Privacy Policy
INTRODUCTION
Secret Essence Health & Beauty Clinic is firmly committed to the security and protection of Personal Information of our Users and their contacts. This privacy policy (”Privacy Policy”) describes how Secret Essence Health & Beauty Clinic will collect, use, share and process Personal Information.
We respect your rights to privacy and to the protection of your personal information. The purpose of this privacy notice is to explain how we collect and use personal information for the provision of our services and the day to day running of our business.
THE INFORMATION WE MAY COLLECT AND PROCESS FROM YOU
To allow us to provide our services and to run our business, we collect and process various categories of personal data from you which you volunteer when you provide such personal data to us, or via our services with which you interact. We may also be given other personal data relating to you by other persons, or we may obtain such other personal data about you as may be provided to us in the course of our legitimate business activities.
We may collect and process data, including the following in the course of providing services to you, which could contain your personal data: your full name; your address; your various email addresses; your various phone numbers including mobile phone numbers; your nationality; your address; financial information about you, including your bank account details, credit card details, or other payment details; details of contracts you have entered with third parties for us to provide services to you; details of your relationship to other parties; details of your membership of professional or other organisations; your date of birth; details of your children and other relations and all other Data which you ask us to process on your behalf, or which is necessary for us to process in order for us to fulfil our role as providing our services to you.
SECURITY AND WHERE WE STORE YOUR PERSONAL DATA
We are committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access and use. As effective as modern security practices are, no physical or electronic security system is entirely secure. We cannot guarantee the complete security of our databases, nor can we guarantee that information you supply will not be intercepted while being transmitted to us over the Internet. We will continue to revise policies and implement additional security features as new technologies become available.
All records (e.g. Name and contact details/photos) are stored on Audrey O’Meara’s electronic devices (such as laptop/phone/ipad) and all devices are protected with passwords only known to the user – Audrey O’Meara.
The transmission of information via the internet is not completely secure and may involve the transfer of data to countries outside of the European Economic Area (EEA). This occurs typically through use of cloud solutions for web hosting, email hosting or proprietary software solutions delivered to us through the Cloud. We do not however authorise any third party to use your personal data for their own purposes. Non EEA countries may not provide an adequate level of protection in relation to processing your personal data. By submitting your data, you agree to this transfer, storing and processing.
Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to us. Any transmission of data is at your own risk. Once we receive your personal data, we use appropriate security measures to seek to prevent unauthorised access.
WHO HAS ACCESS TO YOUR RECORDS AND WHY
Sinéad Carroll is the only person who has access to your records directly. In all cases where a third party is involved (Stripe, Paypal, Mailchimp), Audrey O’Meara has ensured that these companies are fully compliant with GDPR.
We may also be required under law to surrender records to a legal authority. We will inform you of any such request unless it is forbidden by law.
Please understand, it is not possible to treat you or to deliver the services and products you request, if we cannot hold any records on you at all.
HOW WE USE YOUR PERSONAL DATA
We use your personal data that we hold to:
In our legitimate interest of advertising our services, provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes (our list of services below); carry out our obligations arising from any contracts entered into between you and us; in our legitimate interest of advertising our services, provide details of any loyalty scheme or promotion; comply with legislation; and/or notify you about changes to our services.
We may use your data to send you information relating to our services, events and products which may be of interest to you. If you do not want us to use your data in this way, please notify us to that effect.
Some jurisdictions may not have adequate safeguards for the protection of personal data, and where this is the case we comply with Chapter 5 of the General Data Protection Regulation (“GDPR”) to provide an alternative method of safeguarding your personal data.
LINKS TO OTHER SITES
Our website may, from time to time, contain links to and from other websites. If you follow a link to any of those websites, please note that those websites have their own privacy policies and that we do not accept any responsibility or liability for those policies. Please check those policies before you submit any data to those websites.
Your rights
As an individual, under EU law you have certain rights to apply to us to provide information or make amendments to how we process data relating to you. These rights apply in certain circumstances and are set out below: –
1. The right to access data relating to you (‘access right’).
2. The right to rectify/correct data relating to you (‘right to rectification’).
3. The right to object to processing of data relating to you (‘right to object’).
4. The right to restrict the processing of data relating to you (‘right to restriction’).
5. The right to erase/delete data relating to you (i.e. the “right to erasure/ right to be forgotten”).
6. The right to ‘port’ certain data relating to you from one organisation to another (‘right to data portability’).
The controller for the purposes of GDPR is Secret Essence Health & Beauty Clinic
MARKETING INFORMATION
Subject to the marketing preferences you have indicated to us, we will send you relevant marketing information which we believe may be of interest to you, by mail, phone, email, text and other forms of electronic communication. If you change your mind about how you would like us to contract you our you no longer wish to receive this information, you can tell us at any time by contacting us at secretessencehealthandbeauty@gmail.com
CHANGES TO THIS POLICY
We reserve the right to change this Policy from time to time in our sole discretion. If we make any changes, we will post those changes here so that you can see what information we gather, how we might use that information and in what circumstances we may disclose it. By continuing to use our site or our services or otherwise provide data after we post any such changes, you accept and agree to this Policy as modified.
Contact Us
Questions, comments, requests and complaints regarding this Policy and the information we hold are welcome and should be addressed to us at insert secretessencehealthandbeauty@gmail.com All requests will be dealt with promptly and efficiently.
Please e-mail any questions, concerns or comments you have about our Policies to secretessencehealthandbeauty@gmail.com