GDPR Privacy Policy | Lisa Hillier Fitness

BACKGROUND:

This Policy sets out the obligations of Lisa Hillier Fitness regarding data protection and the rights of users in respect of their personal data under the General Data Protection Regulation (“the Regulation”).

Definitions and Interpretation
1. 1. In this Policy, the following terms shall have the following meanings:
    1. 1. “personal data”means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to me.
      2. “Me” means Lisa Hillier Fitness.
Information About Me
1. 1. The Data Protection Officer is Lisa Hillier and can be contacted by email at lisahillier74@gmail.com or by telephone on 07782 100376.
  2. Lisa Hillier Fitness is a Sole Trader.
  3. Lisa Hillier Fitness is not a registered company.
  4. My website address is: www.lisahillierfitness.co.uk
What Does This Policy Cover?
1. 1. This Privacy Policy applies only to personal data that you have supplied to me.

Your Rights
1. 1. As a user of Lisa Hillier Fitness, you have the following rights under the GDPR, which this Policy and my use of personal data have been designed to uphold:
    1. 1. The right to be informed about my collection and use of personal data;
      2. The right of access to the personal data I hold about you;
      3. The right to rectification if any personal data I hold about you is inaccurate or incomplete;
      4. The right to be forgotten – i.e. the right to ask me to delete any personal data I hold about you; The right to restrict (i.e. prevent) the processing of your personal data;
      5. The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);
      6. The right to object to me using your personal data for particular purposes; and
      7. Rights with respect to automated decision making and profiling.
  2. If you have any cause for complaint about my use of your personal data, please contact me using the details provided in section 9 and I will do my best to solve the problem for you. If I am unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.
  3. For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

What Data Do I Collect?
1. 1. I collect the personal data from you that you provide me, regardless of the form in which this data is provided. I do not use any other means of data collection.
How Do I Use Your Data?
1. 1. Your data will be processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was collected. I will comply with my obligations and safeguard your rights under the GDPR at all times. For more details on security see section 7, below:
  2. Your data will be used to enable me to communicate with you about relevant news regarding my fitness classes.
  3. Your data is not supplied to third parties.
  4. Emails received from you will be retained for up to two years but will be deleted immediately after use if you request this preference.
  5. You have the right to withdraw your consent to Lisa Hillier Fitness using your personal data at any time, and to request that I will delete it.
How and Where Do I Store Your Data?
1. 1. I keep your personal data for as long as you remain an active regular of my fitness classes in order to use it as described above in section 6.
  2. Two years after this time, or immediately upon notification of death of a member or a request to be forgotten, all personal data will be deleted.
  3. Data stored in hard copy form and on computers used for processing will be located in secure UK workplaces designed to prevent access by unauthorised personnel.
  4. Computers and data files will be password protected.
  5. Computer data files and backup files may be located in the cloud in encrypted form on computers residing outside of the UK.
How Can You Access Your Data?
1. 1. You have the right to ask for a copy of any of your personal data held by me. Under the GDPR, no fee is payable and we will provide any and all information in response to your request free of charge.

Contacting Me

If you have any questions about this Privacy Policy or wish to exercise any of your rights under GDPR, please contact me using the contact details in section 2 above.

Changes to my Privacy Policy

I may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on my website and recommend therefore that you access this site from time to time to ensure that you agree to any changes.