SWEATERGY® - Privacy Policy

Introduction

Sweatergy® is committed to protecting your privacy and security. This Privacy Policy and the statements within it applies to the use and processing of personal information collected and used by Sweatergy® in accordance with the requirements of the General Data Protection Regulation 2018 (GDPR) and the law.

Our Privacy Policy, which sets out how Sweatergy® uses and protects any information that you give us when you communicate with us, sign up for any sessions, events, retreats, or use this website. By browsing and using our website you are agreeing to comply with and be bound by this Privacy Policy, which together with our Terms and Conditions govern Sweatergy®’s relationship with you. Please ensure to read the following statements carefully so you can understand how your personal data will be handled.

For the purposes of the General Data Protection Regulation 2016/679 (“the Regulation”) or any successor national or supra-national data protection legislation (including, as at the date of the publication of this Privacy Policy, the Data Protection Act 2018”), the data controller is Sophia Williams of London W7, United Kingdom. The term ‘Sweatergy®’ or ‘I’ ‘us’ or ‘we’ refers to the operator of Sweatergy® and the owner of the website who resides at London W7, United Kingdom. The term ‘you’ refers to the user of any one of Sweatergy®’s services offered, or any other visitor to this website as the context dictates.

Always subject to your rights, under the Regulation, we may change this Privacy Policy from time-to-time to ensure you are always aware of our most current Privacy Policy, please take the time to check this page regularly. The Regulation gives you certain rights which are detailed in the section headed "Your Rights regarding personal information". The contents of this Privacy Notice are subject to these overriding rights and no provision in any other part of this Privacy Notice is to be construed as restricting the scope of those rights.

For the purposes of the General Data Protection Regulation 2016/679 (“the Regulation”) or any successor national or supra-national data protection legislation (including, as at the date of the publication of this Privacy Policy, the Data Protection Act 2018”), the data controller is Sophia Williams of London W7, United Kingdom. The term ‘Sweatergy®’ or ‘I’ ‘us’ or ‘we’ refers to the operator of Sweatergy® and the owner of the website who resides at London W7, United Kingdom. The term ‘you’ refers to the user of any one of Sweatergy®’s services offered, or any other visitor to this website as the context dictates.

By using the Sweatergy® website, mobile applications or otherwise — by providing your personal information to Sweatergy®, you agree to the collection, use and sharing of your information in accordance with this statement.

If you are a visitor to the website, even an anonymous visitor, we may collect information about your computer, including where available your IP address, operating system, and browser type, for system administration and to report aggregate information internally and externally. This statistical data about browsing actions and patterns does not identify any individual. Nevertheless, to the extent that such information falls to be treated as personal data, and you do not wish us to process it, you should change the settings on your internet browser to prevent collection of this information.

We may collect information about your computer, including, where available, your IP address, operating system, and browser type, for system administration and to report aggregate information to our advertisers. This is statistical information about the browsing actions of users of the website and does not identify any individual.

Sweatergy® may contact you in relation to the nature of any attempted transactions, even if you don't confirm the transaction. This may be an operational email to enquire as to why the transaction was not completed. The data will not be used for any other purpose and certainly not shared with any other company other than the company that initiates the operational email (if this is not Sweatergy®). It is the aim of Sweatergy® to provide you with the highest level of service possible.

Your personal data may be transferred abroad for any of the purposes explained in this policy and such transfer may be to a country outside of the EEA. If we transfer your personal data outside the EEA, it will only be to recipients who offer an adequate level of protection and who have appropriate safeguards in place to protect your personal data. It may also be processed by personnel operating outside the EEA who work for us or for one of our service providers.

Again, this will only be where there is an adequate level of protection and who have appropriate safeguards in place to protect your personal data. Countries where personal information relating to you may be stored and/or processed, or where recipients of personal information relating to you may be located, may have data protection laws which differ to the data protection laws in your country of residence. By submitting your personal information, you accept that personal information relating to you may be transferred, stored or processed in this way.

Sweatergy® may share your personal information with certain companies performing services on behalf of Sweatergy® (such as direct marketing agents) who will only use the information to provide a service that Sweatergy® has asked them to provide. 

Those selected companies will perform a function for us, such as agencies and suppliers whom have been instructed to assist us to more effectively deliver services, manage and conduct promotions and offers, provide technical assistance and support and perform other functions to support marketing activities.

Although this is not an exhaustive list, the following third parties process data on Sweatergy® behalf which may include your personal data, for the specific purposes identified.

• V-cita online scheduling
  

All selected companies may have access to personal information if needed to perform such functions but will only be permitted by us to use personal information for the purpose of performing that function and not for any other purpose.

Where you have given specific consent, your information may be shared with independent self-employed instructors for them to contact you to inform you of classes, events or services which they would like to offer you.

In the event we seek to sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer, subject to satisfactory assurances that the data will be processed securely by them.

In all cases, any use of your personal information which has been instigated by us will comply with this Privacy Policy and with applicable data protection legislation. In some circumstances, we may have to disclose your personal information by law.

Save for this, we do not sell, transfer, or disclose personal information we have collected from you in connection with our website activities to third parties outside Sweatergy®.

You may request details of personal information which we hold about you under the Regulation. If you would like a copy of the information held on you, please contact us by email to info@sweatergy.co.uk

If you think any information, we have about you is incorrect or incomplete, please e-mail or write to us and we will correct or update any information as soon as possible.

Sweatergy® is committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, Sweatergy® have put in place suitable physical, electronic, and corporate policies to safeguard and secure the information that is collected online. Please be assured that Sweatergy® will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy. Any transactions will be encrypted. Sweatergy® cannot, however, guarantee the security of your transmitted data and you submit such data at your own risk.

From time to time, our website may contain links to other websites which are not within our control. Once you have left our website, we cannot be responsible for the protection and privacy of any information which you provide to that website. You should exercise caution and take the necessary steps to look at the privacy statement applicable to the website in question.

By choosing to follow/view Sweatergy’s® social media pages (Facebook, Instagram, Twitter) you are choosing to see our marketing material. If you no longer wish to see such information from us you will need to unfollow our pages

System cookies are created each time you visit us and are automatically deleted when you close your browser. They remember the fact you're logged in and remember the selections that you make as you use the Website and Mobile Application. To find out more about cookies generally, including how to manage and delete them, visit www.allaboutcookies.org

Identification cookies help us remember who you are when you come back to visit us, it allows us to personalise timely and relative content to improve your journey and participant experience. 

Tracking cookies track any information or warning messages we've shown you, so that we don't show them again. If you express preferences about whether or not to receive certain types of cookies, we'll also use cookies to store this preference.

Web analytics/Marketing effectiveness cookies collect anonymous data to help us better understand customer behaviour, so we can make sweatergy.co.uk better. They tell us which bits of the Website and Mobile Application customers use the most and flag up any problems, so we can fix them quickly. They also tell us how customers find the Website and Mobile Application (for example via online adverts and search engines), so we can get an overall idea of how effectively we are marketing.

We use cookies to understand the way you use our website, for example the searches and selections you make. This allows us to tailor your experience onsweatergy.co.uk by showing you the correct content that we think might be relevant to you. These cookies allow us to understand your online behaviour and tailor your experience outside of our site. For example, the adverts you see for sweatergy.co.uk on other websites may be specially targeted to include the routes that you have searched for on sweatergy.co.uk

Some sections of our Website (for example the online shop) are provided by third parties.

If you use these sections of our Website, the relevant third party may use cookies to collect data, which will be used by them in accordance with their privacy policy (which may differ from ours). Therefore, please refer to the third party's privacy policy in order to understand which cookies are set on these sections of our Website and their privacy and information usage practices. This also applies to the social media features on the site which are provided by Facebook, Instagram and Twitter.

We and third parties that we authorise, including but not limited to online advertising networks such as Google, may use cookies to collect data about your browsing activity on our website and elsewhere on the internet. We may also share data with or collect data from third parties such as Google or allow those third parties to use cookies on our Website or in connection with the delivery of our adverts elsewhere on the internet for online behavioural advertising purposes.

We and those third parties may use this data to: 

• help make the advertising you see on our Website and Mobile Application and elsewhere on the internet more relevant to you; 
• tailor content on the Website and Mobile Application; and 
• measure the effectiveness of advertising on the Website and Mobile Application and elsewhere on the internet.

We do not decide which cookies are set or how your data is used by these third parties and therefore you should refer to the third party's privacy policy in order to understand which cookies are set and their privacy and information usage practices. For example, Google’s privacy policy can be found at https://policies.google.com/privacy

You can opt not to allow third parties to use cookies in this way (both on our website and elsewhere on the internet) by changing your browser settings (following the instructions above). To learn more and change your preferences (including by turning off behavioural advertising for the third parties mentioned above), you can also visit ‘Your Online Choices’ at www.youronlinechoices.eu/ Please note that disabling third party cookies does not mean you won't see any adverts on our Website, our Mobile Application site or elsewhere on the internet, just that they won't be personalised.

This section sets out the appropriate actions and procedures which Sweatergy.co.uk follows in respect of the use of CCTV (closed circuit television) surveillance systems (“CCTV Systems”) at any premises where we operate.

Sound recording may/may not be disabled on all cameras. (Refer to individual venue’s Privacy Policy)

Please note venues we operate in may be monitored by CCTV 24 hours a day. These venues reserve the right for its employees and contractors to review footage as required and by entering onto their sites you consent to your image being recorded and reviewed and waive any and all claims in relation to same. Recorded CCTV footage will be stored securely and retained in compliance with applicable laws.

In drawing up this policy, due account has been taken of the following:

1. The Regulation and any other relevant Data Protection legislation;
2. The CCTV Code of Practice produced by the Information Commissioner (“Code of Practice”);
3. and The Human Rights Act 1998

This policy will cover all contractors, practitioners, or instructors, and any persons providing a service to or on behalf of Sweatergy®, visitors and all other persons whose image(s) may be captured by our CCTV Systems.

We will also ensure that the personal data captured by our CCTV Systems is only processed in accordance with the following requirements:

• It will be processed fairly, lawfully and in a transparent manner; 
• It will only be collected for specified, explicit and legitimate purposes and not further processed in any manner incompatible with those purposes; 
• It will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; 
• It will be accurate and, where necessary, kept up to date; 
• It will not be kept for longer than is necessary for the purposes for which the personal data are processed; and 
• It will be processed in a manner that ensures appropriate security of the personal data.

Individual venues should have an appointed CCTV Officer who has the legal responsibility for the day-to-day compliance with the requirements of their CCTV policy and procedures. 

The purpose of the use of the CCTV Systems and the collection and processing of CCTV images is for the prevention or detection of crime or disorder, apprehension and prosecution of offenders (including use of images as evidence in criminal proceedings), interest of public and employee Health and Safety, protection of public health and the protection of the Our property and assets. 

Prior to any camera installation the CCTV Officer will ensure that the installation complies with this policy and that the use of any camera is justified, necessary and proportionate. The CCTV Officer will regularly assess whether the use of any camera and the CCTV System as a whole continues to be justified, necessary and proportionate.

The location of the equipment is carefully considered because the way in which images are captured needs to comply with the Regulation.

All cameras are located in prominent positions within public and staff view and do not infringe on sensitive areas. All CCTV surveillance is automatically recorded, and any breach of this siting policy will be detected via controlled access to the CCTV System and auditing of the CCTV System.

The images produced by the equipment will as far as possible be of a quality that is effective for the purpose(s) for which they are intended. Upon installation, all equipment is tested to ensure that only the designated areas are monitored, and suitable quality pictures are available in live and play back mode. All CCTV equipment is maintained under contract.

Images which are not required for the purpose(s) for which the equipment is being used will not be retained for longer than is necessary. While images are retained, it is essential that their integrity be maintained, whether it is to ensure their evidential value or to protect the rights of people whose images may have been recorded. Access to and security of the images is controlled in accordance with the requirements of the Regulation.

All images are digitally recorded and stored securely within the system’s hard drives. Images are stored for a minimum of 14 days and stored for no more than 31 days.

Where the images are required for evidential purposes or disciplinary proceedings, a copy file will be moved to an access controlled confidential location on the network and held until completion of the investigation. Viewing of images within the system is controlled by the CCTV Officer or a person nominated to act on their behalf. Only persons trained in the use of the equipment and authorised by the CCTV Officer can access data.

Access to, and disclosure of, the images recorded by any venue’s CCTV System and similar surveillance equipment is restricted and carefully controlled. This ensures that the rights of individuals are preserved, and the continuity of evidence remains intact should the images be required for evidential purposes e.g. a police enquiry or an investigation being undertaken as part of an internal procedure.

Access to the medium on which the images are displayed and recorded is restricted to the CCTV Officer, staff authorised by them and third parties as authorised from time to time for specific purposes. Access to and disclosure of images is permitted only if it supports the purpose for which such images were collected.

The Regulation gives any individual the right to request access to CCTV images which contain their personal data.

Individuals who request access to images must submit this formally in writing, with sufficient details to identify the section of footage with which they are concerned to the specific venue for which you require it from, to satisfy itself that the person making the request is the data subject of that specific recording. Upon receipt of the request, the CCTV Officer, or another member of staff authorised by them, will determine whether disclosure is appropriate and whether there is a duty of care to protect the images of any third parties. If the duty of care cannot be discharged, then the request can be refused.

A written response will be made to the individual, giving the decision (and if the request has been refused, giving reasons) within 31 days of receipt of the request.

The Regulation provides certain overriding rights for data subjects.

You are entitled to request details of the information we hold about you and how we process it. You may also have a right in accordance with applicable data protection law to have it rectified or deleted, to restrict our processing of that information (including in relation to direct marketing), to stop unauthorised transfers of your personal information to a third party and, in some circumstances to obtain your personal information in a structured, commonly used and machine-readable format or to have it transferred directly to another organisation. You may also have the right to lodge a complaint in relation to any processing of your personal information with a local supervisory authority (for residents of the United Kingdom: Information Commissioner’s Office; further information can be found at https://ico.org.uk/).

If you object to the processing of your personal information, or if you have provided your consent to processing and you later choose to withdraw it, we will respect that choice in accordance with our legal obligations. Your objection (or withdrawal of any previously given consent) could mean that we are unable to perform the actions necessary to achieve the purposes set out above (see the section " What do we do with the information we collect?") or that you may not be able to make use of the services and products offered by us. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal information to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations. 

If you have a concern about the way we are collecting or using personal information relating to you, we request that you raise your concern with Sweatergy® in the first instance by email at info@sweatergy.co.uk

If you have any questions about our Privacy Policy, please contact us by email at info@sweatergy.co.uk

To keep up with any changes and compliance of the law, or the use of personal data, it is our duty to may make reasonable changes to this Privacy, CCTV and Cookie Policy at any time. It is your responsibility to check online at regular intervals for any updates and changes to this document.