I am a controller for the purposes of your personal data. This is the data which you provide me when booking, when creating an account on this website, when signing up to my newsletter and in sessions. Some of this data will be collected via this website which is operated by Wix. 

​

The legal basis for me collecting and using this data is: 

• It is necessary for the performance of the contract I have with you 

• Your consent ie you have agreed that I can use your personal data for certain purposes eg my newsletter. 

​

I will only ever use your personal data for the purpose for which I collected it.

​

I do not retain your personal data from your booking form or sessions once you are no longer a client, unless required for a legal, tax or accounting purpose, in which case I will retain it no longer than reasonably necessary. I will retain your personal data from my newsletter and member’s account until you unsubscribe or delete your account respectively. Both these actions can be done by you at any time. You may unsubscribe from this at any time by clicking the link in the newsletter. You may email info@gracesmyth.co.uk if you wish to delete your account. I may retain your data for longer than set out here in the event of a complaint by you or if I reasonably believe there is a prospect of litigation between us. 

​

I have prepared a DPIA in respect of the two health-related questions on your booking forms, in recognition of this as special category data.  

​

I will not share your personal data nor will I transfer it outside the UK.

​

My services are not for children and I do not knowingly collect the personal data of children.

 

I have put in place appropriate security measures to prevent your personal data from being accidentally lost or accessed in an unauthorised way.  

​

You have the following rights: 

• to request access to your personal data 

• to request correction of your personal data 

• to request erasure of your personal data  

• to request the transfer of your personal data to you or a third party 

• to withdraw your consent at any time where that is my basis for processing your data 

• to request restriction of processing your personal data 

​

Please use the email info@gracesmyth.co.uk should you wish to exercise any one of these rights. Please also use this email if you wish to complain although you also have the right to complain to the ICO at any time. Please keep me informed, again via this email, if your personal data changes.