We are committed to safeguarding the privacy of our website
visitors and business customers. We recognize that our business
inherently works with sensitive personal data, and we are
committed to ensuring that all of our website visitors and
business customers are comfortable with our use of your data,
and that such data is appropriately handled.
This policy applies where we are acting as a data controller
with respect to the personal data of such persons; in other
words, where we determine the purposes and means of the
processing of that personal data.
We will never publish your personal data or share with third
parties unless given explicit permission in writing. When you
send data through the bookings request form, you provide consent for
us to reference and store that data as is required to schedule
appointments and perform the appropriate services. When you send
data through the testimonials submission form, you provide consent
for us to reference and store that data; as well as to publish said
data if you provide consent for such in the form submission. If you would
like us to delete any/all data we have for you, please email
mindbodysoullondon@gmail.com with the phrase "PERSONAL DATA
DELETION REQUEST" in the subject line of the email.
We use cookies on our website. Insofar as those cookies are not
strictly necessary for the provision of our website and services,
we will ask you to consent to our use of cookies when you first
visit our website.
In this policy, "we", "us" and "our" refer to Mirum Vita. For more
information about us, see Section 13.
In this Section 3 we have set out the general categories of
personal data that we process.
We may process data enabling us to get in touch with you
("contact data"). The contact data may include your name,
email address, telephone number, and/or social media account
identifiers. The source of the contact data is you, when it
is submitted through the form on the bookings section of
the website.
We may process information contained in or relating to any
communication that you send to us or that we send to you
("communication data"). The communication data may include
information on mental and/or physical issues you are facing,
data regarding your weekly schedule, and progress you have
made thanks to our service. Our website will generate metadata
associated with communications made using our contact forms.
We may process data about your use of our website and services
("usage data"). The usage data may include your IP address,
geographical location, browser type and version, operating system,
referral source, length of visit, page views and website navigation
paths, as well as information about the timing, frequency and
pattern of your service use. The source of the usage data is a
combination of cookies and Amazon Cloudfront, our CDN.
We will never collect payments or transaction data through our website.
Any payments related to the services we provide will be processed externally.
4. Purposes of Processing and Legal Bases
In this Section 4, we have set out the purposes for which we may
process personal data and the legal bases of the processing.
Operations - We may process your personal data for the
purposes of operating our website, providing our services, generating
invoices, bills and other payment-related documentation, and credit
control. The legal basis for this processing is our legitimate
interests, namely the proper administration of our website, services
and business OR the performance of a contract between you and us
and/or taking steps, at your request, to enter into such a contract.
Publications - We may process your personal data
for the purposes of publishing such data on our website in accordance
with your express instructions. The legal basis for this processing
is consent. This processing will only take place with your express
consent and instructions.
Relationships and Communications - We may process
contact data, communication data, and/or usage data for the
purposes of communicating with you by email, SMS, and/or
telephone, providing support services and complaint handling.
The legal basis for this processing is consent.
Direct Marketing - We may process contact data,
communication data, and/or usage data for the purposes of creating,
targeting and sending direct marketing communications by email,
SMS, and making contact by telephone for marketing-related purposes.
The legal basis for this processing is consent.
Research and Analysis - We may process usage data
for the purposes of researching and analysing the use of our website
and services. The legal basis for this processing is our legitimate
interests, namely monitoring, supporting, improving and securing
our website, services and business generally.
Record Keeping - We may process your personal data
for the purposes of creating and maintaining our databases, back-up
copies of our databases and our business records generally. The
legal basis for this processing is our legitimate interests, namely
ensuring that we have access to all the information we need to
properly and efficiently run our business in accordance with this policy.
Security - We may process your personal data for the
purposes of security and the prevention of fraud and other criminal
activity. The legal basis of this processing is our legitimate
interests, namely the protection of our website, services and
business, and the protection of others.
Insurance and Risk Management - We may process
your personal data where necessary for the purposes of obtaining
or maintaining insurance coverage, managing risks and/or obtaining
professional advice. The legal basis for this processing is our
legitimate interests, namely the proper protection of our business
against risks.
Legal Claims - We may process your personal data
where necessary for the establishment, exercise or defence of legal
claims, whether in court proceedings or in an administrative or
out-of-court procedure. The legal basis for this processing is our
legitimate interests, namely the protection and assertion of our
legal rights, your legal rights and the legal rights of others.
Legal Compliance and Vital Interests - We may also
process your personal data where such processing is necessary for
compliance with a legal obligation to which we are subject or in
order to protect your vital interests or the vital interests of
another natural person.
5. Providing Your Personal Data to Others
Your personal data submitted through the bookings and/or
testimonial submission forms will be stored on the
servers of our email provider, Google mail.
In addition to the above disclosure of personal data, we may
disclose your personal data where such disclosure is
necessary for compliance with a legal obligation
to which we are subject, or in order to protect your vital
interests or the vital interests of another natural person.
We may also disclose your personal data where such disclosure
is necessary for the establishment, exercise, or defence of
legal claims, whether in court proceedings or in an administrative
or out-of-court procedure.
6. International Transfers of your Personal Data
In this Section 6, we provide information about the circumstances
in which your personal data may be transferred to countries
outside the United Kingdom and the European Economic Area (EEA).
The hosting facilities for our website are provided by Amazon Web
Services and are situated in the United Kingdom (UK). We employ a
CDN to speed up the serving of the website, which does store website
data around the world; however this data is only the data used to
display the website and does not include any personal data, unless
you have given express consent for this data to be shown on our website.
After submitting data using either of the website forms, your personal
data is sent to our Google e-mail account (mindbodysoullondon@gmail.com).
Google servers are situated around the world. The competent data
protection authorities have made an "adequacy decision" with respect
to the data protection laws of each of the applicable countries.
Transfers to each of these countries will be protected by appropriate
safeguards, which are implemented by Google. Further detail regarding
Google's privacy policies can be found at
https://workspace.google.com/security/?secure-by-design_activeEl=data-centers
.
After submitting data using either of the website forms, your personal
data is sent through a service called EmailJS which allows us to
forward your information to our email address without running our
own server. EmailJS is not a UK nor EEA based company. Your data
will not be stored on EmailJS servers. If you would prefer for
none of your personal information to be sent through EmailJS, you
can alternatively directly contact mindbodysoullondon@gmail.com
with the same information as is requested on the relevant form.
You acknowledge that personal data that you submit for publication
through our website or services may be available, via the internet,
around the world, when given express permission. We cannot prevent
the use (or misuse) of such personal data by others.
7. Retention and Deletion of Personal Data
This Section 7 sets out our data retention policies and procedures,
which are designed to help ensure that we comply with our legal
obligations in relation to the retention and deletion of personal data.
Personal data that we process for any purpose or purposes shall
not be kept for longer than is necessary for that purpose or
those purposes.
We will retain your personal data as follows:
Contact data will be retained for a minimum period of one
month following the date of the most recent contact between
you and us, and for a maximum period of one year following
that date;
Transaction data will be retained for a minimum period of
one month following the date of the transaction, and for a
maximum period of one year following that date;
Communication data will be retained for a minimum period of
three months following the date of the communication in
question, and for a maximum period of one year following that
date, and;
Usage data will be retained for five years following the date
of collection, and will be fully anonymised after the first
six months of this period.
Notwithstanding the other provisions of this Section 7, we may
retain your personal data where such retention is necessary for
compliance with a legal obligation to which we are subject, or
in order to protect your vital interests or the vital interests
of another natural person.
8. Your Rights
In this Section 8, we have listed the rights that you have under
data protection law.
Your principal rights under data protection law are:
the right to access - you can ask for
copies of your personal data;
the right to rectification - you can
ask us to rectify inaccurate personal data and to
complete incomplete personal data;
the right to erasure - you can ask
us to erase your personal data;
the right to restrict processing - you
can ask us to restrict the processing of your personal data;
the right to object to processing -
you can object to the processing of your personal data;
the right to data portability - you can ask
that we transfer your personal data to another organisation
or to you;
the right to complain to a supervisory authority
- you can complain about our processing of your personal data, and;
the right to withdraw consent - to the extent
that the legal basis of our processing of your personal data is
consent, you can withdraw the consent.
You may exercise any of your rights in relation to your personal
data by written notice to us, using the contact details set out below.
9. About Cookies
A cookie is a file containing an identifier (a string of letters
and numbers) that is sent by a web server to a web browser and
is stored by the browser. The identifier is then sent back to
the server each time the browser requests a page from the server.
Cookies may be either "persistent" cookies or "session" cookies:
a persistent cookie will be stored by a web browser and will
remain valid until its set expiry date, unless deleted by the
user before the expiry date; a session cookie, on the other
hand, will expire at the end of the user session, when the web
browser is closed.
Cookies may not contain any information that personally identifies
a user, but personal data that we store about you may be linked
to the information stored in and obtained from cookies.
10. Cookies Which We Use
We use cookies for the following purposes:
Personalisation - we use cookies to
store information about your visits to our website and to
personalise our website for you;
Analysis - we use cookeis to help us analyse
the use and performance of our website and services, and;
Cookie Consent - we use cookies to store your
preferences in relation to the use of cookies more generally.
11. Managing Cookies
Most browsers allow you to refuse to accept cookies and to delete
cookies. The methods for doing so vary from browser to browser,
and from version to version. You can however obtain up-to-date
information about blocking and deleting cookies via these links:
Blocking all cookies will have a negative impact upon the usability
of many websites.
If you block cookies, you may not be able to use all
features on our website.
12. Amendments
We may update this policy from time to time by publishing a new
version on our website.
You should check this page occasionally to ensure you are happy
with any changes to this policy.
13. Our Details
This website is owned and operated by Mirum Vita.
Mirum Vita is owned and operated by Meredith Wall;
Our website is run and maintained by Amber Adams, and;
Assistance with our website and our services is provided
by Karis Denieffe-George.
You can contact us by email at mindbodysoullondon@gmail.com.
For personal data concerns, please include the phrase
"PERSONAL DATA" in the subject line of the email.
For other inquiries, please include a descriptive subject
line and as much information as possible within the body
of the email so that we are able to get back to you as
quickly and accurately as possible.
