Last updated: 18th December 2021
Connect Studio Chelsea Ltd. ( “Connect Studio”, the “Company “, “we“,” us” or “our “) respects the privacy of our website visitors and service users and is committed to complying with the General Data Protection Regulation and the Data Protection Act 2018.
This document (the “policy”), together with our Terms & Conditions and any other documents referred to on it, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
The policy explains:
The Company reserves the right to make changes to this policy in order to reflect any changes in Data Protection Legislation and best practice from time to time.The Company will endeavour to notify you of such changes but we recommend that you check for an updated version of this policy each time you interact with us through the Channels.
For the purpose of the Data Protection Act 1998 (the Act), the data controller is Connect Studio of Connect studio Chelsea Ltd. of Chelsea Cloisters, Sloane Avenue, London, SW3 3DW.
In this Policy, the following terms shall have the following meanings:
"Account":
means a Connect Studio account required to access and/or use certain areas and features of Services;
"Channels":
Includes:
Online channels: https://www.connectstudiochelsea.com, the Connect Studio App.
The online booking system operated by Connect Studio at and our app;
Offline channels: our Connect Studio premises at Chelsea Cloisters, Sloane Avenue, SW3 3DW
"Our Website":
Refers to https://www.connectstudiochelsea.com
"Personal Data":
means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to Us via any of our Locations. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation(“GDPR”)
"We, Us ,Our":
means Connect Studio Chelsea Ltd., registered in England and Wales under registration number 12691392
This document was created using a template from SEQ Legal (https://seqlegal.com/free-legal-documents/privacy-policy).
We may collect and process the following data about you:
i.
Information that you provide by filling in forms on our website. This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by Connect Studio or when you report a problem with our site.
ii.
If you contact us, we may keep a record of that correspondence.
iii.
We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
iv.
Details of transactions you carry out through our site and of the fulfilment of your orders.
v.
Details of your visits to our site including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
vi.
When you use our studio, we may have CCTV systems operated for the security of both customers and Partners. These systems may record your image during your visit.
In this Section we have set out:
i.
the general categories of personal data that we may process;
ii.
in the case of personal data that we did not obtain directly from you, the source and specific categories of that data;
iii.
the purposes for which we may process personal data; and
iv.
the legal bases of the processing.
1)
We may process data about your use of our website and services ("usage data"). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system. This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.
2)
We may process your account data ("account data”). The account data may include your name and email address. The source of the account data is you.The account data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business.
3)
We may process your information included in your personal profile on our website ("profile data"). The profile data may include your name, address, telephone number, email address, profile pictures, gender, date of birth. The profile data may be processed for the purposes of enabling and monitoring your use of our website and services. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business.
4)
We may process information contained in any enquiry you submit to us regarding goods and/or services ("enquiry data"). The enquiry data maybe processed for the purposes of offering, marketing and selling relevant goods and/or services to you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business.
5)
We may process information relating to our customer relationships, including customer contact information ("customer relationship data”). The customer relationship data may include your name, your employer, your job title or role, your contact details, and information contained in communications between us and you or your employer. The source of the customer relationship data is you or your employer. The customer relationship data may be processed for the purposes of managing our relationships with customers, communicating with customers, keeping records of those communications and promoting our products and services to customers. The legal basis for this processing is our legitimate interests, namely the proper management of our customer relationships.
6)
We may process information relating to transactions, including purchases of goods and services, that you enter into with us and/or through our website ("transaction data”). The transaction data may include your contact details, your card details and the transaction details. The source of the transaction data is you and/or our payment services provider. The transaction data may be processed for the purpose of supplying the purchased goods and services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and our legitimate interests, namely the proper administration of our website and business.
7)
We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters ("notification data").The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is consent.
8)
We may process information contained in or relating to any communication that you send to us ("correspondence data"). The correspondence data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping.The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
9)
We may process any of your personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
10)
We may process any of your personal data identified in this policy where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks.
11)
In addition to the specific purposes for which we may process your personal dataset out in this Section, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Please do not supply any other person's personal data to us, unless we prompt you todo so.
We contract with third parties to supply products and services to you on our behalf. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.
We will need to disclose your personal data to our service providers, including Glofox, which supplies our cloud business management platform and booking apps. Glofox is also subject to certain obligations with regard to the security of your personal data processed via the booking app. However, your rights, as set out in this privacy statement in relation to your personal data processed through the Glofox Platform are owed to you by us, and you should contact us at info@connectcstudiochelsea.com if you have any queries in relation to the use of your personal data through Glofox.
From time to time, we may share personal data with other third parties approved by you, such as social media sites which you link to your account (if and when we offer that feature) or share content via or third parties who administer any competitions or surveys on our behalf which you voluntarily partake in.
Financial transactions relating to our website and services are handled by our payment services provider, Stripe. We will share transaction data with our payment services provider only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers' privacy policies and practices at https://stripe.com/gb/privacy.
In certain circumstances, We may share your personal information with third parties where we are required to do so by law or regulation (such as in connection with an investigation of fraud or other legal enquiry) or in connection with other legal proceedings (including where we believe that your actions violate applicable laws, our terms of business or any usage guidelines for specific products or services, or threaten the rights, property, or safety of our Company, our users, or others.
In some circumstances, it may be necessary to transfer your information internationally. In particular your information may be transferred to and/or stored on the servers of our Affiliates or other third parties identified in paragraph 7 which are based outside of the EEA.
However, we will not transfer your personal data outside of the EEA unless:
i.
such transfer is to a country or jurisdiction which the EU Commission has approved as having an adequate level of protection (including to the USA where Privacy Shield compliant);
ii.
appropriate safeguards are in place as set out in Article 46 GDPR or equivalent provisions of subsequent Data Protection Legislation; or
iii.
the transfer is otherwise allowed by applicable Data Protection Legislation (such as in the form of a derogation under Article 49 GDPR).
The hosting facilities for our website are situated in the U.S.A. The EuropeanCommission has made an "adequacy decision" with respect to the data protection laws of this country. Transfers to this country will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which you can obtain from https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en
Google and Facebook are situated in the U.S.A. The European Commission has made an "adequacy decision" with respect to the data protection laws of each of these countries. Transfers to the U.S.A. will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European Commission, a copy of which can be obtained from https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en
You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
When you use our website and related services we may invite you to share content via email or via a social network. If you choose to share content then please be aware that the privacy and cookies policies of such third party sites govern the information you submit to them and we encourage you to read them.
We will hold your personal information on our systems for as long as it is necessary to provide you with the service you have requested. You may unsubscribe from a service whenever you choose.
In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the following criteria:
i.
the period of retention of personal data category will be determined based on the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject.
Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Notwithstanding our efforts to keep your personal data secure, no system can be 100% reliable. To the fullest extent permitted by law, we cannot be held liable for any loss you may suffer if a third party procures unauthorised access to any data you provide through the Channels. In addition, you are responsible for maintaining the strength and confidentiality of your login credentials.
We will notify you as soon as reasonably practicable if we have reason to believe that there has been a personal data breach by us (or your personal data held by us) which could adversely affect your rights and freedoms.
We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy. We may notify you of significant changes to this policy by email.
You have the following rights under the GDPR, which this Policy and our use of personal data have been designed to uphold:
1)
right to access: You have the right to request information about the personal data we hold on you at any time.
2)
right to portability: Whenever We process your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us.
3)
right to rectification: You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed. If you an account with Us you can edit your personal data under your account and membership pages.
4)
right to erasure: You have the right to erase any personal data processed by Us at any time except for the following situations:
i.
You have an ongoing matter with Customer Service;
ii.
You have an unsettled debt with Us, regardless of the payment method;
iii.
If you are suspected or have misused our services within the last four years;
iv.
Your debt has been sold to a third party within the last three years or one year for deceased customers;
v.
If you have made any purchase, we will keep your personal data in connection to your transaction for book-keeping purposes;
vi.
We bring or defend a legal claim or other proceedings during the period we retain your personal information, in which case we will retain your personal information until those proceedings have concluded and no further appeals are possible;
vii.
In limited cases, existing or future law or a court or regulator requires us to keep your personal information for a longer or shorter period.
You have the right to object to processing of your personal data that is based on our legitimate interest. We will not continue to process the personal data unless we can demonstrate legitimate grounds for the process which overrides your interest and rights or due to legal claims.
You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.
These rights are not absolute and may be subject to limitations, conditions or other provisions set out in applicable law. Please contact us using the links on our website if you would like more information on exercising any of these rights.
If you have any cause for complaint about our use of your personal data, please contact Us at info@connectstudiochelsea.com in order that we can investigate thoroughly.
Our Service does not address anyone under the age of 18 (“Children”).
We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that yourChild has provided us with Personal Data, please contact us via info@connecctstudioichelsea.com. If we become aware that we have collected Personal Data from children without verification of parental consent, we will take steps to remove that information from all our servers.
A cookie is a file containing an identifier (a string of letters and numbers)that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
Our website may use cookies to distinguish you from other users of our website.This helps us to provide you with a better experience when you browse our website and also allows us to improve our website.
Some data collected by cookies is collected on an anonymous and/or aggregated basis.Where we use cookies that contain personal data, we will only process that personal data as set out in this policy.
We use cookies for the following purposes:
i.
Strictly necessary cookies: These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
ii.
Personalisation: we use cookies to store information about your preferences and to personalise the website for you.
iii.
Security: we use cookies as an element of the security measures used to protect user accounts, including preventing fraudulent use of login credentials, and to protect our website and services generally.
iv.
Analysis:we use cookies to help us to analyse the use and performance of our website and services. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
v.
Cookie consent: we use cookies to store your preferences in relation to the use of cookies more generally.
Our service providers use cookies and those cookies may be stored on your computer when you visit our website, however these are not within our control:
i.
We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at: https://policies.google.com/privacy.
ii.
We use Webflow to host our website. This service uses cookies for gathering information about website use by means of cookies. You can view the privacy policy of this service provider https://webflow.com/legal/privacy.
iii.
We use Glofox to manage our class bookings, online payments and store personal data of our service users. This service uses security and authentication cookies. You can view the privacy policy for this service provider at https://www.glofox.com/privacy-policy?country=gb
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. You can however obtain up-to-date information about blocking and deleting cookies via these links:
i.
https://support.google.com/chrome/answer/95647 (Chrome);
ii.
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences (Firefox);
iii.
https://www.opera.com/help/tutorials/security/cookies/ (Opera);
iv.
https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies (Internet Explorer);
v.
https://support.apple.com/kb/PH21411 (Safari); and
vi.
https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy (Edge).
Blocking all cookies will have a negative impact upon the usability of many websites.
If you block cookies, you will not be able to use all the features on our website.
This website is owned and operated by Connect Studio Chelsea Ltd.
We are registered in England and Wales under registration number 12691392, and our registered office is at Flat 4, 95 Elm Park Gardens SW10 9QW.
Our principal place of business is at Chelsea Cloisters, Sloane Ave, SW3 3DW.
You can contact us:
i.
by post, to the postal address given above;
ii.
by telephone, on the contact number published on our website contact page;
iii.
by email, using the email address: info@connectstudiochelsea.com
© Copyright 2022 - 2024
