Privacy Policy for Peaceful Practice
At Peaceful Practice, we are committed to protecting your privacy and handling your personal data with transparency and respect. This Privacy Policy outlines how we collect, use, store, and disclose your personal information in compliance with UK and EU data protection regulations, including the General Data Protection Regulation (GDPR). By using our services or interacting with our website, you agree to the terms of this policy. We encourage you to read it carefully to understand our practices regarding your data.
Our Commitment to Your Privacy
Your trust is paramount to us. Peaceful Practice ensures that your personal data is processed lawfully, fairly, and transparently. We only collect data that is necessary for the provision of our services and for legitimate business purposes. We maintain robust security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. Our team is regularly trained on data protection best practices, ensuring a high standard of care for your personal data.
This policy is designed to be clear and easy to understand, providing you with comprehensive information about your rights and our responsibilities. Should you have any questions or concerns after reading this policy, please do not hesitate to contact us using the details provided at the end of this document.
What Data We Collect
We collect various types of personal data to provide and improve our services. The specific data collected depends on how you interact with Peaceful Practice. Below is an overview of the categories of data we may collect:
- Identity Data: Includes first name, last name, title, date of birth, and gender.
- Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
- Financial Data: Includes payment card details (processed securely by third-party payment processors, we do not store full card details).
- Transaction Data: Includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: Includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: Includes information about how you use our website, products, and services.
- Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
- Health Data: For certain services, such as yoga or wellness classes, we may collect information about your physical health, medical conditions, or injuries to ensure your safety and tailor our services appropriately. This is considered sensitive data and is handled with the utmost care and explicit consent.
We collect data through direct interactions (e.g., when you register, book a class, or contact us) and automated technologies (e.g., through cookies and server logs when you browse our website).
How We Use Your Data
We use the data we collect for various purposes, all aimed at providing you with the best possible service and experience. Your data is used only when we have a legal basis to do so, such as fulfilling a contract, legitimate interests, or your explicit consent.
Service Provision & Management
- To register you as a new customer and manage your account.
- To process and deliver your class bookings and purchases.
- To manage payments, fees, and charges, and collect money owed to us.
- To provide customer support and respond to your inquiries.
- To send you service messages and updates regarding your bookings.
Website Improvement & Personalization
- To improve our website, products, and services based on your usage.
- To personalize your experience on our website and recommend relevant content or classes.
- To conduct data analysis, testing, research, statistical, and survey purposes.
- To ensure content is presented in the most effective manner for you and for your device.
Marketing & Communications
- To send you marketing communications about our services, offers, and news, where you have opted in to receive them.
- To measure and understand the effectiveness of the advertising we serve to you.
- To communicate with you about updates to our terms or privacy policy.
Safety & Legal Compliance
- To ensure your safety during classes, especially when sensitive health data is provided with consent.
- To comply with legal obligations, regulatory requirements, and to protect our legal rights.
- To detect and prevent fraud or other illegal activities.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
How We Protect Your Data
The security of your personal data is a top priority for Peaceful Practice. We implement a variety of technical and organisational measures to protect your information from unauthorised access, use, disclosure, alteration, or destruction.
- Encryption: Data transmitted to and from our website is encrypted using SSL/TLS technology.
- Access Controls: Access to your personal data is restricted to employees who have a legitimate business need to access it, and they are subject to strict confidentiality obligations.
- Data Minimisation: We only collect and retain personal data that is necessary for the purposes for which it is processed.
- Regular Audits: Our systems and processes are regularly reviewed and updated to ensure ongoing data security.
- Third-Party Security: We carefully select third-party service providers who also adhere to strict data protection standards and are GDPR compliant.
- Physical Security: Our physical premises and infrastructure are secured to prevent unauthorised access.
Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the unlikely event of a data breach, we have procedures in place to address it promptly and notify you and relevant regulatory authorities as required by law.
Your Rights Regarding Your Data
Under UK and EU data protection laws, you have several important rights concerning your personal data. Peaceful Practice is committed to facilitating the exercise of these rights:
Right to Access
You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure ('Right to be Forgotten')
You have the right to request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we restrict the processing of your data in certain situations, for example, if you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
Right to Withdraw Consent
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.
To exercise any of these rights, please contact us using the details provided in the "Contact Us for Privacy Concerns" section. We will respond to your request within one month, in accordance with GDPR requirements.
Cookies Policy
Our website uses cookies to enhance your browsing experience, analyze site traffic, and personalize content. Cookies are small text files placed on your device when you visit a website. They help us understand how you interact with our site, remember your preferences, and improve our services.
Types of Cookies We Use:
- Strictly Necessary Cookies: Essential for the website to function correctly (e.g., enabling secure login).
- Analytical/Performance Cookies: Allow us to count visitors and see how they move around our website, helping us improve its functionality.
- Functionality Cookies: Used to recognize you when you return to our website, personalize content, and remember your preferences.
- Targeting Cookies: Record your visit to our website, the pages you have visited, and the links you have followed. We use this information to make our website and the advertising displayed on it more relevant to your interests.
You have the right to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the website. For more detailed information, please refer to our dedicated Cookie Policy.
Third-Party Links & Changes to This Policy
Third-Party Links
Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit. This Privacy Policy applies only to information collected by Peaceful Practice.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Your continued use of our services after any modifications to this Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
Last updated: 1st January 2024
Contact Us for Privacy Concerns
If you have any questions or concerns about this Privacy Policy, our data practices, or if you wish to exercise any of your data protection rights, please do not hesitate to contact our Data Protection Officer. We are here to help and ensure your privacy is respected.
Contact Information:
Company Name: Peaceful Practice
Address: 17 Kensington High Street, London, W8 5NP, United Kingdom
Phone: +44 20 4567 8901
Email: [email protected]
Working Hours: Mon-Fri: 9:00-17:00, Sat: 10:00-14:00