Mini Committee Privacy Notice

We are committed to protecting your privacy. This Privacy Notice explains how we will process personal data when you visit our website, interact with us, or receive our services.

For this website and the services we provide, we are the data controller.

The personal data we collect and how we use it

Personal data, or personal information, means any information about an individual from which a person can be identified.

We may collect, use, store and process different types of personal data about you (or anyone’s personal data you provide to us) which we have grouped together as follows:

Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, data of birth and gender.

Contact Data includes billing address, delivery address, home address (if we are carrying out an in person consultation) email address and telephone numbers.

Financial Data includes bank account, payment card details and payment details relating to other methods of payment.

Transaction Data includes details about payments from you and details of other services you have purchased from us.

Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the website.

Profile Data includes bookings made by you, your interests, preferences, feedback and questionnaire responses, and any data captured and provided by you.

Usage Data includes information about how you use our website and services and cookies collected during visits to our website.

Marketing and Communications Data includes your preferences in receiving marketing from us and any third parties and your communication preferences.

Your Child’s Data (as provided by you) includes name, age, height, clothing sizes, photographs of the child (where consent is provided), details of physical appearance including hair colour, eye colour, and skin tone where a photograph is not provided.

How is your personal data collected?

We use different methods to collect data from and about you including through:

Direct interactions: You may give us your Identity Data, Contact Data, Financial Data or your Your Child’s Data by filling in forms or corresponding with us via email or otherwise. This includes personal data you provide when you purchase our services, request marketing to be sent to you, complete a questionnaire, give us feedback or contact us.

Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. You can control cookies in your browser settings, but some features may not work as well without them.  

Contact Data, Financial Data and Transaction Data from providers of technical, payment and delivery services such as Stripe based inside and outside the UK.

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

●       Where we need to perform the contract we are about to enter into or have entered into with you.

●       Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

●       Where we need to comply with a legal obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before receiving and using any personal data about your child, including images. You have the right to withdraw consent at any time by contacting us.

We will use secure systems to protect your personal data.

Purposes for which we will use your personal data

We have set out below a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are, where appropriate.

For the purposes of the below, the following definitions have the meaning assigned to them:

●       Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

●       Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.

●       Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.

 We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.

PURPOSE/ACTIVITY: To register you as a new customer

TYPE OF DATA: (a) Identity (b) Contact (c) Child's

LAWFUL BASIS FOR PROCESSING: Performance of a contract with you

---

PURPOSE/ACTIVITY: To process and deliver your booking/services, including:

(a) Pre consultation, consultations, recommendations, post consultation output and recommendations

(b) Manage payments, fees and charges

(c) Collect and recover money owed to us

TYPE OF DATA: (a) Identity (b) Contact (c) Profile (d) Child's (e) Financial (f) Transaction (g) Marketing and Communications

LAWFUL BASIS FOR PROCESSING: (a) Performance of a contract with you (b) Necessary for our legitimate interests (to receive payment, recover debts due to us)

---

PURPOSE/ACTIVITY: To manage our relationship with you, which will include:

(a) Notifying you about changes to our services

(b) Asking you to provide feedback

TYPE OF DATA: (a) Identity (b) Contact (c) Profile (d) Marketing and Communications

LAWFUL BASIS FOR PROCESSING: (a) Performance of a contract with you, (b) Necessary to comply with a legal obligation, (c) Necessary for our legitimate interests (to keep our records updated and to understand how customers use our services)

---

PURPOSE/ACTIVITY: To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

TYPE OF DATA: (a) Identity (b) Contact (c) Technical

LAWFUL BASIS FOR PROCESSING: (a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud) (b) Necessary to comply with a legal obligation

---

PURPOSE/ACTIVITY: To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

TYPE OF DATA: (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical

LAWFUL BASIS FOR PROCESSING: Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy)

---

PURPOSE/ACTIVITY: To use data analytics to improve our website, services, marketing, customer relationships and experiences

TYPE OF DATA: (a) Technical (b) Usage

LAWFUL BASIS FOR PROCESSING: Necessary for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)

---

PURPOSE/ACTIVITY: To make suggestions and recommendations to you about our services that may be of interest to you

TYPE OF DATA: (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Child's (g) Marketing and Communications

LAWFUL BASIS FOR PROCESSING: Necessary for our legitimate interests (to develop our products/services and grow our business)

---

Disclosures of your personal data

We may disclose your personal data to third parties which are necessary:

●      to perform a contract which we have entered into with you (or to take steps, at your request, to enter into a contract with you) e.g. payment providers.

●      for the administration of our business e.g. support tools.

●      for compliance with a legal obligation we are subject to.

We use suppliers located in and outside of the UK and EEA. If we transfer your personal data outside of the UK or EEA, we will ensure that the personal data is protected through methods approved under the applicable data protection laws.

Keeping your personal data

 We will keep personal data in accordance with the following:

●      Photographs of children (where provided) shall be deleted after 6 months from the completion of the services to avoid requiring re-submission for subsequent bookings within this time frame.

●      All other personal data shall be deleted after 6 months from the completion of the services, except where longer retention is required for legal or regulatory purposes.

●      Financial and payment related information may be retained for longer periods as required by applicable accounting, taxation, and financial regulations.

Public sharing of images

We may share before and after photographs publicly for marketing and promotional purposes, but only ever with your explicit prior written consent, which may be withdrawn at any time.

Your rights

You have rights under data protection laws in relation to your personal data. These rights include:

●      The right to be informed about how your personal data is being used.

●      The right to access the personal data we hold about you.

●      The right to request the correction of inaccurate personal data we hold about you.

●      The right to request that we delete your personal data, or stop processing it.

●      The right to stop direct marketing messages.

●      The write to withdraw consent for any consent-based processing.

●      The right to request that we transfer your personal data to another service provider.

●      The right to complain to the Information Commissioner’s Office.

Updates to this notice

We may update this Privacy Notice from time to time. Any changes will be posted as a new version here with an updated date.

How to contact us

If you have any questions related to this privacy notice, please email us directly at hello@minicommittee.com