UK Data Protection Act Compliance
Data collection takes place in compliance with The Data Protection Act 2018, the UK General Data Protection Regulation (GDPR) implementation.
References to the ‘Data Subject’ refer to a client. References to the ‘Service’ refer to the services offered under https://www.justbe-holistic.com/services.
1. Categories of Personal Data processed
a. Contact Data: name, address, e-mail address, telephone, any further contact information sent by the Data Subject
b. Sensitive Data: health-related data, family-related data, and any other data disclosed by the Data Subject
c. References to ‘Personal Data’ refer to both Contact Data and Sensitive Data
2. Legal basis
a. Personal Data is collected with the consent of the Data Subject
b. Adequate measures are taken to ensure the security of Personal Data against unlawful or unauthorised processing, access or loss
c. Personal Data will be used solely to:
i. Contact the Data Subject
ii. Carry out the Service to the highest attainable standard
3. Personal Data Retention period
a. Personal Data will be kept to fulfil the purposes for which it was collected, detailed in 2.c.
b. The Storage Period is defined as 6 calendar years from the most recent time the Service was delivered
c. At the end of the Storage Period, all Personal Data will be deleted or stored in a form that does not allow the identification of the Data Subject
4. Location
a. No Personal Data will be transferred outside of the UK
5. Upholding the Rights of the Data Subject
a. Rights of the Data Subject
i. be informed about the processing of their Personal Data
ii. withdraw consent at any time
iii. stop or restrict the processing of their Personal Data
iv. access their Personal Data
v. have incorrect Personal Data updated
vi. have Personal Data erased
vii. to object to how your data is processed in certain circumstances
b. Data Subjects may exercise their rights by sending a request to the following e-mail address: info@justbe-holistic.com
i. Requests relating to rights under 5.a. will be responded to and processed as soon as possible and, in any case, within 30 days