Aryanisha Lawes (sole trader – “us”, “we”, “our”) operates the website www.aryanisha.com.
This Privacy Notice tells you how we will use and store the information you give us when you book a course or event with us or choose to join one of our mailing lists. Please note: The wording in this document reflects the requirements of the General Data Protection Regulation (GDPR), which came into effect in the UK on 25 May 2018.
Data Controller: Aryanisha Lawes
We collect and processe personal data relating to individuals accessing their services in order to manage the relationship between us and the individual. We are committed to being transparent about how it collects and uses that data and to meeting its data protection obligations.
What information does we collect?
We collect and process a range of information about you when you access our services. This information may be collected in a number of ways. For example, data might be collected in person, via email or via the website when you book on an event or course, or request to receive publicity and information from us.
Data may be stored in a range of different places, including:
• On virtual database and secure backup disks,
• In financial records,
• On other IT systems (including our website database, email system, Gmail account, Ticket Tailor and Mailchimp database)
This data may include:
• Name, address, contact details, including email address, phone number, emergency contact details.
• Information about events booked
• Mailing and marketing preferences.
Our website also collects information about your use of our website including IP address, how much time you spend on the site and what you like to view from general visitors to the site. This data is used solely to manage the website, track usage and improve our website services. This information does not identify the user personally and may be shared with third-parties to provide more relevant services, for example with google analytics
Why do we process personal data?
We have a legitimate interest in processing personal data before, during and after you use our services. Processing data from individuals who use our services allows us to:
• Manage the booking process;
• Make future bookings quicker and easier to make and to process;
• Inform you of changes to courses or events and send out course materials;
• Manage payments
• Contact relevant groups about events
• Manage booking reservations
• Manage your marketing and unsubscribe preferences
• Contact you about other courses or events that you may be interested in
We may use your email address to send you information regarding our workshops, courses, offers and events. However, we will only do so if you have given us your permission. If you change your mind at a later date simply click on the word ‘Unsubscribe’ on the relevant email newsletter.
We will not use your data for any purposes other than those stated in this policy.
Who has access to data?
Your information may be shared internally for the purposes of the running activities. This includes, when appropriate, event organisers and teachers for the performance of their roles.
We will only share your data with third parties in the following cases
• MailChimp where subscribed to one or more of our mailing lists,
• Gmail – where you have requested to be contacted about activities
• Paypal / Stripe where payments have been made via online bookings.
• Ticket Tailor for debit and credit card transactions
The server that hosts our website and email, and the Mailchimp and Google Mail servers are situated in the United States, so your data may be transferred outside the European Economic Area in these cases. These hosts adhere to the EU-US and Swiss-US Privacy Shield Frameworks which comply with General Data Protection Requirements.
MailChimp may process your data in the following ways: collecting data such as via sign-up forms; storage of personal data within our MailChimp account in order to allow us to create and use distribution lists, send marketing email campaigns, and place online advertisements; and the transfer of personal data to certain of MailChimp’s sub-processors who perform some critical services, such as helping MailChimp prevent abuse and providing support to customers.
We will never sell or trade your personal data or disclose your personal information to any third party unless we believe that disclosure is necessary to conform to legal requirements, to protect our rights, to protect the safety of members of the public or those attending our events, or for data processing purposes as stated above relating to website and email hosting.
How do we protect data?
We take the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except as described above.
For how long does the organisation keep data?
We will hold your personal data for the duration of your use of our services, until you ask us to remove you from our systems or withdraw your consent. Once you withdraw your consent or ask to be removed from our system, your data is deleted or destroyed.
As a data subject, you have a number of rights. You can:
• Access and obtain a copy of your data on request; (procedure available from reception)
• Require us to change incorrect or incomplete data;
• Require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
• Object to the processing of your data where we are relying on its legitimate interests as the legal ground for processing.
If you would like to exercise any of these rights, please contact us.
If you believe that we have not complied with your data protection rights, you can complain to the Information Commissioner.
What if you do not provide personal data?
You are under no statutory or contractual obligation to provide data to us during your use of our services. However, if you do not provide the information, we may not be able to process your bookings or marketing preferences properly or at all.
Certain information, such as contact details and information requested for bookings, and mailing lists, have to be provided to enable us to provide you with access to our services. If you do not provide some of this information, it may hinder our ability to provide you with our services and to enter into a relationship with you.
Our data processes are not based on automated decision-making.
We may collect information about the software on your computer (your browser version etc.) and your IP address (your connection with the internet) to improve your interaction with the Website and for our records. This may happen automatically without your being aware of it.