
"Finding the shine in young minds"
​Privacy Policy
Introduction
​
Sunny Day Coaching is a private coaching business offering one to one coaching programmes for children. This policy will explain areas of this website that may affect your privacy and personal details, how we process, collect, manage and store those details and how your rights under the GDPR & DPA are adhered to. Additionally, it will explain the use of cookies or software, advertising or commercial sponsorship from third parties and the download of any documents, files or software made available to you (if any) on this website. Further explanations may be provided for specific pages or features of this website in order to help you understand how we, this website and its third parties (if any) interact with you and your computer/device in order to serve it to you. Our contact information is provided if you have any questions.
​​
How we may collect personal data
​
We obtain personal data about you, for example, when:
-
You have entered your personal details in any of the forms that may appear on our website
-
You have contacted us via other methods, such as telephone, text, direct mail or in-person
-
Your details have been collated from 3rd parties such as employer/publicly available resources​
The Type Of Information Held About You
​
The information we hold about you may include:
-
your personal details (such as your name/address/contact information);
-
details of services/products we have provided;
-
our correspondence and communications with you;
​
What are your rights?
​
The Data Protection Act 1998 gives individuals the right to access the personal data which organisations hold about them, subject to certain exemptions. Requests for data are known as subject access requests. If you have given us your consent to process your data but change your mind later, you have the right to withdraw your consent at any time. If you want to withdraw your consent, please contact us directly zoe@sunnydaycoaching.co.uk.
​
You have the following rights under GDPR as follows:
-
Access – you have the right to be provided with a copy of your personal data
-
Rectification – you have the right to require us to correct any mistakes in your personal data
-
To be forgotten – you have the right to require us to delete your personal data – in certain circumstances only
-
Restriction of processing – you have the right to require us to restrict the processing of your personal data – in certain circumstances
-
Data portability – you have the right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party – in certain circumstances.
-
To object – you have the right to object at certain times to your personal data being processed for the purpose of our legitimate interests.
-
Not to be subject to automated individual decision-making – you have the right not to be subject to decision-based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
Exemptions
​
Sunny Day Coaching could refuse a subject access request based on, such situations including (but not exclusive of):
· The release of the data would jeopardise the prevention or detection of crime, or the apprehension or prosecution of offenders;
· The release of data would potentially place a child’s welfare at risk
· The data is covered by legal professional privilege;
​
If Sunny Day Coaching withholds data from you because of an exemption under the Data Protection Act, we will explain why the data have been withheld and the relevant exemption, unless doing so would itself disclose information which would be subject to the exemption.
The Data Protection Act allows us to refuse to provide you with a copy of your data if the effort in doing so would be disproportionate, or if the same or similar data have already been provided to you and a reasonable interval has not elapsed since your previous subject access request.
We have to protect the Data Protection rights and other legal rights of other individuals when we respond to subject access requests. Information which does not relate to you may be redacted (blacked out) or removed, particularly if it relates to other individuals. Sometimes we may not be able to release data relating to you because doing so would also reveal information about other persons who have not consented to their data being released, and it would not be reasonable in the circumstances to release the data without their consent. In such cases, you will be informed that data about you have been withheld and the reasons for doing so.
​
Sunny Day Coaching will not consider the release or sharing of information about a child’s treatments unless an adult holding parental responsibility has actively consented to this. In circumstances where there is any question about the legal responsibility of a parent consent from both parents will be requested to release information.
​
In some circumstances a client or parent of a client will require that we share the information from the treatment session with a professional third party, for instance a solicitor, lawyer, social services or the child’s educational facility. These requests are managed on an individual basis and firstly take account of our insurance and legal requirements, parental responsibility and our requirements to safeguard the children and young people we work with.
​
The only exception to this is in the circumstances where it is:
​
· Deemed that a client has a risk to their own health, or the health of another in which relevant parties would be contacted, where possible with the consent of the client involved.
· If during my contact time with a client I become aware that there is a safeguarding risk to either the client or another person in which case I will contact the relevant parties dependent on the situation.
· Where I am required to comply with legal requirements (e.g. a court order)
Data Security
We maintain reasonable physical, electronic, standard security practices surrounding all data stored. Access to all data is limited to authorised access only. We will make reasonable efforts to ensure that your privacy interests are protected.
Use of Cookies
​
This website uses cookies to provide an enhanced user experience while visiting the website. As required by legislation, the cookies used on this site do not store any personal data but instead make use of anonymous tracking data.
What are cookies? Cookies are small files saved to the user’s computers hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server to provide the users with a tailored experience within this website.
Users are advised that if they wish to deny the use and saving of cookies from this website onto their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors or use the cookie control system if available upon their first visit.
​
Types of Cookies that we may use
​
Strictly necessary cookies:
These cookies are required to enable your visit to the site and to navigate between pages and use the features of our website.
​
Performance cookies:
These cookies do collect any personal information, they are anonymous and record statistical information about how visitors navigate our website. They do help us to improve how our website functions and will allow us to make future improvements to visitor experience.
By using our website, you agree that we can place these types of cookies on your device. All browsers have the functionality to allow users to block cookies from specific sites or to block cookies from all sites, as well as allowing the user to delete all cookies from their hard drive. Please refer to your browser’s help facility.
​
Disclosing Your Information to Third Parties
We do not pass on your details to third parties without prior consent. In the event that we need to share your data with a third party, we will request your permission prior to this.
​
Website Visitor Tracking
This website uses tracking software to monitor its visitors to better understand how they use it. The software will save a cookie to your device’s hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.
​
Downloads & Media Files
Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available users are advised to verify their authenticity using third party anti-virus software or similar applications.
We accept no responsibility for third party downloads and downloads provided by external third party websites and advise users to verify their authenticity using third party anti-virus software or similar applications.
​
Contact & Communication With us
Users contacting us through this website do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use.
Where we have clearly stated and made you aware of the fact, and where you have given your express permission, we may use your details to send you products/services information through a mailing list system. This is done in accordance with the regulations named in ‘The policy’ above.
​
External Website Links & Third Parties
Although we only look to include quality, safe and relevant external links, users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text/banner/image links to other websites.)
​
Shortened URL’s; URL shortening is a technique used on the web to shorten URL’s (Uniform Resource Locators) to something substantially shorter. This technique is especially used in social media and looks similar to this (example: https://goo.gl/a46UYV). Users should take caution before clicking on shortened URL links and verify their authenticity before proceeding.
​
We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should therefore note they click on external links at their own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.
​
Social Media Policy & Usage
We adopt a Social Media Policy to ensure our business and our staff conduct themselves accordingly online. While we may have official profiles on social media platforms, users are advised to verify authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media.
​
There may be instances where our website features social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use social sharing buttons at your own discretion and accept that doing so may publish content to your social media profile feed or page.
​
Storage of child data
Child data for those under the age of 18 years is kept for a period of 5 years after the child turns 18, unless otherwise specified by the parents in writing and only then on legal advice.
​
Subject Access Requests
Subject Access Requests must be made in writing. When completing the subject access request, please be as specific as possible about the information which you want access to, as this will assist us in processing your request.
​
We will send you an acknowledgement of your request as soon as possible. This will indicate the deadline by when we will send you a response. We may also ask you to provide further information or clarification if we require it to process your request, and may contact you again for additional information or clarification if necessary.
​
Information shared will be posted by signed delivery to the required address. Information will not be provided by email.
​
Requesting your information:
​
You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee may be payable. This fee will not exceed £10, or the prevailing statutory maximum. If you would like a copy of the information held on you, please write to
Zoe Relf (owner)
​
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
​
The ICO’s address:
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
​