WHAT INFORMATION DOES WHITE WOLF HOLD?
When clients sign up via MindBody Online booking system they provide their name and optional phone number, email, address. When clients are new I ask about any medical conditions but don’t hold any records. If clients are pregnant they sign a waiver from to accept they acknowledge that the class they are attending is a general (not yoga specific class.)
WHAT INFORMATION DOES WHITE WOLF KEEP?
I will retain wavier forms for 5 years and then destroy.
MINDBODY AND GDPR
Where is MINDBODY’s consumer data stored? Where are MINDBODY’s backup servers located?
MINDBODY stores all data in servers and backup servers located in the United States. MINDBODY has Privacy Shield certification which complies with GDPR regulations related to transferring data outside of the EU
Will consumers have “the right to be forgotten” (have their data removed from MINDBODY upon request)?
Your customers can submit their requests to remove their information from MINDBODY databases through the Data Options Pages.
Will MINDBODY be introducing a clearly defined retention period for consumer data?
MINDBODY is reviewing our procedures to ensure that data is retained no longer than is required. Identifiable consumer data will be removed if requested by the consumer and approved by you, the customer.
Does MINDBODY have a documented Breach Notification Process?
Yes, we have an internal, documented Breach Notification Process. Externally, we will be updating our Terms of Service to include a more detailed description of our notification obligations in the event of a data breach.
Will MINDBODY be updating its contractual terms with respect to GDPR?
Yes, we are currently undertaking a coordinated effort to update contractual terms with customers, partners, and vendors.
Is MINDBODY planning to release new features or functionality to support GDPR?
Yes. We are creating tools and processes to assist customers, including responding to requests for deletion, data portability, access, and rectification. However, please note that you remain ultimately responsible for compliance with these requirements, including, for
MINDBODY is password protected and waiver forms are kept in a locked home office.
Privacy Statement to be added on to website (on 24/10/19). Clients always advised how we use their information shared. They can opt in/out of mailing lists at any time.
PHOTOGRAPHS AND VIDEOS
Permission is always sought from clients before uploading any photographs/videos on social media. During certain classes/workshops I mention that photos will be taken for marketing purposes only – and that I am aware of any person that asks to be excluded. Individuals have the right to deny consent to the use of any photo where they might be indentified.
CONTACT WITH CLIENTS
Contact with clients is only very made for legitimate reasons. I.E to let someone know about a class cancellation. We have a retreat mailing list for those who have signed up and are interested in receiving info on upcoming trips.