The Yard Privacy Charter
In this Privacy Charter we set out how we collect, manage and protect your personal information. We also set out the rights you have to control and manage the personal information that we hold about you.
As you read this Privacy Charter, please keep in mind that it applies to The Yard’s business activities. The individual businesses and therapists that use our space are responsible for managing the data that they hold.
We have tried to keep this Privacy Charter as simple as possible. If you have any questions after reading this document, please email firstname.lastname@example.org.
What is Personal information and what do we collect?
Personal information is information that does or may identify you.
You do not have to share your personal information with us, but if you choose not to, we may not be able to provide you with information on our products and activities.
We may collect your personal information in a variety of ways, including:
- the information you provide when you place an order or make a purchase;
- the information you provide when you ask about our products, activities, therapies and promotions;
- the information you provide when you sign up for classes that take place at The Yard, whether The Yard @ Gracelands or The Yard on the Rise.
Some of the personal information we collect may be sensitive information. This might include information about your race or health. We will only collect this information with your explicit consent. See more about sensitive information below.
Personal information from other sources
We collect personal data from other sources including trusted brand partners and where we operate an account on third-party platforms such as Twitter, Facebook and Instagram.
Additionally, we receive information about you and other visitors’ interactions with our advertising to measure whether our advertising is relevant and successful. We also collect information about you and your activities from a third party when we jointly offer services or products.
When we collect use Sensitive Information
Sensitive information falls into a special category of personal information. This includes information relating to your health, race, sexuality or ethnicity.
We only collect sensitive information in limited circumstances which include:
- When you raise a specific enquiry through our customer services team
We may also collect sensitive data implicitly through your browsing or purchasing habits, or through you contacting us directly. For example, we may gain an indirect insight into wellbeing matters that are of clear interest to you.
At The Yard, we do not directly market to children. Our website is designed and intended for use by adults.
When we collect personal data about a child, ie for the administration of children’s activities or music lessons, this will always be with consent from a parent or guardian.
How we use your personal information
We only collect, process and disclose your personal information for specific and limited purposes. These include:
- to administer any order you have placed with us;
- to administer any competition that you may have entered;
- to send you The Yard blog;
- to provide you with information about The Yard activities, products and offers that we believe will be of genuine interest to you;
- to direct you to content within our site that we think is relevant to you;
- to provide tailored product recommendations and targeted advertising based on what you have shared with us;
- to allow you to participate in any interactive features, survey or quizzes on our site;
- to answer any inquiry you may send to us;
- to authenticate that we are talking to the right person should we need to get in touch with you.
Where required, we will obtain your consent to process your personal information. Where you have given consent, you may withdraw your consent at any time. Please see withdrawing consent.
How we share your personal information
We do not sell/share your personal information to/with any third party.
We would share your personal information only when we are legally required to disclose it. This includes:
- to comply with a legal obligation;
- when we believe in good faith that an applicable law requires it;
- at the request of governmental authorities conducting an investigation;
- to verify or enforce any other policy relating to this website;
- to detect and protect against fraud, or any technical or security vulnerabilities;
- to respond to an emergency situation.
How we protect your personal data
We take the security of your personal information very seriously. We take every effort to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure.
Our measures include implementing appropriate access controls, investing in appropriate IT security and ensuring that we encrypt and pseudonymise or anonymise personal information wherever possible.
Receipts with any personal data will always be kept in a locked filling cabinet.
Access to your personal information is only permitted among our employees and agents on a need-to-know basis and subject to strict contractual confidentiality obligations when processed by third parties.
How long do we keep your personal information for?
We will keep your personal information for as long as we need it for the purpose it is being processed for. For example, where you have purchased one of our products online, we will keep your personal information related to the purchase so we can perform the specific contract you have entered. After which, we will keep the personal information for a period which enables us to handle or respond to any complaints, queries or concerns relating to the purchase.
Your personal information may also be retained so that we can continue to offer you access to events and activities at The Yard.
[??We will actively review the personal information we hold and delete it securely, or in some cases pseudonymise or anonymise it, when there is no longer a legal, business or consumer need for it to be retained.]
Your rights as a data subject
This is a summary of your rights relating to the personal information we hold about you.
The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. Therefore, we’re providing you with the information in this Privacy Charter.
The right to access and rectification. You have the right to access, correct or update your personal information at any time. We understand the importance of this. Should you want to exercise your rights, please contact us on email@example.com.
The right to data portability. The personal information you have provided us with is portable. This means it can be moved, copied or transmitted electronically under certain circumstances.
The right to be forgotten. Under certain circumstances, you have the right to request that we delete your personal information. If you wish to delete the personal information we hold about you, please let us know and we will take reasonable steps to respond to your request in accordance with legal requirements. If the personal data we collect is no longer needed for any purposes and we are not required by law to retain it, we will do what we can to delete, destroy or permanently de-identify it.
The right to restrict processing. Under certain circumstances, you have the right to object to certain types of processing, including processing for direct marketing (ie receiving emails from us notifying you of events, activities or product availability at The Yard).
The right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint directly with any local Supervisory Authority about how we process our personal information.
The right to withdraw consent. If you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time by contacting us at firstname.lastname@example.org.
Rights related to automated decision-making. You have the right not to be subject to any decision that is based solely on automated processing in certain circumstances.
If you wish to contact us about your personal information, including where you wish to withdraw consent or restrict certain processing activities, please email email@example.com.
We will update this Privacy Charter from time to time to reflect feedback, legal requirements and changes to our products or services.
21st May 2018