Privacy Policy
This privacy policy describes how Mer-mummies (‘we’ and ‘us’) collect, retain, use and store your information when you (whether you are a person or a business) interact with Mer-mummies via our website and booking software.
Mer-mummies is fully compliant with the General Data Protection Regulations (GDPR). We process personal client data to facilitate the booking of our classes and courses. We do not share any data we hold with third parties.
OUR WEBSITE
We collect very little information from the viewers’ visits to our website. Absolutely no personal information is collected from our visitors. The website statistics gathered by our web hosting company records server requests only, e.g. the IP address and date of visit. This is similar to every other server on the web.
OUR BOOKING SOFTWARE
Our client data is stored via a secure third-party cloud software application whose privacy policy is available upon request. ( Data we collect from you to book our classes and courses:
- Your name
- Telephone numbers (usually you’re mobile)
- Email addresses
- Medical history for you
OUR MAILING LISTS
Our mailing lists are stored via secure third-party cloud email clients whose privacy policies are available upon request. Data stored in these applications contain the following information only:
- First name
- Last name
- Email address
- Due Date/ Birth date of baby
We keep the number of communications we send to a minimum, and will only send you information related to the following:
- Booking confirmations and reminders
- Payment receipts
- Offers and promotions
ONLINE PAYMENTS/DIRECT BANK TRANSFERS
Mer-mummies use a third party secure payment system (Stripe) to process payment via a secure booking system (Acuity scheduling powered by square space), a copy of their privacy policy are available on their websites.
OUR LAWFUL BASIS FOR PROCESSING YOUR DATA
When you join as a member or contact us via email or social media we may ask permission to store your details in our booking software and mailing lists.
For all customers who are attending classes and courses, we store, retain and use your data to provide the services agreed with us.
For lapsed customers, we may from time to time, send you communications about our products and services which we believe you have a legitimate interest in receiving. You can opt-out of these communications at any time.
SPECIAL CATEGORY DATA
Mer-mummies does not collect special category data in the course of its routine operations. Following the COVID-19 pandemic, HM Government requires businesses to collect data for their Test & Trace scheme.
Our risk assessment recognised the need to ask health screening questions to help make the face to face classes COVID secure. This data is defined as Special Category Data as it concerns the health of staff and customers.
Our lawful basis for processing this data under Article 9 of GDPR is (i) Public health (with a basis in law). We delete all data once any services provided are ceased
PROTECTING YOUR DATA
Your data is stored via a small number of third-party cloud software applications. Each provider has separate security and privacy policies, copies of which are available upon request by contacting Mer-mummies.
Any internal data we hold is stored either on our hardware or via cloud storage. All our internal systems are password-protected, and user access is restricted.
DATA RETENTION
We do not hold your data any longer than is necessary to provide you with our services or to comply with applicable law. We would expect to retain, store and use your data for the lifespan of your journey with us, or for the duration of any classes and courses you attend.
While we do not place a specific timeframe on the retention of our data, we periodically review our records to edit, archive or delete data we deem surplus to requirements.
Mer-mummies is also required, by law, to retain financial information relating to its business practices for up to 7 years.
YOUR RIGHTS
Under the GDPR you have the following rights:
- to be provided with access to your personal data held by us;
- to request the rectification or erasure of your personal data held by us;
- to object to the collection of your data and request that we cease processing your data;
- to request that we restrict the processing of your personal data while we investigate your concerns with this information;
- to object to solely automated processing; and
- to request that your data be transferred to a third party (data portability).
We will not use any personal information obtained via this website, our booking software or mailing lists for any purpose other than that stated when the data is collected. We adhere to the terms of the GDPR and take the security and value of any information you supply us very seriously. We will not share your information with any third party unless required to do so by legal requirement.
CONTACT
This is the website of Mer-mummies, a business in England If you wish to request any information about your personal data or believe that we are holding incorrect personal data on you the please contact clare@mermummies.com. You may also request a copy of this data at any time.
NOTIFICATION OF CHANGES
This privacy policy was last updated on 8/7/2021. We reserve the right to amend or vary this policy at any time and the revised policy will apply form the date posted. You accept that by doing this we have provided to you with sufficient notice of the amendment or variation.