file is deleted.
My Mindful Counsellor,