Privacy Policy |

Introduction 

Nicola St Paul trading as Breathing Mindful Coaching is a sole trader whose address is [2 Silbury Close, Reading, Berkshire, RG31 7BQ ] (‘we’, ‘our’, ‘us’ in this privacy statement). 

Breathing Mindful Coaching is responsible for collecting, processing, storing and safe-keeping personal and other information as part of providing a service and carrying out our regular business activities. We manage personal information in accordance with data protection legislation including the Data Protection Act 2018 and we are registered as a Data Controller with the Information Commissioner’s Office Registration Number [ZB523695].  

Any questions regarding our processing of personal data should be directed to us via info@breathingmindful.co.uk. 

 

Data processing principles 

We take protecting online privacy and data security seriously. Please read the whole of this statement carefully as it sets out our approach to processing personal data including what information we may collect from you, how we may use it, store it and protect it, and your rights as a data subject. 

Our Privacy Statement outlines our approach to any kind of data processing where we are acting as a data controller or co-controller (including collection, use, transfer, storage and deletion) of personally identifiable information (any information that may be used to identify a physical person, and any other information associated therewith) about natural persons. This statement applies to our processing of data collected through any means, actively as well as passively, from persons located anywhere in the world.  

We are guided by the following principles when processing data: 

  • We will only collect data for specific and specified purposes; 
  • We will not collect data beyond what is necessary to accomplish those purposes; we will minimise the amount of information we collect from you to what we need to deliver the services required; 
  • We will collect and use your personal information only if we have sensible business reasons for doing so, such as making available to you our services and products; 
  • We will not use your data for purposes other than those for which it was collected, accepted as stated within our policy, or with your prior consent; 
  • We will seek to verify and/or update your data periodically and we will accept requests from you for amendment of the data held; 
  • We will apply high technical standards to make our processing of data secure; 
  • Except otherwise stated, we will not store data in identifiable form longer than is necessary to accomplish its purpose or as required by law.  

 

How we collect and use personal data 

Most personal information is provided directly and voluntarily by you when you engage with us in order to enquire about, or purchase, our services or products. We will collect information from you when: 

  • You sign up to our newsletter or mailing list; 
  • You book onto a course, event or programme we are running; 
  • You contact us for information via our website or social media channels, by phone or email; 
  • You post on our social media channels, website or blog; 
  • You work with us in a commercial capacity. 

We collect this information in order to make available to you our services or products and to communicate with you in relation to our services or products. We may use the information collected to: 

  • Allow us to process a booking for a product or service which you purchase from us; 
  • Create a profile for you on our client database; 
  • Send you our newsletters and/or provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes;  
  • Respond to enquiries you make about our services or products; 
  • Ask you to take part in surveys or quiz events; 
  • Allow you to access and utilise the service or product you have purchased from us; 
  • Notify you about changes to our services or products; 
  • Get feedback from you regarding the quality of our services or products. 

We will not sell or lend your personal data to third parties, or share your personal data for marketing purposes without your express consent. We will only share your personal data with third party service providers where it is necessary for the delivery of our products or services, and only where we are confident that and such third party service providers have appropriate data protection systems and measures in place that are compliant with UK Data Protection Legislation.  

We will not give consent to third party service providers or platforms to use your information, including audio and video recordings, for purposes, other than those for which the information was collected and which are necessary for the delivery of our products and services. We will not give consent for your information to be used by third party service providers for the training and development of AI modelling software, or similar purposes. 

 

What information we collect 

In accordance with Data Protection Legislation we only collect and process information which we require to meet the specific purposes as stated above. The information we may collect about you could include, but is not limited to: 

  • Contact details; 
  • Personal details and identifiers; 
  • Bank details and financial information; 
  • Details about your occupation and business; 
  • Details about your lifestyle and social circumstances; 
  • Your aspirations and career ambitions; 
  • Personal development goals and targets; 
  • Details about how you use our website including technical data such as IP address. 

Occasionally we may ask for special category data if necessary for delivery of a particular service or product, such as medical information. Any such special category data will only be collected with your express consent and will be handled in line with ICO best practice guidelines for special category data. As per our Data Processing Principles we will only ask for information that is necessary to deliver our services, and therefore we encourage you not to provide us with personal data or special category data which we do not ask for. 

 

How we store your information 

We have in place appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data we control. Your information is securely stored on our company cloud storage database which is not publicly accessible or stored in any public domain – it is accessible to our employees and affiliates only, and is password protected.  

We may store or process your data on cloud based platforms or service providers whose servers are based outside of the UK. We will only use such third party service providers where we are confident that appropriate safeguards are in place to ensure that any personal data is subject to an equivalent level of security and protection as required under UK Data Protection Legislation. 

We also have in place appropriate procedures to handle any potential Personal Data Breaches, in accordance with Data Protection Legislation. Any such breaches will be reported to the relevant supervisory authority and notified to the affected data subjects where we are legally required to do so. 

Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted. 

Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes. 

Legal basis for processing your data 

The General Data Protection Regulation (GDPR) provides that processing of your data shall only be lawful if and to the extent that at least one of the following applies: 

  • You have consented; 
  • For the performance of a contract; 
  • For compliance with a legal obligation which we must perform; 
  • To protect the vital interests of your or another person; 
  • It is in the public interest; 
  • It is in the legitimate interests pursued by us or a third party. 

We collect data for the purposes set out above. All personal data is managed to ensure that it is either erased from our system when it is no longer required for the purpose for which it was collected, retained for legal reasons or minimised and retained.  

Any special category data collected from you has special protection and is limited to that permissible by law. In all instances where special category data is collected we will obtain your express consent. 

Marketing emails 

We may send you marketing emails and communications when you have opted in or otherwise given consent for us to do so. We will make it as easy as we can for you to opt out of unwanted processing, providing it does not restrict our ability to provide you with the primary service you have requested.  

Please note if you wish to unsubscribe from any marketing emails that you have signed up for, you can do so by emailing [info@breathingmindful.co.uk]. It may take 24 hours for this to become effective. 

 

Changes to our policy & future processing  

We do not intend to process your personal information except for the reasons stated within this privacy notice. If this changes, this privacy notice will be amended, and placed on our webpage at www.breathingmindful.co.uk/rest_and_rise

We continually review our privacy practices and may change our policy and privacy statement from time to time. When we do this, an amended privacy statement will be placed on our webpage at www.breathingmindful.co.uk/rest_and_rise

This privacy notice was first published on 1st Aug 2023 and last updated on 05 Jan 2024. If you have any questions or concerns regarding our data protection or privacy policies, please contact us at info@breathingmindful.co.uk and we will be happy to respond to any concerns. 

Should you still have concerns about the way in which we manage your personal data then you should contact the relevant supervisory authority, which in the UK is the Information Commissioner’s Office: Contact us | ICO