There is a full privacy statement below which you are free to read – however, this section provides a summary of what data we collect and what we do with it in simple and straightforward terms.

If you have any questions at all, feel free to email us on data@sowingsuccesss.co.uk

Online data – We use google analytics to collect overall data on the number of visitors to our site and what they do when they are there. So, for example, if 100 people viewed our home page and then 86 of them viewed our services page, we can see that information. We also review how long people stay on our site and broadly, where they come from, down to a regional level. We do not store or collect any data on IP addresses or use that data to identify individuals. Although this information may be available through google analytics, it is not used by us or processed in any way.

Customers – Individuals – we collect the names and details of our customers as well as their contact details for the purposes of delivering the services we offer. This is necessary if we are going to be able to deliver on their requirements. We contract with all our patients verbally, informing them of our approach and that we will take notes, which are then held securely. We inform them that the data is held confidentially, and reassure them of how we treat it. Once we have completed our service, we store patients data for 7 years after last contact – when it is securely destroyed (shredded).

Schools and referrers – we work with a number of schools and organizations, and we collect and store their data – names, address and contact details. We collect and store this data on the basis of our contractual obligation to supply our services. In all cases we confirm that they referrer has consent to pass on the data on an individual to us.

You can opt out of receiving any communications, other than that mandated by our contractual obligations, by clicking here.

You can opt out of receiving any communications by clicking here.

We treat a your data extremely carefully, storing it securely and protecting confidentiality. We do not sell your data or pass it on to unrelated third parties. We keep your data as secure as possible, respecting your right to privacy.

You have the right to be forgotten by us. If you want to be forgotten, please click here. We will remove all the data we hold other than what is required under our contractual obligations (we must hold some data when the work has been completed for, or through, insurance companies). We also need to store some data, in a secure place, to ensure that we remember your request to be forgotten (for example should we need to restore systems from a backup, we need to know, to remember, that you wanted to be forgotten).

As part of handling and processing your data we have a designated Data Controller and this is your first point of call should you have any issues or questions about what we do, or why we do it.

Our Data Controller is:
Sowing Success
20 Park Road North
Newton le Willows
Merseyside
WA12 9TE
UK
data@sowingsuccesss.co.uk

Your Right to be informed

You have the right to be informed about what we do with your data, and why. Therefore to ensure that you are, we have complied a handy summary below. This privacy and cookie policy lays out our specific commitments, in compliance with GDPR 2018.

Our Data Controller is

Sowing Success
20 Park Road North
Newton le Willows
Merseyside
WA12 9TE
UK

data@sowingsuccesss.co.uk

How we collect your data – We collect your data from phone calls, emails, from your representatives and referees. In the case of minors, we obtain explicit consent from their parents or guardians, and from the individual involved. Lawful basis of our processing – we process data under our contractual obligations to you, and also under our legitimate business interests. Contractual Obligations – it is necessary for us to process your data to deliver on our contractual obligations. Legitimate business interest – it is in our legitimate business interests to take notes to facilitate treatment.

When we process your personal information for our legitimate interests, we make sure to
consider and balance any potential impact on you (both positive and negative), and your rights under data protection laws.

Our legitimate business interests do not automatically override your interests – we will not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

We collect a range of data – including, name, address and contact details – phone and email, as is required to deliver on our contractual obligations. We also collect and store medical data, which is taken under the grounds of explicit consent – obtained from the individual and where required the parents or guardians.

We may share this data with your appointed representatives, and other relevant third parties. who you would expect us to share with to deliver on the services we offer. We do not sell your data to any third parties.

We do not transfer data outside of the UK or EEA. Our data is stored on a cloud server (OneDrive) within the UK (confirmed by Microsoft on 4/5/18). However by the nature of the Internet, the personal data you supply through this website may be sent electronically to servers anywhere in the world, google analytics data for example. It may be used, stored and processed anywhere in the world, including countries outside the European Economic Area. Any transfers the data outside the EEA it will ensure that all reasonable security measures are taken and that any third party processers will be required to process the data in accordance with GDPR.

We retain all data for a maximum of 7 years from last contact, after which it is securely destroyed.

You can find more information on your individual rights on the ICO website by clicking this link https://ico.org.uk/

You can withdraw your consent, for any aspect of our data processing at any time, by clicking here.

Please be aware we have to process and maintain data to support of contractual obligations to you and to third parties (e.g. schools and referring parties) so withdrawing your consent will not necessarily mean all of your data is deleted. We will retain what is necessary to fulfil our contractual obligations, and also an identifier to ensure we do not collect your data again – so we have a record that you have asked us not to process your data

You can also lodge a complaint with the ICO if you feel we have not lived up to our obligations by clicking this link https://ico.org.uk/concerns/

We do not use our data for the purposes of profiling or automated decision making. Except that we use google analytics data to help develop or website, and details on purchases to manage our stock pipeline. All analytics data is anonymous. If you want to exclude yourself from being monitored by analytics, the simplest way is to use private browsing. We use cookies – specifically google analytics – to track behaviour on our site – using private browsing will ensure that your visits are not tracked. It is not technically possible for us to remove individuals from the analytics data at present.

In order to provide you with the best, tailored experience of our site we will need to place small text files, or ‘cookies’, or your computer. Most cookies that we use are ‘session’ cookies and only exist for the time that you are using our site. They perform functional tasks – such as remembering that you are logged in as you move from page to page, or to pre-load your personal details into forms to save you time.

We also track cookies anonymously to fuel our site analytics and learn how to improve your experience and hone the relevance of our products and services.

We also use cookies in our emails to track open rates and other performance indicators – again, so that we can continually improve the relevance and experience of our offering to you.

You can set your browser to reject all cookies. Please note that if you do this then certain areas of this website will not be able to function for you. Choose a browser setting that rejects third-party cookies but allows the benign, functional ones that make the good stuff work.

External links to any site other than ours are not our responsibility – obviously we cannot control how any other business handles your data.

Security – You can rest assured that all of your personal data is kept secure. Unfortunately, no data transmission over the Internet is guaranteed 100% secure, but we do take appropriate steps to protect the security of your personal data as required under our obligations under GDPR.

We endeavour to keep your personal data accurate and up to date. If you become aware of errors or inaccuracies, please email data@sowingsuccesss.co.uk

Contact – Any queries or concerns about the use of cookies on this website should be sent by email to data@sowingsuccesss.co.uk or addressed to the Data Protection Controller, Sowing Success 20 Park Road North, Newton le Willows, Merseyside, WA12 9TE, UK.

Copyright – The Sowing Success logo and contents of this website (including text, design and graphics) are trademarked and copyrighted materials of either Sowing Success or its partners. All rights are reserved.

This Policy was updated on 1st June 2018.