What data do you hold when I become a client?
Becoming a client requires you to share:
- Your name
- Phone number
Payment information is managed securely by Stripe. Only the last four digits of your payment card and its expiry date are are visible, and payment information is stored securely by Stripe.
You may choose to share further personal information (for example, your CVs or applications).
What happens to my data and where is it held?
Your data is used to deliver the careers services you have booked. When you become a client you consent to us contacting you to inform you about the services you’re using. If you choose to subscribe to email news, you can unsubscribe at any time. We don’t make any automatic or profiling decisions based on your personal data. All personal data is held in electronic format only, protected by password.
We use online services to help automate booking processes. Booking is via Acuity Scheduling (https://www.acuityscheduling.com/). Acuity processes your payments using an integration with Stripe (https://stripe.com/), and data processing using these services occurs securely, using international facilities: “when we transfer personal data from the European Economic Area (EEA), the UK or Switzerland to the U.S., including to our U.S.-based data centers, we rely on, in accordance with Articles 45 and 46 of the GDPR, lawful data transfer mechanisms recognized as providing an adequate level of protection for such data transfers, in particular the EU Standard Contractual Clauses”.
How can I access/update/delete my data?
Acuity Scheduling gives you the option to create an account when you make a booking, which you can use to log in at a later date to see your appointments and data. You can request your information to be deleted at any time by emailing firstname.lastname@example.org,uk.
Once a year all client data is manually deleted for ‘inactive’ clients – anyone who hasn’t booked a service in the last year.
What help exists if I’m not happy with how my data is being managed?
I’ll always do my best to help: email email@example.com,uk in the first instance. You can learn more about your rights and how to make a complaint about data handling (not that I hope you’ll need to!) at https://ico.org.uk/your-data-matters/