TRANSFORMING HEALTH PRIVACY NOTICE
This privacy notice sets out how Transforming Health collects and processes your personal data (information) when you use my products and services and access my websites.
Anne Williams, trading as ‘Transforming Health’, is the data controller (referred to as ‘I’, ‘me’ or ‘my’ in this privacy notice) and I am responsible for your personal data. If you need to contact me about anything related to this privacy notice, you can do so as follows:
Anne Williams, Transforming Health
30 Oak Avenue, Hampton, TW12 3NX
Tel: 0208 546 2122
The information below tells you what personal data I hold and why, and what your rights are. I intend to ensure that your personal data is safe and secure and have put in place suitable measures in compliance with GDPR regulations to safeguard and secure the personal information I collect about you.
It is very important that the information I hold about you is accurate and up-to-date. Please let me know if at any time your personal information changes by e-mailing me at firstname.lastname@example.org.
- THE DATA I COLLECT ABOUT YOU AND THE PURPOSE FOR COLLECTING IT
Depending on the use you make of my products, services or websites, I may collect and process the following types of personal data:
Identity and contact data: this may include your name, title, postal address, phone numbers, e-mail address, IP address – to enable me to contact you in connection with groups and events that I run or my other products and services, send you information and resources which you have requested or which I think are relevant and of interest to you, ask you to complete surveys, and manage my business.
Transaction data: details of payments and purchases you have made for my products and services, which I record in order to produce my business accounts and for the purposes of my tax return. I do not receive or retain your bank details.
Usage data: information about your use of my products, services and websites, and attendance at events I run. This enables me to assess your level of interest in what I provide, so that I can adapt my communication with you accordingly.
Profile data: may include your responses to feedback forms or surveys, which I use to evaluate and improve my products and services.
Marketing and communications data: may include information about your preferences in receiving marketing communications from me and third parties and your communication preferences. This will determine what marketing communications I send you and how I communicate with you.
I may use your data to deliver relevant website content and advertisements to you (including Facebook or other display advertisements) and to measure and understand the effectiveness of the advertising. I may also use your data to send other marketing communications to you. My legal grounds for this processing are either consent or legitimate interests, which is to develop my business.
You do not have to consent to the collection of information, but if you choose not to provide it, I may not be able to deliver a product or service to you. I will only use your personal data for a purpose that it was collected for or for a reasonably compatible purpose, if necessary. If I need to use your data for an unrelated new purpose, I will let you know and explain the legal grounds for processing.
- HOW I COLLECT YOUR PERSONAL DATA
I may collect your personal data from:
- information you provide to me directly in writing by email, by text, in a letter of correspondence, on forms or on a business card, via my websites or social media or orally by phone or in person
- third parties, such as providers of technical and payment services, analytics providers and search engines such as Google, social media, such as Facebook and LinkedIn
- LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA
Under the General Data Protection Regulation (GDPR), I am permitted to use your personal data, if there is a lawful basis to do so. The legal grounds I have for processing your personal data are:
- the consent that you give me
- the fulfilment of any contract between us to deliver products or services
- my legitimate interests to provide you with services and products, and to be able to run and grow my business
My legal basis for processing your personal data for sending you marketing communications is either your consent or my legitimate interests, namely to maintain and grow my business. Under the Privacy and Electronic Communications Regulations, I may send you marketing communications if (i) you made a purchase or enquiry about my products or services or (ii) you agreed to receive marketing communications from me and in each case you have not opted out of receiving such communications since. You can opt out of receiving marketing communications from me at any time by e-mailing me at email@example.com.
If you opt out of receiving marketing communications from me, this opt-out does not apply to personal data provided in connection with therapy or other services, or as a result of other transactions, such as purchases of products or other services.
- DISCLOSURES OF YOUR PERSONAL DATA
I intend to maintain a high level of security of personal data. However, I may have to share your personal data with third parties where:
- you have consented for me to do so
- I employ an assistant for the administration or marketing of my business, in which case I will ensure that they are adequately trained in the safeguarding of your personal data according to this privacy notice
- I am under a legal, regulatory or professional obligation to do so and I may need to pass information to professional advisers, such as lawyers and insurers
- my service providers are processing personal data on my behalf under contract (for example, my payment provider, e-mail and website providers, advertising and analytics providers)
My service providers may be based (or store or process information) outside the European Economic Area (the ‘EEA’), meaning that your personal data may be transferred outside the EEA. Where this is the case, I aim to select reputable providers, which provide a similar degree of security for your personal data and which are based in countries that the European Commission has approved as providing an adequate level of protection for personal data.
- RETENTION OF YOUR PERSONAL DATA
I keep your personal data only for as long as required to:
- provide you with the products or services you have requested
- comply with the law, including my accounting obligations
- support a claim or defence in court
- fulfil my legitimate business interests
- YOUR LEGAL RIGHTS
You have legal rights in relation to your personal data, which include the right of access and the right to rectification, erasure, restriction of processing, data portability, objection to processing and (where the legal basis of processing is consent) to withdraw consent. You can find information about these rights on the Information Commissioner’s Office (ICO) website.
If you wish to exercise any of these rights, please e-mail firstname.lastname@example.org. Access to your personal data or the exercising of these rights is free of charge, but I may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or I may refuse to comply with your request in these circumstances. Please be aware that these rights are not absolute, so will not apply in all cases or to all information that I hold about you. For example, I may need to continue to hold and process your personal data to fulfil legal and accounting obligations. In the event of you wishing to exercise your legal rights, I may ask you for specific information to confirm your identity. This is a security measure to ensure that your personal data is not disclosed to anyone who has no right to receive it.
If you think that there is a problem with the way I am handling your data, you have the right to complain to the Information Commissioner’s Office (ICO). If you do have a complaint, I would be grateful if you would contact me first, so that I can try to resolve it.
- THIRD PARTY LINKS
My websites may include links to third-party websites, plug-ins and applications, which have their own privacy and cookie policies over which I have no control. Clicking on those links may allow third parties to collect or share data about you. I do not accept any responsibility or liability for the privacy practices of such third parties and I encourage you to read the privacy notice of each website that you visit.
REVIEW OF THIS PRIVACY NOTICE
I may update this privacy notice from time to time in line with current legislation.
Thank you for taking the time to read this privacy notice!