Privacy Policy

Last updated 8 November 2020

Our approach to privacy

We place a high priority on safeguarding confidential information and processing personal data in an ethical manner, and we take our responsibility for the security of customer data very seriously. To help us continue to achieve this, we have embedded privacy by design and by default within our operating procedures and service delivery. This means that privacy and data protection is taken into consideration and implemented in the design and delivery of all our business services, and when processing data.

This ensures that no additional actions are required by you to ensure your privacy is honoured and protected. It also means we will not share your data with third parties for marketing purposes and will only do so when necessary to provide a business service you have requested, or if legally obligated to do so.

In order to deliver our services, we rely on the following lawful conditions for processing personal data:

• Consent – you have voluntarily given consent to us processing your Personal Data.
• Contractual – the processing of Personal Data is necessary to deliver a product or service you have purchased from us.
• Legal obligation – the processing of Personal Data is necessary to comply with a legal obligation to which we are subject.
• Legitimate interests – processing is necessary under the Legitimate Interests of Lou Casey or an associated third party unless these interests are overridden by the individual’s interests or fundamental rights.

We will be clear and transparent with you about which lawful basis is used when processing your personal data.

What personal data we collect and why we collect it

In order to improve and deliver our services and to carry out necessary business functions, we may collect personal data from you through our website, via email, an online portal, or verbally. These details may include names, contact information, order information and additional information about yourself that you voluntarily provide to us (e.g. via a survey) such as gender and service preferences.

When you purchase a product or service, you will be required to provide billing information in addition to the personal and order information noted above. This may include a debit card number, credit card number, expiration date, billing address, activation codes, and similar information. Billing information is collected and processed by our third-party payment processor operating as our agent. We do not directly obtain or process any billing information.

Personal data we obtain is collected in a few key ways:

• Data disclosed by you, the individual
• Data obtained from a linked system or database
• Data generated through user interaction with systems/services, for example, our website
• Where your data is provided to us by an authorised third party, such as Facebook and/or other third-party social media sites.

Your data may be used for a number of purposes including, but not limited to:

• To provide the services we have been contracted to provide by yourself
• To contact you in the event of a workshop time change or cancellation
• To assess the quality of our services
• For administrative activities
• For crime prevention/detection (i.e. fraud)
• For legal obligations of the business
• For statistical and marketing analysis
• For customer surveys, customer relations communications and offering you services and products we believe may interest you.

You will always be told what we intend to do with any personal data we collect from you, however, the principal reasons are to:

• support the delivery of contracted services and products, or
• achieve our marketing and sales strategies.

More specifically, these may take the form of the below likely scenarios:

• When taking part in a service you have purchased from us, the information you provide will only be used for the stated purposes and/or those you consented to. In this case, we will rely on contractual necessity as the primary legal basis for processing personal data.

• We collect information to better understand how visitors use our website and interact with our marketing content so we can offer timely and relevant information. When using our website to register for a webinar or download a resource, your data may be used for the following:
  • For our own internal records
  • To improve the products and services we provide
  • To contact you in response to a specific enquiry
  • To customise our website for user needs and preferences
  • To send you promotional emails about products, services, events, offers and other things we think might be relevant to you
  • To send you promotional mailings or to call you about products, services, events, offers and other things we think might be relevant to you
  • To contact you via email, telephone or mail for market research reasons.

In this scenario, we would be relying on legitimate interests and consent, as the primary legal bases for processing personal data.

If we intend to use your data for a new purpose outside of those detailed in this Policy, this policy will be updated to keep you informed of the same; should consent be required from affected individuals, then it will be sought.

Cookies

We also collect information using ‘cookie’ technology. Cookies are data that a website stores on your computer’s or mobile device’s hard drive so that your computer will remember information about your visit. We may use session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to help us collect information and to enhance your experience using the website. If you do not want us to place a cookie on your hard drive, you may be able to turn that feature off on your computer or mobile device. Please consult your Internet browser’s documentation for information on how to do this and how to delete persistent cookies. However, if you decide not to accept cookies from us, the websites may not function properly.

Children

We do not knowingly collect personal information from children under the age of 13. If you are under 13, please do not give us any personal information. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children to never provide personal information without their permission. If you have reason to believe that a child under the age of 13 has provided personal information to us, please contact us, and we will delete that information from our databases.

Who we share your data with

We will not share, sell, or rent individual personal information to an external party without your advance permission, or unless ordered by a court of law. The personal data you provide to us is only available to relevant employees and contracted service providers. If required by law, we may disclose data to government and/or enforcement agencies.

How long we retain your data

We will retain your personal information in a form that identifies you only for as long as it serves the purpose(s) for which it was initially collected as stated in this Privacy Policy, subsequently authorised, or as allowed under the law.

Cross-border transfer of personal data

Due to the global reach of our business, we work in different countries and it is sometimes necessary to transmit your data internationally to deliver these services to meet our contractual requirements. If it is necessary to do so, we will ensure an adequate level of protection is in place to safeguard your data.

Data collected will be stored and processed primarily within the UK but may be stored and processed in another country, including a country that is not in the European Economic Area (EEA). We will ensure that the data protection standards employed within the UK are observed by our partners with whom we need to share information. Your decision to provide data to us, or allow us to collect such data through our website, constitutes your consent to this data transfer.

What rights you have over your data

Any personal data we collect from you belongs to you. Under the UK data protection laws, you have the right to know if your data is being processed, why and for how long. This includes details of the categories of data we process, whether your data has been disclosed to third parties and their identities, and how to raise a complaint with the Information Commissioner’s Office (ICO).

In addition to your right of access to data we will uphold other rights afforded to you under the applicable data protection laws in the UK, namely:

• the right to request that errors in your personal data are amended or corrected;
• the right to delete your personal data if it is no longer needed for the original purpose, or if you withdraw consent (and no other lawful basis for the processing exists);
• the right to restrict processing where the relevant personal data either cannot be deleted (e.g. because the data are required for the purposes of exercising or defending legal claims) or where you do not wish to have the data deleted;
• the right to object to processing carried out for the purposes of direct marketing, where processing is likely to cause or is causing damage or distress, or where you may be evaluated or subject to decisions on the basis of automated processing;
• the right to request a copy of the personal data you have provided to us for yourself, or for it to be transferred to another organisation, if the processing was based on consent, the provision of business services under a contract, or processing carried out by automated means.

We will not contact you for marketing purposes unless you have given your prior consent. You can change your marketing preferences at any time by emailing hello@loucasey.com or by clicking on the link in our marketing emails. Please allow us a reasonable time to respond to your inquiries and requests.

The accuracy of your information is important to us. If you believe that any information we are holding about you is incorrect or incomplete or wish to exercise any of your rights in relation to your personal data, please contact us.

Links from our website

Our website and learning portals may contain links to other websites. However, once you have used these links to leave our site, you should note that we do not have any control over the other websites and are not responsible for the privacy practices of such other websites.

If you submit personal data and other information to a website to which we link, we are not responsible for its protection and privacy. Always exercise caution when submitting data to websites. Read the site’s data protection and privacy policies fully.

Business transfer

In the event of a merger, dissolution, or similar corporate event or the sale of our assets, we expect that the Information that we have collected and/or received, including personal information, would transfer to the surviving entity in a merger or to the acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such personal information as outlined in this Privacy Policy.

Contact us

If you have any questions regarding this Privacy Policy, please contact us at: hello@loucasey.com. Please allow us a reasonable time to respond to your inquiries and requests.