Privacy Policy
Your privacy is very important to us and you can be confident that your personal information will be kept safe and secure and only used for the purpose it was provided. We adhere to current data protect legislation, including the General Data Protection Regulation (EU/2016/679) (the GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003.
This privacy notice tells you what we will do with your personal information from initial point of contact through to after your relationship with Therapy Space Cardiff has ended, including:
- Why we are able to process your information and what purpose we are processing it for
- Whether you have to provide it
- How long it is stored for
- Whether there are other recipients of your personal information
- Whether we intend to transfer it to another country,
- Whether we do automated decision-making or profiling, and
- Your data protection rights.
We are happy to chat through any questions you might have about our data
protection policy and you can contact us via email at therapyspacecardiff@gmail.com.
'Data controller' is the term used
to describe the person/organisation that collects and stores and has
responsibility for people's personal data. In this instance, the data
controller is Kate Graham of Therapy Space Cardiff.
We are registered with the Information Commissioner's Office, registration ref. ZB932365.
Our lawful basis for holding and using your personal information
The
GDPR states that we must have a lawful basis for processing your
personal data. There are different lawful bases depending on the stage
at which we are processing your data. This is explained below:
- If you have rented a room with us and this agreement has now ended, we will use legitimate interest as our lawful basis for holding and using your personal information.
- If you are currently renting a room from us or if you are in contact with us to consider renting a room, we will process your personal data where it is necessary for the performance of our contract.
How we use your information
Initial contact
When
you contact us with an enquiry about room rental we will
collect information to help us satisfy your enquiry. This will include
your name and email address.
If you decide not to proceed we will
ensure all your personal data is deleted within one month. If you would
like us to delete this information sooner, just let us know.
While you are renting the rooms
We will keep a record of your personal details to
help the room rental run smoothly. These details are kept
securely and are not shared with any third party.
Any
email correspondence is retained for the duration of you accessing the rooms. It is stored in a password protected email
account.
After the room rental has ended
Once your room rental has ended your records will be kept for three years from the
end of our contact with each other and are then securely destroyed. If
you want us to delete your information sooner than this, please tell us via email.
Third party recipients of personal data
I
sometimes share personal data with third parties, for example, where we have contracted with a supplier to carry out specific tasks. In such
cases we have carefully selected which partners I work with. We take great
care to ensure that we have a contract with the third party that states
what they are allowed to do with the data we share with them. We ensure
that they do not use your information in any way other than the task for
which they have been contracted.
Your rights
We try to be as open as we can be in terms of giving people access to their
personal information. You have a right to ask us to delete your
personal information, to limit how we use your personal information, or
to stop processing your personal information. You also have a right to
ask for a copy of any information that we hold about you and to object to
the use of your personal data in some circumstances. You can read more
about your rights at ico.org.uk/your-data-matters.
If we do hold information about you, at your request we will:
- give you a description of it and where it came from;
- tell you why we are holding it, how long we will store your data and how we made this decision;
- tell you who it could be disclosed to;
- let you have a copy of the information in an intelligible form.
You can also ask us at any time to correct any mistakes there may be in the personal information we hold about you.
To
make a request for any personal information we may hold about you,
please put the request in writing addressing it to therapyspacecardiff@gmail.com.
If you have any complaint about how we handle your personal data please do not hesitate to get in touch with us by emailing to the contact details given above. We would welcome any
suggestions for improving our data protection procedures.
If you want
to make a formal complaint about the way we have processed your personal
information you can contact the ICO which is the statutory body that
oversees data protection law in the UK. For more information go to
ico.org.uk/make-a-complaint.
Data security
We take the security of the data we hold about you very seriously and as
such we take every effort to make sure it is kept secure. We use encrypted
devices for all digital records. Only we have access to this
information.
Visitors to the website
When
someone visits this website, we use a third party service, webnode.com, to
collect standard internet log information and details of visitor
behaviour patterns. We do this to find out things such as the number of
visitors to the various parts of the site. This information is only
processed in a way that does not identify anyone. We do not make, and do
not allow webnode.com to make, any attempt to find out the identities of
those visiting the website.
We use legitimate interests as our lawful basis for holding and using your personal information in this way
when you visit the website.
No user-specific data is collected by us or any third party. If you fill in a form on the website, that data will be temporarily stored on the web host before being sent to us.