Privacy Policy for Michelle Hay Training Limited
Who we are
Our website address is: https://michellehay.com.
Michelle Hay Training Limited (MHT) has created this privacy policy to demonstrate its commitment to data privacy and its alignment to the requirements of the General Data Protection Regulations 2018 (GDPR) in respect of handling and processing personal data.
Michelle Hay Training Limited is registered with the UK Information Commissioner’s Office as a Data Controller and Data Processor. Michelle Hay Training Limited is registered at Companies House, number 8613413.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Contact forms
Personal or business information supplied to MHT via the contact form will be limited to the details required for us to respond to you on request. We will only use the information supplied for the purposes of contacting you about the nature of your enquiry. We will not share your personal data with third parties without your written permission. E.g. your enquiry is for a recommendation of an associated service, that is not provided by MHT or your enquiry develops into business with MHT (see Booking forms and ‘Who we share your data with’).
Booking forms
The information supplied to us on the booking form will be limited to the details required for us to undertake the basic functions of a consultancy and training business. Information will also be used for billing purposes via a secure encrypted accountancy system. We will not share your personal data with third parties other than for investigations carried out by regulatory bodies.
Online training
MHT provides an online training facility. The address is: https://www.videotilehost.co.uk/hs/onlinetrainingworks/index.php
Clients company name, email address and contact telephone number are collected in order to set up an account. The client is responsible for providing personal details of the learners that they then register to sign up to individual training courses. Learners names and email addresses are collected for the purpose of providing access to the training course and to provide a certificate of training.
Other information and cookies
I may collect statistical information about visits to the site to help me understand its usage (this information is anonymous). michellehay.com and related tools may use cookies for this and other purposes. The cookies that WordPress generates for commenters are described in the WordPress codex and Google explains the cookies that Google Analytics sets on the Google Developers site. You can usually remove or block cookies by using settings in your browser.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
We do not share your personal data with third parties. We will only store your personal data in secure and trusted online systems for legitimate business needs, such as cloud storage, accounts systems and MailChimp.
How long we retain your data
If you leave a comment on the website, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue. Website administrators can also see and edit that information.
MHT retains copies of delegate registration and feedback forms for the purpose of MHT accreditation by relevant awarding bodies and regulatory bodies. Data collected as part of the training process will be retained for 5 years to ensure legal compliance regarding refresher training. Client’s business data information held by MHT will be retained for the purpose of legal investigations by regulatory bodies for a period of 5 years.
What rights you have over your data
If you have left comments, completed a contact form or completed a booking form, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Right of access: MHT has a duty to comply with the requirements of Subject Access Requests (SAR).
Right to be informed: MHT has provided this policy to show how we handle your data.
Right to rectification: MHT will honour the right for individuals to have inaccurate personal data rectified or completed if it is incomplete.
Right to be forgotten: You have the right to ask MHT to remove your data.
Right to restrict processing: You may restrict processing for a legitimate reason. However, we would still have the right to hold that information.
Right to data portability: You may be able to obtain the information that we hold about you and use it for your own purposes.
Should you wish to exercise any of your rights above, please email michelle@michellehay.com stating the following information:
- Name
- Contact details
- Relationship to subject
- Full details of information relating to your request
- Reasons for request and the right being exercised
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Where a formal qualification is taken, only learner’s names are sent to the awarding body to enable them to provide their certificate. Certificates are sent via registered post to the learners or hand delivered by MHT.
Additional information
How we protect your data
When you access the website, data traffic is encrypted using up to date secure socket layer (SSL) so that it can only be accessed by the end user. All sensitive information on the website, such as passwords, are encrypted by a proprietary encryption system. All data held on MHT website systems is held on a secure server hosted by WP Hosting.
Physical documents obtained at the time of training will be stored electronically using a secure cloud-based storage system. These will only be shared with regulatory bodies who have a legal right to access them. All paper documents containing personal data information will be destroyed securely.
What data breach procedures we have in place
In line with regulatory requirements, MHT has processes for issue and incident management, including data breaches. These processes include the required notifications to be sent to the Information Commissioners Office and to clients. This is reviewed annually and updated as processes are developed.
What third parties we receive data from
MHT provides a sub-contracting service to other training providers. As such third-party information is shared by that provider with MHT that may include data about the learners and client. MHT will not share that information other than back to that training company as part of the training and assessment process. Personal data processed and collected in this way will not be retained in any form by MHT.
Marketing
MHT maintains a marketing database that contains basic details of individuals who have consented to MHT sending information about training, health and safety and/or food safety news and updates. Each marketing email that is sent provides the opportunity to unsubscribe from receiving emails at any time.
michellehay.com gives users the opportunity to opt-in to receiving news, training and updates relating to matters of health and safety and food safety. MHT will not contact users for any other purpose and will not share user’s information with third parties.