Leonie Corfield is a data controller for the purposes of the Data Protection (Bailiwick of Guernsey) Law, 2017 as amended (the “DPGL”) and for the purposes of the General Data Protection Regulation EU2016/679. 

Looking after the personal information you share with me is very important, and I want you to be confident that your personal data is kept safely and securely.

I have published this notice to help you understand:

·         how and why I collect information from you;

·         who I share your information with, why and on what basis; and

·         what your rights are.

If I make changes to this notice I will update you on My Site and by sending you an email notification. You will be deemed to have reviewed and been made aware of the terms of this notice on your first use of My Site (as defined below) following any amendments. I recommend that you check this page regularly to keep up-to-date.

Should you have any questions about this policy please write to me at info@leoniecorfield.com

Definitions and Interpretation

 

In this Notice, the following terms shall have the following meanings:

“My Locations” includes My Site and online classes offered by Zoom;

“My Site” refers to https://leoniecorfield.com

“Account” means a BookWhen account which you may open to access and/or use certain areas and features of any of My Locations;

“Personal Data” means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Me via any of My Locations. This definition shall, where applicable, incorporate the definitions provided in the DPGL;

“I,” Me”,  or “My” means Leonie Corfield.

When do I collect your personal data?

·         When you provide me with your personal details through BookWhen at My Locations;

·         When you book a service at any of My Locations or ask to be added to a waiting list for a service;

·         When you visit or attend a class;

·         When you redeem a gift card or vouchers at any of My Locations;

·         When you engage with me on social media;

·         When you contact me by any means with queries, complaints, or complete an application form for one of my workshops or retreats;

·         When you choose to complete any feedback requests or surveys I send you;

·         When you’ve given a third party permission to share with me the information they hold about you.

What data do I collect and how do we use it?

Depending upon your use of My Locations, I may process some or all of the following personal data which you provide to me or which you decide should be made available to me by your health professional.

What I store

My Reasons (Legal Basis)

What I use the data for

Name, email, address, telephone number. 

Contractual necessity

I need this information as a minimum in order to process your orders and bookings and to issue

reminders and schedule Changes; or to notify you of changes to classes that you have already booked ,such as cancellations or waiting list changes.

Email address and telephone number

Consent (email only)

supplying you with email marketing communications that you have opted into to keep you informed of special offers, promotions and new events.

Legitimate Interests

1) Enhancements to My services: Such as changes to pricing and schedules or new services

2) Satisfaction surveys: In order to improve My service to you I may send you a short satisfaction survey.  I may also contact you to discuss feedback or complaints.

Date of Birth

Legitimate interests

For health and safety reasons under 14s cannot practice yoga and currently, I do not offer classes to children.  I also need this information to tailor practices to you.

Gender

Contractual necessity or legitimate interests

For the purposes of tailoring your yoga practices.

Details of your interactions with me through My Locations. For example, I  may collect notes from my conversations with you, details of any complaints or comments you make, and how and when you contact me.

Legitimate interests

Keeping my records up to date, handling my customer contacts efficiently and effectively, choosing yoga that is appropriate for you

Health and/or medical information  (special category data)

Consent

To enable Me to assess your suitability for the yoga offering and to safeguard your health.  I ask for your consent to process this data in m student registration form.  You can withdraw it at any time but it may affect the service I can give you.

Details of your visits to My Site including IP address, web browser and version, operating system, and which website referred you to mine.

Legitimate interests

Improving customer experience and interaction with My Site. 

 

I do not have access to or visibility of any financial account information that you provide via the BookWhen booking system.

I do not make any decisions about you based on automated processing.

 

Third party services and how we share your data

I contract with third parties to supply products and services to you either as data controllers in their own right of processors, acting on My behalf. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, I will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, My obligations, and the obligations of the third party under the law. 

I use the following third party data processors:

BookWhen – BookWhen is an online booking system on My Site which assists with scheduling of classes and to assist you in making a booking.  BookWhen collect your personal data on my behalf and use sub-processors that may be based outside of the EU or other authorised or designated jurisdictions (for the purposes of the DPGL) in providing services to me.  BookWhen apply safeguards to any such data transfers and details of such safeguards can be applied for by emailing me at the contact details below. BookWhen stores all data in servers and backup servers located in the EU.

The following Bookwhen auto emails are considered operational (meaning you will receive them even if you have opted out of all communication preferences):
-Appointment Confirmation
-AutoPay Failed Notification
-Client Schedule
-Forgot Login Information
-Gift Card Delivery Email
-Purchase Receipt

MailChimp – I use MailChimp to send you e-mail communications and store your sign-up/opt-in data for all promotional emails. You can opt-out of these emails at any time by clicking the unsubscribe link at the bottom of every email. 

I may also from time to time share personal data with other data controllers to provide my services to you, in accordance with the DPGL. Furthermore, if you use PaylPal to pay me or Zoom to join a class, they are data controllers and have their own privacy notices about how they control your personal data and you should consult those notices for more information.

How long I keep your information

If I collect your personal information, the length of time I retain it is determined by a number of factors, including the business purpose for which I use that information and my obligations under law.  I generally retain your information through BookWhen for 18 months from your last booking except where I need it for the establishment, bringing or defending of legal claims or the law requires Me to hold your personal information for a longer period or delete it sooner.

You may exercise your right to have the information erased (where it applies) and I do not need to hold it in connection with any of the reasons permitted or required under the law.

 

Cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.  I use traffic log cookies to identify which pages are being used. This helps Me analyse data about web page traffic and improve My Site in order to tailor it to customer needs. I only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help Me provide you with a better website, by enabling Me to monitor which pages you find useful and which you do not. A cookie in no way gives Me access to your computer or any information about you, other than the data you choose to share with me.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of My Site.

 

Your rights

You have the following rights under the DPGL:

·         right to access personal data – you have the right to request information about the personal data I hold on you at any time;

·         right to portability – whenever I process your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to me;

·         right to rectification – you have the right to request rectification of your personal data if the information is incorrect;

·         right to erasure – you have, in certain circumstances, the right to erase any personal data processed by Me at any time;

·         right to restrict My processing of personal data in certain circumstances.

Complaints

If you have any cause for complaint about My use of your personal data, please contact Me at info@leoniecorfield.com in the first instance in order that I can investigate thoroughly.

Should you find the response unsatisfactory, you also have the right to lodge a complaint with Guernsey’s supervisory authority, the Office of the Data protection Authority, by calling +44 1481 742074.

Children’s Privacy  

My Service does not address anyone under the age of 18 (“Children”). 

I do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided me with Personal Data, please contact me via info@leoniecorfield.com.

 

January 2021