Privacy Policy
1. Data Protection Policy Statement
Little Dragon Norwich (we, our, us) are committed to protecting and respecting your (the data subject’s) right to privacy. This policy outlines how and why we collect, use and store personal data and your rights and options in line with The Data Protection Act 2018.
2. What Is Personal Data?
Any information, or combination of data, that makes an individual identifiable is defined as personal information. Some examples include name and address, visual information such as photographs, and medical information.
3. How We Get the Information and Why We Have It
Personal data will be collected only for specified, explicit and legitimate purposes and will not be further processed in any manner that is incompatible with these purposes without the informed consent of the data subject.
Most of the information we process is provided to us directly by you. The information collected from individuals is used for normal business purposes such as:
- Deciding if a client is suitable for the class they are interested in
- Tailoring training opportunities to your preferences and needs
- Meeting health and safety responsibilities
- Coordinating the delivery of our service
- Assessing the effectiveness of our service and making improvements
We may also receive personal information indirectly, from the following sources in the following scenarios:
- From social media services where your information is publicly available
- Automatic collection when you visit our website or contact us through social media
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
- Your consent — you are able to remove your consent at any time by contacting us using the contact details on our website.
- We have a contractual obligation.
- We have a legal obligation.
- We have a vital interest.
- We need it to perform a public task.
- We have a legitimate interest.
4. Types of Information We Store
We collect different information from different people. Some of the information collected can include:
- Full name and contact details including email, phone number and address
- Financial details including debit or credit card information, bank account information
- Information about your dog
- Photograph or video footage for promotional or service purposes
- Any details regarding health where it affects teaching or learning
- Any other personal information you provide us
Certain types of data are considered “special category data” under data protection laws and are more sensitive, such as health records. Such data will only be collected to facilitate successful operation of the business, for example to make reasonable adjustments to allow somebody to participate in classes effectively.
We may also collect this type of information if you volunteer it to us or make it public.
5. What We Do With the Information We Have
We use the information that you have given us in order to effectively run our services.
We do not share, sell or rent your personal information to third parties for marketing purposes. However, in general, we may disclose your personal information to selected third parties if it is necessary for a law enforcement authority to fulfil its law enforcement purposes.
6. How We Store Your Information
Your information is securely stored in password-protected digital systems and, where applicable, in securely locked physical files. Access is strictly limited to authorised company personnel.
7. How Long We Keep Your Information For
All personal data that has not been used for more than six years will be automatically anonymised, effectively erasing any parts of the data that make it personal.
If before this time you would like your data removed from the system, please contact us using the contact details on our website: www.littledragonnorwich.co.uk.
8. Your Data Protection Rights
Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify information you think is inaccurate or incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us using the contact details on our website if you wish to make a request.
9. How to Complain About Data Protection
You can complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.
Information Commissioner's OfficeWycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
10. Referenced Legislation and Guidance
Below is a list of the guidance which has been used to inform the creation of this document: