Policies

Privacy Policy & GDPR Statement

Roundwood Wellbeing takes personal data security seriously. This Privacy Policy applies to personal data that we (Roundwood Wellbeing) collect from you as a customer from this website. It explains what data we collect, why we collect the data, how it is used and the lawful basis on which your personal data is processed under data protection and privacy laws, including the General Data Protection Regulation (GDPR).

If you have any questions about this policy, please contact Georgina Watts on Georgina@roundwoodwellbeing.co.uk

Roundwood Wellbeing may change this policy by updating this page. Please check this page from time to time to ensure you are kept informed of any changes.

We will never share or sell your personal data. We do not use direct marketing agents. Your data is only used when it is necessary to facilitate the delivery of services such as a booking your Reiki treatment, Reiki Course, Nia Class or Workshop. This website collects your name and email address through the Enquiry and Booking Forms. We use return e-mail addresses to answer e-mails we receive. Such addresses are not used for any other purpose and are not shared with outside parties.

On booking your Reiki treatment, Reiki course, Nia class or Nia Workshop you will be asked to provide additional personal data. The processing of this additional data is subject to strict policies that will be made available at the time of the Reiki Treatment, Reiki Course, Nia Class or Workshop. All your personal information is kept in strictest confidence and never shared with a third party without your written consent unless it is to comply with a legal obligation.

You may request the details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of this information, please email Georgina Watts on georgina@roundwoodwellbeing.co.uk.

Security

We are committed to ensuring that your information held with us is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. 

YOUR DATA PROTECTION RIGHTS

If the processing of your personal data is subject to GDPR, you have the following rights in relation to your personal data:

Right of access: If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data along with certain other details. If you require additional copies, we may need to charge a reasonable fee.

Right to rectification: If your personal data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your personal data with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your personal data so you can contact them directly.

Right to erasure: You may ask us to delete or remove your personal data, such as where our legal basis for the processing is your consent and you withdraw consent. If we shared your data with others, we will tell them about the erasure where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your personal data with so you can contact them directly. We may continue processing personal data where this is necessary for a legitimate interest in doing so, as described in this Privacy Policy.

Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it. We will tell you before we lift any restriction on processing. If we shared your personal data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your personal data so you can contact them directly.

Right to data portability: You have the right to obtain your personal data from us that you consented to give us or that was provided to us as necessary in connection with our contract with you. We will give you your personal data in a structured, commonly used and machine-readable format. You may reuse it elsewhere.

Right to object: You may ask us at any time to stop processing your personal data, and we will do so:

If we are relying on a legitimate interest to process your personal data — unless we demonstrate compelling legitimate grounds for the processing or

If we are processing your personal data for direct marketing.

Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing of your data before we received notice that you wished to withdraw your consent.

Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your personal data, you can report it to the UK data protection authority (the Information Commissioner’s Office or ICO), or, as the case may be, any other competent data protection authority of an EU member state that is authorised to hear those concerns.