Rainbows Sensory Space is the data controller. This means it decides how your personal data is processed and for what purposes.
Personal data relates to an individual who can be identified by data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (GDPR). As of 25th May 2018, new regulations come into force which govern how your personal data can be collected, stored and handled. As a business which operates online, collection of some data is essential to operation of our business. This policy details how your data is handled, stored and deleted. GDPR requires that you positively confirm that you are willing for your data to be shared with Rainbows Sensory Space Ltd for the purposes of delivering you the services you request. No data is collected by Rainbows Sensory Space Ltd unless you book a session or send us a message through our “Contact Us” facility. By taking one of these actions you are consenting to the information you provide being shared with Rainbows Sensory Space Ltd. Data you share including your name, address, email address, telephone number, allergy information and any medical information entered by you is retained only as necessary for us to provide the service to you that you have requested. All data is retained on a secure server by our webhost, which is subject to regular testing to ensure it remains secure. When paying online your card data is classed as sensitive data. To ensure the upmost security we handle all payments “off-site”, that is you are re-directed to a secure hosted payment system provided by Bookwhen. Rainbows Sensory Space Ltd receives no confidential information relating to your card and your details are secure. You have a right to request your personal data is deleted from our systems at any time. You may do this by emailing hello@rainbows-sensoryspace.com
Rainbows Sensory Space complies with its obligations under GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data. We use your personal data for the following purposes: –
Your personal data will be treated as strictly confidential. We will only share your data with third parties outside of Rainbows Sensory Space with your consent. We will only share your information if;
We will keep your personal data for no longer than reasonably necessary and in line with our legal and contractual obligations i.e. in case of legal claims, safeguarding etc. Rainbows Sensory Space has a retention schedule setting out the length of time that data is kept.
Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: –
If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions. Where and wherever necessary, we will seek your prior consent to the new processing.
Cookies add functionality to our website and are required for certain functions to work. The following functions require the use of cookies on our website:
To exercise all relevant rights, queries of complaints in the first instance, please contact: Fiona Pattison, Director and manager Rainbows Sensory Space E-mail: hello@rainbows-sensoryspace.com