©2019 by Ambriel Holistics. 

Privacy Policy Statement

Ambriel Holistics Privacy Policy Statement

1. Ambriel Holistics is a private business based in Scotland

2. Ambriel Holistics is committed to protecting your personal information. In order to do this, it is important that the business explains:

  1. What information is collected about you?

When you visit the Ambriel Holistics website the following types of information will be:

  • Your IP address, if you login we collect: Date and time of last login and Username

  • When you contact Ambriel Holistics by phone, text, or email the information you share will be collected in order to deal with your holistic/training or spiritual enquiry.

2.2 How and why this information is collected?

Ambriel Holistics will gather information in order to resolve your inquiries, analyse use of the website, diagnose problems with the website and login issues, personalise your experience on the website, manage your inquiry preferences, process financial transactions and deal with any holistic/training or spiritual inquiries you raise.

 

  1. Who this information is shared with?

Ambriel Holistics will never sell and will not share your personal information with any third-party. It is completely private and confidential and held securely.

 

2.5 How long your information will be kept and how it will be disposed of at the end of the retention period?

Ambriel Holistics will keep details submitted via the website and phone for one year, although it may be necessary to keep some information for longer due to legal or business requirements. Computer logs relating to the website will be kept for a year on a rolling basis.

You can withdraw your consent to Ambriel Holistics collecting and/or storing your personal information at any time. If you withdraw your consent to Ambriel Holistics storing your personal information, please be aware that we may have to retain a minimal amount of personal data for historical and statistical purposes.

Ambriel Holistics is committed to retaining personal data for no longer than is necessary for the purpose for which it was obtained or to comply with legal and regulatory requirements.

Ambriel Holistics implements working practices and guidelines to ensure that personal data is not stolen or lost or unlawfully accessed and ensures that it is not shared with third parties.

At the end of the one-year retention period, or in response to a request from an individual for their personal data to be erased (see below), information will be deleted or disposed of in a secure manner:

  • Personal data contained in electronic databases, spreadsheets, word processing or other files will be deleted

2.6 The Right to Erasure - also known as the right to be forgotten.                  All clients have the right to have their personal data erased if:

  • Their personal data is no longer necessary for the purpose for which Ambriel Holistics originally collected or processed the data.

  • If Ambriel Holistics is relying on their consent as its lawful basis for holding the data, and the individual withdraws their consent.

  • If Ambriel Holistics is relying on legitimate interests as its basis for processing and there is no overriding legitimate interest to continue this processing.

  • If Ambriel Holistics is processing their personal data for direct marketing purposes and the individual objects to that processing.

Requests for erasure must be submitted in writing and clearly state the individual’s name, including any former names, and their current or previous contact with Ambriel Holistics in a way which allows their data to be identified.

On receiving a request for erasure, Ambriel Holistics will respond without undue delay and within one month of receiving the request.  Before responding Ambriel Holistics will take steps to confirm the identity of the sender to ensure that the request is genuine.

Ambriel Holistics will respond to confirm either:

  • That all personal data relating to the individual has been securely disposed of or erased.

  • That all or some of the data has not been erased, giving reasons for why Ambriel Holistics has not complied with the request.

 

  1. How you can access the information that is held on you?

You have the right to access the personal information that is held on you. If you wish to receive a copy you may make a data subject access request via the Ambriel Holistics (Data Protection Officer) at the website address below. Ambriel Holistics will require to confirm your identity before releasing any personal information.

 

If the personal information is inaccurate or incomplete, you can ask us to correct it. You can also ask for information to be deleted or removed if there is no compelling reason for Ambriel Holistics to continue to hold it.

 

  1. Where your information is held and stored?

The personal information collected by Ambriel Holistics will be held in electronic and/or physical format on secured systems within the European Economic Area.

 

Ambriel Holistics will not knowingly transfer your personal information outside of the European Economic Area.

 

Ambriel Holistics only stores physical copies of documents containing your personal information on the Ambriel Holistics premises.

 

Information that is stored electronically is retained on systems owned and / or managed and protected by Ambriel Holistics.

3. Ambriel Holistics may need to make changes to this Privacy Policy, which will be updated on the website from time to time. Any changes to the Privacy Policy will come into effect 30 days after it is posted on the website. During that period, you’re welcome to make contact if you have questions about the changes.

4. If you have any questions, comments or requests regarding this Privacy Policy please contact: - Ambriel Holistics at admin@ambrielholistics.com.

5. If you are not satisfied with the way that Ambriel Holistics has handled any of your requests or questions relating to our use of your personal data then you can contact the Information Commissioner’s Office at www.ico.org.uk/concerns or phone 0303 123 1113. The Information Commissioner’s Office is the statutory body responsible for overseeing data protection legislation and law in the United Kingdom.