Privacy Notice
Jilly's House of Yoga
Address:
Flinders Cottage, Harrowbarrow, Cornwall PL17 8JH
Introduction
This notice describes how I collect, store, transfer, and use personal data. It tells you about your privacy rights and how the law protects you. In this context, 'personal data' refers to information that clearly identifies you as an individual or could identify you when combined with other information. This notice applies to personal data collected through social media platforms and yoga classes, both online and face-to-face (e.g., Facebook, Instagram, and Zoom). Except as outlined below, I do not share, sell, or disclose your personal information to any third party.
Personal Data We Process
​
How I Obtain Personal Data
The information I process includes:​
-
Information you provide directly to me
-
Information gathered from monitoring how you use my services
​​
Types of Personal Data I Collect Directly
When you use my services or make a purchase, I ask for personal data, including:​
-
Personal identifiers (e.g., first and last name, title, date of birth)
-
Contact information (e.g., email address, telephone number, postal address)
-
Payment details (e.g., debit/credit card number, expiry date, bank account details)
-
Records of communication between us (e.g., emails, messages, phone calls)
Personal Data Collected from Third Parties
I may verify some information you provide using data from other sources to:​
-
Confirm your identity
-
Add or update contact details
-
Assess the quality of services
Types of Data from Service Usage
I process data related to:​
-
Transaction details of products/services purchased
-
Preferences regarding marketing communications
-
Responses to my services
Aggregated Data
I may aggregate anonymous information for statistical purposes. If combined with your personal data, it is treated as personal data and handled according to this privacy notice.
Special Personal Data
I do not collect sensitive data, except specific health information declared by you in questionnaires or during sessions.
​
Failure to Provide Personal Data
If you fail to provide personal data required by law or contract, I may not be able to fulfil that contract and might stop providing services to you.
The Legal Basis for Processing Your Data
The law requires us to determine under which legal bases we process your personal data. These include:
1. Contractual Obligation
When you purchase services from me, I must process your personal data to fulfil the contract, including verifying identity and providing services.
​
2. Consent
In some instances, I process personal data based on your explicit consent, such as when you request more information about my services. You can withdraw your consent at any time by contacting me at jillyshouseofyoga@gmail.com.
3. Legitimate Interest
I may process data if it benefits both you and me, such as improving services or preventing fraud.
4. Legal Obligation
I may need to process personal data to comply with a legal obligation, such as providing information to legal authorities.
5. Vital Interests
In cases where someone's life is at risk, I may process data to protect vital interests, such as reporting safeguarding concerns.
How and When I Process Your Data
Your data is not shared with any third parties except in the following circumstances:
-
If you publicly share information via social media platforms
-
If it is necessary for resolving disputes
-
When legally required, such as to fulfil statutory obligations
Payment Information
I store your payment details securely and limit access to authorised personnel only. For security reasons, I only show partial details when referencing your payment methods.
Disputes Between Users
In the event of a dispute, I may share your basic personal data with the other party to help resolve the issue.
Your Rights
You have the right to access, update, or delete your personal data at any time. To make such requests, contact me at jillyshouseofyoga@gmail.com. I may need to verify your identity before taking any action.
Complaints
If you are unhappy with this privacy policy or have a complaint, please contact me. Should the issue remain unresolved, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint.
Retention Period
I retain your personal data only for as long as is necessary to:
-
Provide services
-
Comply with legal obligations
-
Support legal claims
Compliance with the Law
This privacy policy complies with UK law, including the Data Protection Act 2018, the EU GDPR, and the Privacy and Electronic Communications Regulations (PECR).
Review of This Privacy Policy
I may update this privacy notice as necessary. The latest version was updated on 2nd September 2022 by Jill Buxton.