Bloom Wellness Centre - CLIENT DATA PROTECTION NOTICE MAY 2018

This Bloom Wellness Centre Client Data Protection Notice (the “Notice”) sets out the personal data that we collect and process about BLOOM WELLNESS CENTRE Clients, the purposes of the processing and the rights that you have in connection with it.

Types of personal data we collect

In the course of your SERVICES with BLOOM WELLNESS CENTRE, we may process personal data about you. The types of personal data we process include, but are not limited to:
* Identification data e.g. name, gender, Client number

* Contact details e.g. home address, telephone/email, Skype ID

* CONSULTANTION notes from calls or meetings

Sources of personal data

Usually you will have provided the information we hold about you but there may be situations where we collect personal data about you from other sources, namely social media or other sources.

Purposes for processing personal data

BLOOM WELLNESS CENTRE collects and uses your personal data primarily for the purpose of managing our relationship with you.

BLOOM WELLNESS CENTRE may also collect and use personal data when it is necessary for other legitimate purposes, such as to help us conduct our business more effectively and efficiently – for example, for IT security/management, accounting purposes, or financial planning.

BLOOM WELLNESS CENTRE may also use your personal data where we consider it necessary for complying with laws and regulations, including collecting and disclosing Client personal data as required by law, under judicial authorization, or to exercise or defend the legal rights of the BLOOM WELLNESS CENTRE.

Monitoring

BLOOM WELLNESS CENTRE will carry out automated monitoring of its IT and communications systems through automated tools such as anti-malware software, website filtering and spam filtering.

Monitoring activities are likely to be continuous and ongoing. However, they will always be proportionate, for legitimate purposes, and as required or permitted by applicable law. Before undertaking any monitoring activities, we will consider your reasonable expectations of privacy and assess whether there are any less invasive options.

You should be aware that any message, files, data, document, facsimile, telephone connection metadata and fees, social media post or instant message communications, or any other types of information transmitted to or from, received or printed from, or created, stored or recorded on our IT and communications systems and assets are presumed to be business-related and may be monitored by us in accordance with applicable law.

Who we share personal data with

BLOOM WELLNESS CENTRE will not share your personal data with any third party except in the below circumstances.

Regulatory bodies and institutes we are part of may, at times, conduct audit of the BLOOM WELLNESS CENTRE to ensure it maintains the standards and may wish to contact clients of the company to ensure those standards are enforced. In those cases, explicit permission from the Client will be sought.

We may disclose personal data to other Third Parties on other lawful grounds, including:

• To comply with our legal obligations, including where necessary to abide by law, regulation or contract, or to respond to a court order, administrative or judicial process, or to meet national security or law enforcement requests, including, but not limited to, a subpoena or search warrant;

• As necessary to establish, exercise or defend against potential, threatened or actual litigation;

• Where necessary to protect the vital interests of another legal entity or natural person; • In connection with the sale, assignment or other transfer of all or part of our business.

Transfer of personal data outside of the EEA

BLOOM WELLNESS CENTRE operates in the UK and offers services globally depending on where the clients are located. We will take steps to ensure that any data exports comply with applicable laws, e.g. via EU Standard Contractual Clauses.

Data retention periods

Personal data will be stored for one year after the end of the relationship between the Client and BLOOM WELLNESS CENTRE.

During our relationship, your personal data is stored and on encrypted hard disks that do not leave the premises of BLOOM WELLNESS CENTRE. No data is kept on shared drives of any kind, including “Cloud”.

Your data protection rights

If BLOOM WELLNESS CENTRE is relying on your consent to process your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of the processing before its withdrawal.

You further have the right to lodge a complaint with a supervisory authority about our collection, processing and use of your personal data.

Updates to this Notice

This Notice may be updated periodically to reflect any necessary changes in our privacy practices. Where such changes will materially affect your privacy rights, we will inform you by a prominent notice on the corporate websites and indicate at the top of the Notice when it was most recently updated. We encourage you to check back on this Notice periodically so that you are aware of the most recent version of it.

Questions and comments

You can address any questions or comments relating to this Notice to info@bloomwellnesscentre.com.

You have a right to lodge any complaints with a data protection supervisory authority.