GDPR and Data Protection

GDPR and Data Protection
Original Version:
December 2023
Next Review Date: December 2024

 

Introduction

Wellbody Wellmind Wellbeing are committed to protecting and respecting your privacy.

This Policy explains when and why we collect personal information about Individuals and Businesses we work with, how we use it, the conditions under which we may disclose it to others and how we keep it secure.

We may change this Policy from time to time so please check this page occasionally to ensure that you are happy with any changes.  By using our services, you are agreeing to be bound by this Policy.

Any questions regarding this Policy and our privacy practices should be sent by email to Wellbody Wellmind Wellbeing Charity.

 

How do we collect information from you?

  • We may collect information about you when you email us directly or use our website to contact us about our programmes
  • If you register to receive one of our newsletters
  • If you make a donation to Wellbody Wellmind Wellbeing

 

What type of information is collected from you?

We currently hold personal information in order to provide our services as contracted with you/ your employer. This could include some or all of the following

  • Identifying Information – name
  • Contact Information – email address, phone number
  • Professional Information – Job Title, CV / BIO, Company Grade or Level,
  • Employment start date, department/ function, location (where you are based),
  • contract type, working hours, performance rating, income level
  • Ethnicity Information – nationality, ethnicity
  • Physical Characteristics – age, gender, disability
  • Religion, sexual orientation, education level

 

How is your information used?

The information we hold will be used principally to allow people to attend our activities. In carrying out these services we may do one or more of the following:

  • We may use your details so that we can communicate with you by email or phone
  • We may use information when enlisting people onto our activities.
  • We may use personal information in order to provide organisational research and case studies to promote Wellbody Wellmind Wellbeing
  • We may also use your contact details to send you communications such as our newsletter which you have either requested and that may be of legitimate interest to you.

 

Lawful Basis for Processing

When we collect any personal data from you, as in line with GDPR laws, we will always determine the lawful basis for collecting/processing this data using the six available lawful bases for processing mentioned below.

  • Consent: the individual has given clear consent for you to process their personal data for a specific purpose
  • Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract
  • Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations)
  • Vital interests: the processing is necessary to protect someone’s life
  • Public task: the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law
  • Legitimate interests: the processing is necessary for your legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests (This cannot apply if you are a public authority processing data to perform your official tasks.)

 

How long do we keep your personal data?

  • The information we use to communicate with you will be kept until you notify us that you no longer wish to receive information from us or you want us to delete your personal data.
  • Any personal data that we hold will be kept in line with the requirements of the contract, or if the contract has not detailed this we will hold the data until we are requested to delete it.

 

What we don’t do with your personal information

  • We do not use any automated decision-making systems relating to your personal data
  • We do not sell your data to any third party
  • We do not transfer your data to any parties other than the participant group for particular programmes or other contractors agreed with you first.
  • We do not use your data for any purposes other than those agreed in our contract

 

Who do I contact if I have an issue with or question about the personal information that you hold about me?

If you would like to know what personal data we have about you, what our lawful basis for processing this information is, or you would like us to remove your personal data from our system please get in touch at www.wellbodywellmindwellbeing.co.uk and put GDPR in the subject line.

 

Security and Protection

  • The personal information we hold is stored and processed securely in line with the UK government’s guidelines
  • Your personal information is held and processed in the UK

 

Policy Monitoring and Review

Wellbody Wellmind Wellbeing acknowledges that this Policy is a working document and is under regular review.

The trustees will constantly monitor and update and review the Policy as appropriate