Privacy Policy

This privacy notice explains how erwinlawmi.com looks after personal information you give us or that we learn by having you as a client and the choices you make
about marketing communications you agree we may send you. This notice explains how we do this and tells you about your privacy rights and how the law protects you.

WHAT INFORMATION WE COLLECT ABOUT YOU

We collect information about you when you book an appointment for a service, visit the online shop for a service or treatment, buy a product or apply for a job, whether
contact is online, on paper, by email or over the phone.

The information you give us may include your name, address, email address, phone number, IP address and CVs.

For clients under the age of 16, we will only keep and use their personal information with the consent of a parent, care or guardian.

HOW INFORMATION ABOUT YOU WILL BE USED

In law, we are allowed to use personal information, including sharing it outside the online shop, only if we have a proper reason to do so, for example:

To fulfil a contract with you i.e. to provide the service you have requested and to communicate with you about your appointments via Resurva.

When it is in our legitimate interest ie there is a business or commercial reason to do so, unless this is outweighed by your rights or interests

When you consent to it.

We will therefore share your information with:

Providers of our shop booking system Resurva.

Providers of our e-newsletter service MailChimp.

We have rigorous data protection and security policies in place with all our suppliers.

We will not share your information with any other third party without your consent except to help prevent fraud, or if required to do so by law.

YOUR RIGHTS AS A DATA SUBJECT

At any point while we are in possession of or processing your personal data, you, the data subject, have the following rights:

Right of access – you have the right to request a copy of the information that we hold about you.

Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.

Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.

Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.

Right of portability – you have the right to have the data we hold about you transferred to another organisation.

Right to object – you have the right to object to certain types of processing such as direct marketing.

Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

Right to judicial review – in the event that erwinlawmi.com refuses your request under rights of access, we will provide you with a reason as to why which you
have the right to legally challenge.

EMPLOYMENT

The information we collect about employees, the purposes it is used for and who it will be shared with is set out in our employment contracts and employee handbook.

BUYING PRODUCTS ON OUR WEBSTORE

When purchasing a product from our website, we collect and process the information that you provide to us directly. Personal data such as your name and contact details
will only be used to deliver your purchases and keep you informed of their status. Our lawful basis for processing your personal data in this instance is for the
performance of a contract.

To fulfil our legal obligations we use your data to ensure we comply with any requirements imposed on us by law or court order, including disclosure to law or tax
enforcement agencies and authorities or pursuant to legal proceedings. We will share data with regulatory and other official bodies if they make formal requests and
records will be maintained to meet regulatory and tax requirements.

Although we endeavour to ensure PayPal will do its best to protect your personal data, we cannot guarantee the security of your data entered via ePayment web pages,
apps, or portals. Please ensure you refer to their full Privacy Policy before making your payment: Any transmission is at your own risk and you should take the
appropriate steps in respect of this risk. For PayPal, the information will be collected and processed by PayPal and PayPal as the payment service provider will
authorise your payment, either from your PayPal balance or by contacting the issuer of your registered payment card.

HOW LONG YOUR INFORMATION WILL BE KEPT FOR

erwinlawmi.com will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your
Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws),
resolve disputes, and enforce our legal agreements and policies.

We will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to
strengthen the security or to improve the functionality of our service, or we are legally obligated to retain this data for longer time periods.

WHERE YOUR INFORMATION IS KEPT

Your information is stored behind the Privacy Shield on secure servers provided by Resurva. Any payment transactions are encrypted. Sending information via the
internet is not completely secure, although we will do our best to protect your information and prevent unauthorised access.

ACCESS TO YOUR INFORMATION AND CORRECTION

You have the right to request a copy of the personal information that we hold about you. This will normally be free, unless we consider the request to be unfounded or
excessive, in which case we may charge a fee to cover our administration costs.

If you would like a copy of some or all of your personal information, please contact [email protected]

We want to make sure that your personal information is accurate and up-to-date. You may ask us to correct or remove information you think is inaccurate.

You have the right to ask us to object to our use of your personal information, or to ask us to delete, remove or stop using your personal information if there is no
need for us to keep it.

E-NEWSLETTERS

We email e-newsletters to inform you about products and services provided by our shop. You have the opportunity to unsubscribe from e-newsletters at

any time.

E-newsletters may contain subscriber tracking facilities within the actual email, for example, whether emails were opened or forwarded, which links were clicked on
within the email content, the times, dates and frequency of activity. We use this information to refine future email campaigns and provide you with more relevant
content based around your activity.

COOKIES

Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. This is used to track visitor use of the
website and to compile statistical reports on website activity.
You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website
features may not function as a result.

See our cookies policy here: https://www.shopify.co.uk/legal/cookies

OTHER WEBSITES

Our website includes links to other websites. This privacy notice only applies to this website so when you link to other websites you should read their own privacy
notices.

CHANGES TO OUR PRIVACY NOTICE

We keep our privacy notice under regular review and we will place any updates on this webpage. This privacy notice was last updated in May 2018.

HOW TO CONTACT US

Please contact us if you have any questions about our privacy notice or information we hold about you:

By email: of[email protected]