General Data Protection Regulation (GDPR)

Ayurva adheres to the Data Protection Act 2018. This controls how personal information is used by Ayurva.

Everyone is responsible for using personal data and we all have to follow strict rules called ‘data protection principles’.

Ayurva makes sure information is:

  • used fairly, lawfully and transparently
  • used for specified, explicit purposes
  • used in a way that is adequate, relevant and limited to only what is necessary
  • accurate and, where necessary, kept up to date
  • kept for no longer than is necessary
  • handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

There is stronger legal protection for more sensitive information, such as:

  • race
  • ethnic background
  • political opinions
  • religious beliefs
  • trade union membership
  • genetics
  • biometrics (where used for identification)
  • health
  • sex life or orientation

There are separate safeguards for personal data relating to criminal convictions and offences.

Personal rights as part of Ayurva
Under the Act of 2018, you have the right to find out what information Ayurva store about you. These include the right to:

  • be informed about how your data is being used
  • access personal data
  • have incorrect data updated
  • have data erased
  • stop or restrict the processing of your data
  • data portability (allowing you to get and reuse your data for different services)
  • object to how your data is processed in certain circumstances

Ayurva will not use your personal data for:

  • automated decision-making processes (without human involvement)
  • profiling, for example to predict your behaviour or interests

Find out what data Ayurva holds about you
Ask for a copy of the information they hold about you.

How long it should take
Ayurva will provide you with a copy of the data they hold about you as soon as possible, and within 1 month at most. For particularly complex or multiple requests, Ayurva can take a further 2 months to provide data.

In this case, Ayurva will tell you:

  • within 1 month of your request
  • why there’s a delay

When information can be withheld
There are some situations when organisations are allowed to withhold information, for example if the information is about:

  • the prevention, detection or investigation of a crime
  • national security or the armed forces
  • the assessment or collection of tax
  • judicial or ministerial appointments

Ayurva does not have to say why we’re withholding information.

How much it costs
Requests for information are usually free. However, Ayurva can charge an administrative cost in some circumstances, for example if:

  • you’re asking for a large amount of information
  • your request will take a lot of time and effort to process

Make a complaint
If you think your data has been misused or that Ayurva has not kept it secure, you should contact them and tell them.

If you’re unhappy with Ayurva’s response, you can make a complaint to the Information Commissioner’s Office (ICO).

ICO
Telephone: 0303 123 1113
Textphone: 01625 545860
Monday to Friday, 9am to 4:30pm


Wycliffe House Water Lane
Wilmslow
Cheshire
SK9 5AF

Similar Posts