Who we are
We are a small business specialising in teaching sewing techniques to adults and children. We have an open and transparent approach to data protection. We believe that you should be able to control what happens to your personal information, we meet our obligations as a data controller, and we respect your rights as a data subject.
Our website is thestudioatnumber30.co.uk
Our email address is firstname.lastname@example.org
Information we collect
We collect the personal information of candidates, including:
Such as: name, email, telephone and home address
Such as: medical history
Where we get your personal information from
- Uploads to our website
- Emails from you to us
- Telephone conversations between you and us
- Messages via our social media pages
How we use your personal information
We use your information for health and safety purposes whilst you are with us in the studio and for contacting you to promote courses and workshops, which we feel, may be of interest to you.
Contact and Communication
We will contact you via email to discuss your course or workshop or any other queries that you may have.
With your consent, we will periodically send you an email newsletter containing news plus details of courses and workshops, which we believe may be of interest to you.
If you do not wish to receive the newsletter, you can update your email preferences by using the “Unsubscribe” link found in emails we send to you. Alternatively, you can contact us by email or telephone and let us know that you do not wish to receive it.
Users contacting us through the website do so at their own discretion and provide any personal details at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use. When completing a “Contact Us” form your contact information will be recorded in a customer management system (CMS) and kept securely online in accordance with guidelines. Your details are not shared with third parties.
Our website complies with the DPA (Data Protection Act 1998) and with GDPR (General Data Protection) May 2018. We will update this policy accordingly after the completion of the UK’s exit from the European Union.
If three years have elapsed since our last contact with you, we may contact you to ensure that the information we hold about you is accurate.
Who we share your information with
We have a legitimate interest in sharing your information with any institution that we deem to have trusted and relevant links to our business.
We share your information with the following after obtaining your explicit permission to do so via your registration form.
Our EMS (email marketing service) is: Mailchimp We will not swamp you with emails, but if you have registered with us, then we will occasionally use Mailchimp to send out information.
If you book a course online via our website we use PayPal to complete the transaction.
Our payment gateway is SQUARE. We use this to process payments both in the studio and online.
Cookies are small files saved to a user’s computer’s hard drive that track, store and save information about the user’s interaction and usage of the website. This in turn allows the website, through its server to provide the user with a tailored experience within this website. Users are advised that if they wish to deny the use and saving of cookies from our website on to their computers hard drive they should take the necessary steps within their web browser security settings to block all cookies from the website and its external serving vendors or use the cookie control system if available upon their first visit.
We will never post a photograph of you or your child without your written permission as requested on our registration form. We adopt a Social Media Policy to ensure my business and anyone working with me conducts themselves accordingly online. While I may have official profiles on social media platforms users are advised to verify authenticity of such profiles before engaging with or sharing information on social media platforms. I will never ask for user’s passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media. There may be instances where my website features social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use social sharing buttons at your own discretion and accept that doing so may publish content to your social media profile or page.
Our studio is protected with a Nest Cam. This camera takes video footage 24/7 of the internal parameters of the studio and its visitors. This footage is stored on the cloud for a short period of time after which it is deleted. This footage can also be accessed for any child protection issues and parents registering their children with us must accept this within these terms and conditions. Footage from this camera is never viewed or used for any purpose other than any child protection issues or breaches in security.
If you would like to read the privacy policies of any of the above companies, please click on the highlighted words above.
How long do we keep your personal information?
We retain your information for up to five years following our last contact with you.
We have put reasonable and appropriate security measures in place to protect against the loss, misuse and alteration of the personal information that we process. The data is hosted in a secure server environment that uses a firewall and other advanced technology to protect against interference or access from outside intruders. We password protect all our sensitive data and allow only authorised individuals access to the computer.
You have the right to access the information that we hold about you, to know how we process it, to have inaccurate information corrected, to ask us to restrict what we do with your information, to object to us processing your information, to ask us to transfer your information in an electronic form to a third party and to ask us to erase your information. If you ask us to erase your information, we will store just enough information to ensure that we don’t re-add your details in the future.
To exercise your rights, send an email to email@example.com or telephone us on 07717097005
Lawful basis for processing
Notwithstanding your rights detailed above, we do not rely directly on your consent to process your personal information. We have a legitimate interest in processing the information that you have provided to us, to a third party or put into the public domain to find employment or promote your career.
How to complain
If you think your information has been misused or that we haven’t kept it secure, you should contact us and tell us or contact our data protection officer by sending an email to firstname.lastname@example.org
If you’re unhappy with our response or if you need any advice you should contact the Information Commissioner’s Office (ICO) ico.org.uk/concerns