This policy refers to TheYogiBum and how personal data is processed in compliance with the Data Protection Act (DPA) 1998 and the new General Data Protection Regulation (GDPR) which comes into effect from 25th May 2018.  This policy applies to data subjects of TheYogiBum and users of theyogibum.com.  The use of cookies and analytic software is also explained. 

Headings within this policy are inserted for the convenience of the reader only and are not to be considered when interpreting this policy.

Terminology

Personal data is any information that could identify a person (data subject).  Personal sensitive data relates to information concerning a data subject’s racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, or details of criminal offences.

A data subject is any identified or identifiable person whose personal data is processed by the data controller.

A data controller determines the purposes for data processing and the way personal data is processed.

Processing is any action or actions performed on personal data such as collection, organisation, storage, erasure or destruction.

Data Collection

TheYogiBum collects personal data that is required for the provision of products and services.  This consists of contact details exclusively.  Contact details may include:

  • Names
  • Addresses
  • Telephone numbers
  • Email addresses.

TheYogiBum collects any additional data received by email, letter, telephone, through theyogibum.com or by any other means of correspondence.  TheYogiBum can store personal data obtained from social media interactions outside of social media platforms when correspondence regarding products and services is received.

TheYogiBum does not source personal data from third parties.

TheYogiBum does not retain bank details belonging to data subjects.

Data Protection

TheYogiBum has security measures in place to protect personal data from theft, loss and breach of privacy:

  • There is a firewall (security software) in place to protect internal information from the internet
  • The database and all devices containing personal data are password protected
  • All devices containing personal data are kept in a locked room
  • Access to personal data is restricted to authority figures within TheYogiBum
  • TheYogiBum does not share personal data with third parties.

Data Retention

TheYogiBum retains personal data for no longer than it is necessary for tax purposes, the reason(s) it was originally collected and where otherwise required by law.

TheYogiBum practises a seven-year retention period after which personal data is securely destroyed, however personal data can be kept for longer if desired by returning customers.  Personal data can be reviewed at any time to determine whether it is still needed which can result in the destruction of personal data prior to the deadline of the retention period.

Please be aware that companies can keep personal data for longer if kept for public interest archiving or statistical purposes.

General

TheYogiBum acts as a data controller by processing personal data.  Processing is always with legitimate interest and compatible with the reason(s) the data was originally collected.

TheYogiBum uses personal data to provide data subjects with requested products and services.  TheYogiBum may contact data subjects regarding products and services and in response to enquiries. TheYogiBum does not contact data subjects with marketing information.

TheYogiBum may be required to process personal data for investigating, detecting and reporting crime; to demonstrate compliance and to actively comply with industry standards and any laws and acts that may apply.

theyogibum.com may contain links to external websites.  TheYogiBum is not responsible for the practices of other websites and encourages visitors to read the privacy policies of every website that collects personal data.

Cookies

Data may be obtained from cookies through theyogibum.com.  Cookies are small text files that are placed on a device by websites when they are visited.  Cookies enable delivery of more personalised content and are widely used to make websites work or work more efficiently.

Most web browsers allow some control of most cookies through the browser settings.  Please note that in a few cases some website features may not function if cookies are removed from the browser.

Google Analytics

When theyogibum.com is visited, a third-party service called Google Analytics is used to collect standard internet log information and details of visitor behaviour patterns.  This is to discover factors such as the number of visitors to various parts of the website.

This information is processed in a way that does not identify anyone; TheYogiBum does not make, and does not allow Google to make, any attempt to find out the identities of those visiting theyogibum.com.