This Data Protection Policy governs WealthBeing CIC’s processing of all personal data provided to us via the WealthBeing website, submitted to us by email, over the phone or through other means. Please read it carefully.
1. Who we are and how we manage your personal data
WealthBeing CIC, trading as WealthBeing, is registered as a data controller in the United Kingdom for the purposes of the EU GDPR. We ensure that the data you supply to us is processed fairly and lawfully, with skill, due care and attention and used only for the purposes set out in this policy.
2. How we receive information and how we may use it
- Directly from you: This is information you provide in our discussions and correspondence.
- Through publicly available sources: For example, we use the following public sources:
- Company websites
- By reference or word of mouth: For example, you may be recommended by a friend, a former employer, a former colleague or even a present employer.
- Direct application. When you apply directly to become a mentee.
This statement explains how we process personal data received into our organisation. When you contact WealthBeing you MUST consent to us collecting and storing your personal information. You will not be able to submit your enquiry or details to WealthBeing without consenting to us storing your personal data. This may include but is not restricted to your name; contact details; address; employment history; mobility and education.
During telephone conversations and face to face interviews, strengths and work experience may be stored on your personal record. This information facilitates our ability to mentor you. By explicitly providing consent when you register with WealthBeing, you are providing permission for our storage of this information. WealthBeing will never share personal information or any other matters pertaining to you, which are contained within our record, with a third party, without your explicit consent.
Due to the nature of mentoring, engagements may pause and re-commence. It is not uncommon for this to occur years after the initial engagement. For this reason, your consent includes explicit consent to retain your personal details until such time as you wish us to delete your records from our database or refrain from further engagement.
If you do not consent to WealthBeing storing your personal data or setting up a personal registration for you, please do not apply to WealthBeing for mentoring. We are unable to mentor you without receipt of consent to process and store your personal information.
How do we use your personal data?
We use your personal data to keep in contact with you, and to ensure that we maintain the highest standards of mentoring. Some details will be shared with other members of the Association of Business Mentors so as to review our work and ensure that we meet the levels of skill and care required by it.
How long do we keep your personal data for?
We only retain your information for as long as is necessary for us to use your information as described above or to comply with our legal obligations. However, please be advised that we may retain some of your information after you cease to use our services, for instance if this is necessary to meet our legal obligations, such as retaining the information for tax and accounting purposes.
When determining the relevant retention periods, we will take into account factors including:
- our contractual obligations and rights in relation to the information involved;
- legal obligation(s) under applicable law to retain data for a certain period of time;
- our legitimate interest where we have carried out a balancing test (see legal basis below);
- statute of limitations under applicable law(s);
- (potential) disputes;
- if you have made a request to have your information deleted; and
- guidelines issued by relevant data protection authorities.
Otherwise, we securely erase your information once this is no longer needed.
What is a cookie?
A cookie is a small text file that is downloaded when a user accesses a website. It allows the website to recognise that individual’s device and store some information about the individual’s preferences or past actions.
Rules on cookies
In order to comply with GDPR, WealthBeing must:
- tell you the cookies are there;
- explain what the cookies are doing and why; and
- get your consent to store a cookie on your device.
Cookies are used in order to make our website work more efficiently and to provide us with information when you contact us. The table below provides information on all of the cookies used by our website.
Category 1: strictly necessary cookies
Category 2: performance cookies
Category 3: functionality cookies
WealthBeing does not use advertising cookies.
|PHPSESSID||Session||Used for managing user session on the website.||Category 1|
|_ga||2 years||Used to distinguish users on the Google Analytics platform.||Category 2|
|_gat||1 minute||Used to throttle request rate on the Google Analytics platform.||Category 2|
|_gid||7 days||Used to test that cookies are enabled and being accepted by the browser. Hides the cookie notice we’ve created.||Category 3|
The first time you visit our website you will be asked whether you consent to us storing cookies, as detailed in the table. Please tick the box, to confirm that you consent to us using cookies. If you do not consent, you will still be able to access our website, however, your ability to carry out certain functions, may be limited.
4. Your Rights
What rights do you have in relation to the data we hold on you?
By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country.
The right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Policy.
The right of access
This is so you’re aware and can check that we’re using your information in accordance with data protection law.
The right to rectification
You are entitled to have your information corrected if it is inaccurate or incomplete.
The right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to continue using it. This is not a general right to erasure; there are exceptions.
The right to restrict processing
You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability
You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
The right to object to processing
You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer wish to be contacted with potential opportunities).
The right to lodge a complaint
You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator.
The right to withdraw consent
If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.
5. Request to have personal data amended
In the unlikely event you find personal data stored about you by WealthBeing is inaccurate, you must advise us immediately. We will amend it within two weeks.
6. Request to have personal data removed or deleted
Upon receipt of a request to delete an individual’s personal registration, WealthBeing will ensure that your personal record is deleted within 30 days. In the event that you wish to be erased from our database you should contact malcolm@WealthBeing.co.uk.
7. Notification of Breaches
In the unlikely event that our computer systems are compromised and there is a potential loss of confidentiality, we will report this breach to you.
In the unlikely event that personal data is taken or exposed from WealthBeing records without our consent, we will provide reports surrounding that exposure within 72 hours of being notified of such an event and take any action necessary to restore security of your personal data.
If WealthBeing receive a request for access to personal information we will verify your identity before releasing your personal data to you. We will not release information to any third party.
If you would like to make a request for access to your personal information please contact: malcolm@WealthBeing.co.uk
Alternatively, you can contact us by writing to:
GDPR Compliance Officer
The Cider Mill
9. Complaints procedure
If you have a complaint about the way your data is stored or handled by WealthBeing, please contact us at: malcolm@WealthBeing.co.uk
Alternatively you can contact us by writing to:
GDPR Compliance Officer
The Cider Mill
10. Escalated Complaints
If you remain unhappy with the handling of your data you can complain to the ICO.
Information Commissioner’s Office
The Cider Mill
Company Number 9637317. Registered in the UK.
Data – information which is being processed by equipment operating automatically in response to instructions given for that purpose, is recorded with the intention that it should be processed by means of such equipment, is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system or forms part of an accessible record.
EU GDPR – this is the European Union Directive which sets out principles relating to the use of data to ensure that the rights of the person who is the subject of the data are protected under the law.
Data subject – the person who determines the purposes for which, and the manner for which, any personal data is processed. Personal data – data which relates to a living individual who can be identified from that data, or from that data and other information which is in the possession of, or is likely to come into the possession of, WealthBeing.
WEALTHBEING CIC. – t/a WealthBeing.
Sensitive personal data – personal data consisting of information as to the racial or ethnic origin of the data subject, political opinions, religious beliefs or other beliefs of a similar nature, membership of a trade union, physical or mental health or condition, sexual life, the commission or alleged commission of any offence or any proceedings related to any offence.
Third Parties – these are companies and people other than WealthBeing.
Users – people who use our website and register their details with us for the purposes of mentoring.