FAIR PROCESSING NOTICE FOR WEB SITE USERS

At Cariad Holistic Health & Wellness, we respect your personal data. This Fair Processing Notice explains how we will use your personal data when you visit our website (i.e. you are a web user).

Who are we?

I am Nicola Sparkes, trading as Cariad Holistic Health & Wellness. If you have any questions about anything in this privacy policy then please email me on hello@cariadholistichealth.com

What personal data do we collect about you? How will we use that personal data?

When you visit our website, you are given the opportunity to give us your personal data, through a contact form. The form could give you the opportunity to give us your name, email address, job role, phone number, IP/MAC address and any other info you put in the free text boxes. We need all of this to make sure we contact you regarding your enquiry. This data is stored in several places, both internally and with external providers. By sending your data, we must make it clear that it is being sent to other companies as well as us. Full details are below in the “Who do we share your data with” section.

We have a separate policy on how we use cookies, which is available on our website.

What is our legal basis for processing your personal data?

We need a legal basis in order to process your personal data. For the personal data you give us through our website, the legal basis is Legitimate Interest. If you are unhappy with us processing your data, then please email hello@cariadholistichealth.com.

Do we use any automated decision making?

We do not use any automated decision making.

Who do we share your personal data with?

We share your personal data with:

· Our software providers (including Gmail, Google Workspace)

· Our website host (including Squarespace)

· Our cloud service providers

Do we transfer your personal data outside of the EU or EEA?

Some or our software partners are based outside the EU/EEA. Every supplier has been suitably assessed to ensure they subscribe to EU data privacy rules. Full details are available upon request.

How long do we keep your data for?

We will hold your data for no more than three years.

Your rights as a data subject

The GDPR gives you rights as a data subject. You have:

1. the right to request from us access to your personal data;

2. the right to request from us rectification of your personal data;

3. the right to request from us erasure of your personal data;

4. the right to request from us restriction of processing your personal data;

5. the right to object to our processing of your personal data;

6. the right of data portability;

7. the right to withdraw your consent at any time. This does not affect the lawfulness

of processing based on your consent before you withdrew it; and

8. You have the right to complain to the ICO.

More information on your rights can be found in Chapter 3 of the GDPR.