PRIVACY STATEMENT SOUTHEAST DOULA CARE
It is the intention of this Privacy Statement to explain to you the information practices of Southeast Doula Care in relation to the information we collect about you.
Southeast Doula Care are committed to protecting and respecting your privacy. We wish to be transparent on how we process your data and show you that we are accountable with the GDPR in relation to not only processing your data but ensuring you understand your rights as a client.
Except as set out below, we do not share, sell, or disclose any information collected through our website, or business to a third party unless required for administrative purposes.
This policy may be changed from time to time by updating this page. You should check this page from regularly to ensure that you are happy with any changes that may be made. This policy is effective from 25 May 2018 and shall be reviewed at least annually.
WHO IS COLLECTING MY DATA?
For the purpose of the GDPR, the data collector and processor is Annika Schulz, acting as Southeast Doula Care. Certain third-party organisations are also used for collection, storage and processing of data, such as personal health information, payment transactions, etc. In this policy, any reference to “we” or “us” is Southeast Doula Care.
WHAT DATA IS BEING COLLECTED?
We may collect the following information, depending on the service registered for or purchased:
Contact information including email address, phone number, address
Transaction details for services purchased
Appropriate and necessary health information including emergency contact information, medical provider details and information related to your pregnancy as it is relevant for us to providing you with services requested
IP address, online geographical and website behavioural data
All information is processed and stored through GDPR-compliant methods or third parties. A full list of third-party processors is included below.
WHY ARE WE PROCESSING YOUR DATA? OUR LEGAL BASIS
The legal basis for processing this data is Legitimate Interest, namely the proper administration of our website and business (health information, transactions, website data). We also ensure that we are covered through the legal basis of Consent, by ensuring that all data you provide us with is given with appropriate consent (relevant service information).
In any event, Southeast Doula Care are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
WILL MY DATA BE SHARED WITH ANY THIRD PARTIES?
We may pass your personal data on to third-party service providers in the course of dealing with you. Any third parties that we may share your data with are obliged to keep your details securely and to use them only to fulfill the service they provide on your behalf. When they no longer need your data to fulfill this service they will dispose of the details in line with GDPR procedures.
If we wish to pass your sensitive personal data onto a third party we will only do so once we have obtained your explicit consent, unless we are legally required to do otherwise.
The third parties that we pass your personal data to are:
Stripe - https://stripe.com/ie/privacy
Squarespace - https://www.squarespace.com/privacy/
Mailchimp - https://mailchimp.com/legal/privacy/
In order to analyse data about website traffic, we use traffic log cookies to identify which pages are being used. This helps us to improve our website in order to tailor it to client's’ needs. We only use this information for statistical analysis purposes, then the data is removed from the system.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
LINKS TO OTHER WEBSITES
Our website may contain links to other websites. Once you have used these links to leave our site, please note that we do not have any control over third party websites and therefore cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites. We also do not guarantee that such sites are governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
HOW WILL THE INFORMATION BE USED?
We require this information to understand your needs and provide you with a better service, in particular for the following reasons:
Internal record keeping for tax and insurance purposes.
Improve our products and services.
Promotions, special offers or market research emails related to services that you have registered for or purchased.
Customise the website according to your interests or location.
HOW LONG WILL YOUR DATA BE STORED FOR?
All data will be stored for a maximum of 2 years, with the exception of relevant health information and financial transactions which are required, by law, to be kept for 7 years.
All data stored will be stored securely, password-protected and stored on GDPR-complaint third-party systems.
WHAT RIGHTS DO YOU HAVE?
Southeast Doula Care facilitate your, the clients’, rights in line with our data protection policy and the Subject Access Request Policy. This is available on request.
At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:
Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing (see below).
Right to object – you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review - in the event that Southeast Doula Care refuses your request under rights of access, we will provide you with a reason as to why.
All of the above requests will be forwarded on should there be a third party involved as we have indicated in the processing of your personal data.
You may choose to restrict the collection or use of your personal information in the following ways:
Do not complete certain fields in questionnaires (please note that failure to disclose relevant health information may affect our ability to provide you with safe and appropriate care, and may result in our refusal to provide you with services).
Do not accept cookies on our website (please note that this may affect your user experience of the website).
We will not sell, distribute or lease your personal information to third parties unless we are required by law to do so.
You may request details of personal information which we hold about you under the Data Protection Act 1998. If you would like a copy of the information held on you please email firstname.lastname@example.org. We will provide information on all data about you within 30 days.
If you believe that any information we are holding on you is incorrect or incomplete, please email us as soon as possible. We will promptly correct any information found to be incorrect.
DELETING YOUR DATA
Data will not be held for longer than is necessary for the purpose(s) for which they were obtained. If you have previously agreed to us using your personal information for direct marketing purposes, or for usage of products or services, and you would like us to remove your data please email us at email@example.com and we will remove/delete your data within 30 days.
HOW CAN YOU RAISE A COMPLAINT?
In the event that you wish to make a complaint about how your personal data is being processed by Southeast Doula Care or how your complaint has been handled, you have the right to lodge a complaint to Annika Schulz of Southeast Doula Care. Please email firstname.lastname@example.org or call 085-7245706 to register your complaint.