How We Protect Your Privacy
Headings are included in this Policy for convenience only and shall not affect the construction or interpretation of this Policy.
This website is owned and operated by The Watermelon Studio Limited, a company registered in Scotland with Company Registration Number SC458137 and having its registered address at 19 Rutland Square, Edinburgh, EH1 2BB (the “Company”).
Our Data Protection Officer is Gwen Holbrey.
(a) email to firstname.lastname@example.org
(b) Post to The Watermelon Studio Limited, 19 Beaverbank, Edinburgh, EH7 4FB
(c) Call us on: 07713 8669077
What Does This Policy Cover?
Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
Collecting Your Data
The Company may collect some or all of the following personal data:
The data and its purpose
The data categories
Your name and contact details to communicate with you and administer your purchase and bookings…
We need contact details of a person we can contact in the event of an emergency…
(Remember to let the person know you’ve given their name and contact details to The Watermelon Studio)
To make sure we can keep you safe, we ask for your health/medical condition data…
*Unless we have consent, or it’s in your vital interests, we won’t share this data*
For insurance purposes we process video/images and for our social media platforms we may record group routines
This information may be gathered by us in connection with the following
Data Collected by Telephone
In the event that you submit your personal details by telephone, please note that the Company may monitor or record your call for one or more of the following purposes:
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email and text message with information, news, and offers on our services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
Where you have given us appropriate permission or where we are permitted by law, we may use your personal data for the following purposes and direct marketing (‘Additional Purposes’):
In the event that you wish to be removed from this process you can opt out from the footer of all marketing emails or please contact our team at email@example.com.
Our legal basis for processing your data
In line with GDPR we have assessed our legal basis’ for processing your personal data. Please see the information in the table below.
Performance of contract
We process your data to make sure we can provide you with the products and services you’ve asked for such as (but not limited to) classes, merchandise and retreats.
If it’s in our interests to process your personal data we’ll use it to enhance the effectiveness of the service you’ve asked for. We’ll always take your rights into consideration when processing your data under legitimate interests.
Our interests include:
We will need your consent when collecting your sensitive data. We will also need your consent to send you marketing communications about The Watermelon Studio.
In emergencies we may share some of your personal and sensitive data. We will only do this if you’re not able to provide consent and it’s necessary to protect an interest which is essential for your life.
What Are Your Rights?
The right to be informed
You have a right to know that we’re processing your data, why we’re processing your data and what legal basis allows us to process your data.
The right to access
(subject access request)
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it
*see more information below regarding subject access requests*
The right to erasure
You can ask us to delete your data
The right to rectification
If you have any change of circumstances or the data we have is incorrect you can ask us to update it
The right to restrict processing
You can ask us to restrict how we process your personal data
The right to object
You can ask us to stop processing your personal data and/or provide you with marketing communications
The right to withdraw consent
Where consent has been provided to use your personal data, you can withdraw consent
The right to data portability
You can ask us to export and transfer your data
You can ask us for an explanation on any automated decisions that have had a legal or significant impact. We will also consider if you ask us to re-consider the decision made.
You can make these requests verbally or you can ask via email, text or post. Please see the contact details in the "Contact" section of the main website.
From the date of any request listed above, we will respond within 1 month. In some cases, however, particularly if your request is more complex, more time may be required. If this is the case, we will let you know within 1 month from the request date. If we can fulfill the request, in any complex cases we would have up to a maximum of two months thereafter to fulfil your request.
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
In certain circumstances exemptions may apply to the request described above. In these circumstances we will let you know what the exemption is in our response.
How Long Will We Keep Your Data?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
CCTV footage is automatically deleted after 30 days.
Disclosing And Sharing Your Data
The Company may also transfer personal data to the Company-affiliated companies in other countries. These may be outside the European Economic Area (“EEA”). By supplying personal data to the company, you consent to any such transfer.
For insurance purposes video footage may be shared with insurance companies in the
event of insurance claims.
Many of our external third parties are based outside the EEA so their processing of your personal data will involve a transfer of data outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to by ensuring at least one of the following safeguards is implemented:
Please contact us at firstname.lastname@example.org if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
It is the Company’s policy that you are kept in control of the ways in which we use your personal data for the Additional Purposes. All the Company communications, in whatever medium, that involve the recording of personal data for these Additional Purposes include a short section that allows you to indicate your preferences with respect to the use of that personal data. You can choose whether or not you wish to receive additional information or promotional offers from the Company.
Security Of Your Data
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Any information that you choose to provide us with will be used to personalise and improve our customer service operations. All information is collected and stored in a secure manner and is used strictly in relation to this policy and your stated preference. The Company shall not be responsible or liable for loss of privacy, disclosure of information, harm, damage or loss that may result from your transmission of any information to us. In addition, under the law, we must cooperate fully with any law enforcement agency should a situation arise where our information about customers could be of assistance.
From time to time, the Company may introduce new products and services to our customers that may require modifications to this policy. We reserve the right to modify this policy at any time by notifying our customers, via the Company website, of a new or revised policy. These modifications will only apply to personal data that you then provide to us after the date of the modification.
As a Company customer, we may also use your contact information to inform you of other products or services we think might interest you. However, if you do not wish to be contacted for promotional purposes, you can “opt out” when the Company collects your information. Alternatively, you can update or correct your personal or business information relating to your the Company account by contacting us by post or e-mail.
Please note that your contact preferences only apply to the Company contacting you for marketing purposes. We may still need to communicate with you regarding the usability of your product or critical messages relating to your service or software. These communications may include service messages, subscription renewal notices, critical notices or legally mandated notices.
In the future, we may make changes to our privacy policies or practices. If we make material changes regarding personal information, we will update our statement and post a notice on the Company website 30 days before the changes take effect.
Contact Us for More Information
Please be sure to include your mailing address if you would like us to send you any written materials. The Company reserves the right to take reasonable steps to verify any requests for personal information it receives. We endeavour to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
The Watermelon Studio uses personal data for a range of purposes and our privacy notices provide information about why we obtain and collect personal data and how we process it in accordance with GDPR and the Data Protection Act 2018.
This privacy notice explains how The Watermelon Studio uses video/images captured by CCTV.
How is information collected?
The Watermelon Studio collects images and video via our CCTV system in our main studio, reception and pip room.
How will my info be used?
CCTV video and images are collected for a number of reasons including:
1) Protecting The Watermelon Studio and the instructors for insurance claims.
2) To check safety measures remain in place throughout our classes.
3) To check safety measures remain in place during Covid-19 crisis.
Processing of information via CCTV is carried out under legitimate interests of the studio and its instructors in regards to insurance claims and in the interest of health and safety.
How long will my personal data be shared?
Images are automatically deleted after 30 days.
What information is collected?
Video and images in the main studio, reception area, and the pip room.
Under the GDPR you have a number of rights in relation to your personal data, you have the right to;
1) Request access to your personal information.
2) request rectification of your personal information, which means you're able to have inaccurate personal information corrected without undue delay.
3) Request erasure of your personal info when certain conditions apply.
4) Restrict processing under certain circumstances
5) Object to processing
6) Data portability
7) Complain to the ICO: https://ico.org.uk/
On occasions The Watermelon Studio may be unable to comply with some of the above requests to exercise your rights listed above. Should this apply to a request you make, it will be explained to you why The Watermelon Studio is unable to comply and any options available to you.
The Watermelon Studio is the data controller and our contact details are: info@thewatermelonstudio@com.
If you have any queries relating to our CCTV please contact info@thewatermelonstudio@com.
A cookie is a very small file that is downloaded to your device when you visit a website. Cookies contain information that is transferred to your computer’s hard drive.
We use a small number of strictly necessary cookies on Our Site (booking.thewatermelonstudio.co.uk). These cookies are essential to the operation of the website and do not store any personal data. You can find more information about the individual cookies we use and the purposes for which we use them below.
First-party (booking.thewatermelonstudio.co.uk) cookies
Our Site will set some cookies that are essential for the website to operate and display correctly. These cookies, none of which capture personally identifiable information, are as follows:
This site does not set any third-party cookies.
You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of Our Site.
For further information, please contact