The controller is YOLO Wellbeing Ltd., and we are committed to complying with the UK’s data protection law and the EU General Data Protection Regulation (GDPR) for the protection of personal data, as well as the principles of data security in the configuration of our services. We can be contacted in writing at the Registered office address 6 Oak Bank, Preston, PR5 0ED or by email to firstname.lastname@example.org.
If you have any questions about this Privacy Notice or how we use your personal data, please contact us in writing or by email, using the details stated above.
1.0 The data we collect. When engaging YOLO Wellbeing Ltd and its services you will be required to disclose personal data including full name, occupation, email address, health data including but not limited to personal emotional, physical and lifestyle information.
2.0 The primary purpose for collecting personal information is to allow YOLO Wellbeing Ltd to provide the safe delivery of the services and products you have requested from the business. Failure to provide this personal data will mean we are unable to safely execute our services.
2.1. Personal Health data is kept strictly confidential. It will not be shared with the client company or anyone outside of YOLO Wellbeing Ltd. The sole purpose of collecting personal health data is to provide delivery of safe treatments and activities. The information is also required to meet the contractual requirements of our insurance company.
2.2 We will collect, store, and use elements of your personal data. The lawful basis for processing this personal data is known as legitimate interest and is necessary by YOLO Wellbeing Ltd. in order to safely administer the products and services you have requested from us.
2.3 We may also process some of your personal information through our internal systems to enable us to send you relevant communications. The lawful basis for processing this information internally will be Legitimate Interest. Any email communications we send will however comply with the Privacy and E-communications Regulation (PECR.). We will use your information to tell you about products and services available from us which may be of interest to you. We may also use your information to tell you about products and services from our approved partners. You have a right to opt-out of our direct marketing communications at any time. You can opt-out by following the unsubscribe instructions at the bottom of the communication or by emailing Customer@yolowellbeing.co.uk
2.4 YOLO Wellbeing Ltd will never sell or share personal information with third parties.
3.0 How we collect personal data. We may collect data digitally and in writing. How we collect your personal data will determine how it is stored.
3.1. Personal data collected digitally will be received and stored on secure external servers. The security protocols of the servers we use are updated and reviewed regularly to safeguard the personal data we retain.
3.1.1. Whilst we take every precaution to secure the personal data we receive, no information shared digitally can ever be guaranteed as completely secure. Should a client feel uncomfortable sharing personal information online we advise supplying written information.
3.2 Personal data collected in writing is scanned and stored digitally offline on USB devices which are stored in a secure location. Written information is then destroyed and disposed of securely.
3.3 Term of stored data. Personal data will be stored for the period set-out by the Company insurers. The current Insurers, The Beazley Group require client data, for the purposes of providing YOLO Wellbeing Ltd services as ten years.
4.0 Deleting personal data. YOLO Wellbeing Ltd. will take steps to erase any personal data when it is no longer necessary for the purposes for which it is collected or otherwise contractually required.
4.1 Under the GDPR, you have the right to ‘block’ or request the deletion or removal of personal data to prevent further processing. This right to erasure is also known as ‘the right to be forgotten’. Specific circumstances in which you can request the deletion or removal of personal data includes:
4.1.1 Where the personal data is no longer necessary for the purposes for which it is collected or otherwise processed.
4.1.2 Where you withdraw consent.
4.1.3 When you object to the processing and there is no overriding legitimate interest for continuing the processing.
4.1.4 Where the personal data was unlawfully processed (i.e. otherwise in breach of the GDPR).
4.1.5 Where the personal data has to be erased in order to comply with a legal obligation.
4.2 In case a deletion is not possible due to legal, statutory or contractual retention periods, or if it requires disproportionate efforts or prejudices your legitimate interests, the data will be moved and stored offline, but not deleted.
5.0 You also have the right to see what personal information we are processing. This can be requested by emailing our Data Protection Officer at Customer@yolowellbeing.com. There will be no charge for this service. If, however, you log multiple requests, then there may be nominal charge which we will request to cover the administration of these requests.
You may also request from us a copy of the personal data which has been processed through automated means. This will be provided in a structured, commonly used, and machine-readable format (where technically feasible) which you may then transmit to another controller. You have the right to request us to send this to another controller on your behalf, but only if this is technically feasible for us to do so.
6.0 You have the right to withdraw your consent for us to collect and process your data at any time. If you wish to withdraw your consent, please confirm this in writing to our Data Protection Officer. Please be aware that we may be unable to provide some services without your consent to collect some personal data, as contractually required by our insurers.
7.0 If at any time we intend to further process your personal data for a reason not originally communicated, we shall provide you, prior to that processing taking place, all relevant information on the additional processing.
8.0 If you have a complaint about any aspect of data protection or if you feel your privacy has been breached by us, we would like to hear from you. To help us investigate and resolve your concerns as quickly as possible, please contact our Data Protection Officer.
If you are unhappy with the final response you have received from YOLO Wellbeing Ltd, you have the right to complain to the supervisory authority, the Information Commissioner’s Office (ICO) within three months of your last meaningful contact with us. You can call the ICO on 0303 123 1113 or by visiting their website: www.ico.org.uk