Leeds Mindfulness Cooperative Privacy Policy

Date of last revision 07/09/20

Who we are

Leeds Mindfulness Cooperative CIC takes the issue of your privacy seriously. If you have any questions concerning our privacy policy that are not addressed here, please contact us at info@mindfulnesscoop.co.uk.

You can report safeguarding concerns to our safeguarding officer Helen Doherty at LMCsafeguarding@gmail.com

Our postal address is:

Leeds Mindfulness Cooperative

20 Lilac Grove

Leeds LS5 3AG

Our website address is: https://mindfulnesscoop.co.uk.

What personal data we collect and why we collect it

We collect information you provide such as name, contact details (address, telephone number, email address), level of experience and previous courses attended for which you gave your consent when booking on an event or signing up for our email newsletter. You are not required to provide this information except when booking or registering on a course, workshop or making any other online purchase. We use your contact details so that we can contact you in case of issues with changes to classes, payment and similar circumstances and to send you our newsletter. We use your banking details to process payments and donations you have made us and to send you a receipt for such payments.

We may use your email address to send periodic email newsletters regarding our classes, offers and events. However, we will only do after your course finishes or after your initial enquiry if you have given us your permission. If you change your mind at a later date simply click on the word ‘Unsubscribe’ on the email newsletter.

If you book or take part in a drop-in session or course we may collect sensitive health information in order to check that our services are appropriate for you, to adapt our services to your needs and for safeguarding purposes.

We may also collect information about your use of our website including IP address, how much time you spend on the site and what you like to view, from both registered users and general visitors to the site. This data is used solely to manage the website, track usage and improve our website services. This information does not identify the user personally and may be shared with third-parties to provide more relevant services, for example with google analytics.

Comments on the website

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Cookies

If you leave a comment on our website you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Sharing and disclosure of information we collect

We will never sell or trade your personal data or disclose your personal information to any third party unless we believe that disclosure is necessary:

To conform to legal requirements

To protect our rights

To protect the safety of members of the public

We share your sensitive information with those course/event teachers who are volunteering or working for the Mindfulness Cooperative for the purposes of delivering services to you and for safeguarding purposes. We would only share this information with another person (such as a health professional) without your consent if there was a lawful basis to do so, such as where there is risk of harm to you or another person. We would seek to gain your consent first, unless that would not be likely to increase risk. We would inform you if we needed to share information without your consent, unless that would be likely to increase risk.

Where we are partnering with an external organisation to deliver a service we will make this clear on the course information and upon booking.

Visitor comments on the website may be checked through an automated spam detection service.

How long we retain your data

We keep your data for as long as is necessary to fulfill the purposes for which it was originally collected for. We only contact you after your course has ended about future events and services if you have given us marketing permission.

If you leave a comment on the website, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Where we store your data and who has access

Paper booking forms containing sensitive personal information are stored in a locked filing cabinet at our registered address. The Cooperative Directors (teachers) have access to the filing cabinet. Electronic booking forms and email correspondence containing sensitive personal information are received and transferred within our email account, hosted by Proton mail, which has end-to-end encryption and is hosted within the European Economic Area. The Cooperative Directors (teachers) have access to this Cooperative email account.

Names, email addresses, previous mindfulness courses and level of experience information for course administration and email newsletter data is stored by Mailchimp, which participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. The Co-operative Directors (teachers) have access to the email account. Names, email addresses, previous mindfulness courses and level of experience information for course administration and email newsletter data is stored on our Google Cloud account, which has legally adequate Sae Harbour provisions in relation to EU data laws. Cooperative members (teachers) have access to the Google Cloud account. Our website is hosted within the EU by Millhouse Media.

What rights you have over your data

You can request to receive a copy of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Copyright

© 2018 Leeds Mindfulness Cooperative. All rights reserved. No part of this site may be reproduced, stored in a retrieval system, or transmitted in any form or by any means including but not restricted to, electronic, mechanical, printed or recorded without the express prior permission of the copyright owner.