Shamanic Facilitator and Smoker of the Sacred Bee
GDPR – PRIVACY NOTICE
What is the purpose of this notice?
To describe how we collect and use personal data about you in accordance with the General Data Protection Regulation (GDPR).
What I need
Spirit Unleashed will be what’s known as the “Controller” of the personal data you provide to us. I only collect basic personal data about you which does not include any special categories of personal information about you (known as Special Category Data). This does however include name, address, e-mail and telephone number.
Why I need it
I need to know your basic personal data in order to send you information about my workshops, events, classes and any relevant newsletters. I will not collect any personal data from you I do not need to provide and oversee this service to you.
What I do with it
I only ever use your personal data with your consent, or where it is necessary:
- to comply with a legal duty
- to protect your vital interests
- for our own lawful interests, provided your rights don’t override these.
In any event, I will only use your information for the purpose or purposes it was collected for (or for closely related purposes).
I may process personal information for certain legitimate business purposes, which include some or all of the following:
- where the processing enables me to enhance, modify, personalise or otherwise improve my services/communications for the benefit of my clients
- to identify and prevent fraud
- to enhance the security of my network and information systems
- to better understand how people interact with our websites
- to provide postal communications which I think will be of interest to you
- to determine the effectiveness of promotional campaigns and advertising.
Whenever we process data for these purposes we will ensure that we always keep your personal data rights in high regard and take account of these rights at all times.
When we process your personal data for my legitimate interests, I will make sure that I consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws. My legitimate business interests do not automatically override your interests – I will not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You have the right to object to this processing if you wish, and if you wish to do so email: firstname.lastname@example.org . Please bear in mind that if you decline this will affect my ability to contact you with my events, workshops, training and classes.
Where I keep it
I am based in the UK and I store my data on my iPad which has a secure password to access. This is kept with paper copies of data in my office and my work studio which is locked and secure, located on my personal home premises.
How long I keep it
I will only use and store information for so long as it is required for the purposes it was collected for. How long information will be stored depends on the information in question and what it is being used for. For example, if you ask me not to send you marketing e-mails, I will stop storing your e-mails for marketing purposes (though I will keep a record of your preference not to be e-mailed).
I continually review what information I hold and delete what is no longer required. I will not retain your data for any longer than necessary and the longest time that we will hold your data will be six years.
What are your rights?
I want to ensure that you remain in control of your personal data. Part of this is making sure you understand your legal rights, which are as follows:
- the right to confirmation as to whether I have your personal data and, if I do, to obtain a copy of the personal information we hold (this is known as a data subject access request)
- the right to have your data erased
- the right to have inaccurate data rectified
- the right to object to your data being used for marketing or profiling; and
- where technically feasible, you have the right to personal data you have provided to me which I process automatically based on your consent.
Please keep in mind that there are exceptions to the rights above and, though I will always try to respond to your satisfaction, there may be situations where we are unable to do so.
If you are not satisfied with my response or believe I am processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection issues.