Privacy Policy
Mamas&Milk NI is owned and operated by Claire Mason, Registered Midwife, Tongue Tie Practioner and Breastfeeding Counsellor. Email: mamasandmilkni@gmail.comI am committed to protecting your privacy and personal data.
This privacy policy will inform you as to how I collect and look after your personal information when you visit my website and purchase my services, as well as informing you about your privacy rights and how the law protects them.
Personal data, or personal information refers to any information from which a person can be identified. It does not include anonymous data.
I currently collect and process the following information:
​
•Personal identifiers such as name, address, email address and phone numbers. These details are collected at www.mamasandmilkni.com or by direct message on my Instagram account @mamasandmilk_ni.
•Financial data. Payments are accepted via Paypal or direct bank transfer. I do not store any bank account details or card numbers in any other way.
•Transaction data – details about payments from you and the service/s you have purchased from me.
•Information about medical and obstetric history including medical and health information of both adults and infants. •Images or videos you may send to me via Whatapp of you feeding your child (this includes, breastfeeding, bottlefeeding and weaning).
How I collect your personal data:
You may provide me with your name, contact details and financial data by completing the contact form on www.mamasandmilkni.com or by corresponding with me via direct message on my Instagram account or by email. This includes personal data you provide when you purchase my services, enter a giveaway or provide feedback.
Third parties or publicly available sources:
I may receive personal data about you from various third parties as set out below. Technical data from analytics providers such as Google, Wix, Financial and Transaction Data from card payment providers and Paypal.
If you fail to provide personal data:
Where I need to collect personal data by law, or under the terms of a contract I have with you and you fail to provide that data when requested, I may be unable to provide the service you have booked with me. In this case, I may have to cancel the service but you will be notified in due course.
How I used your personal information:
I will use your personal data in the following circumstances and as required by law:
•Registering you as a new client
•To get background information to tailor my support and guidance for you
•To process and deliver the purchased services such as (a) Managing payments (b) collect and recover money owed to me for services booked or provided.
•To manage my relationship with you which will include (a) Asking you to leave feedback on my services (b) informing you of any changes made to the terms and conditions and/or privacy policies.
•To enable you to partake in a giveaway on social media or complete an online survey.
•To administer and protect my business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
•To deliver relevant website and social media content to you.
•To use data analytics to improve my website, products/services, marketing, customer relationships and experiences
•To make suggestions and recommendations to you about goods or services that may be of interest to you
Under the General Data Protection Regulation (GDPR), the lawful bases I rely on for processing this information are:
•Where you have consented for me to do so.
•Where I need to perform the contract I am about to enter into or have entered into with you.
•Where it is necessary for my legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
•Where I need to comply with a legal or regulatory obligation.
How I share your personal data:
•PayPal - To allow me to take and make payments through my business account. Visit Paypal’s Privacy Policy here - https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
•Jotform - To capture information regarding your personal situation and to capture feedback on my service, View Jotform’s Privacy Policy here - https://www.jotform.com/privacy/
•Survey Monkey – To provide client surveys and collect feedback on my services. View Survey Monkey’s privacy policy here – https://www.surveymonkey.com/mp/legal/privacy/
Third party URLs:
This website may include URLs to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. I do not control these third-party websites and am not responsible for their privacy statements. When you leave my website, I encourage you to read the privacy notice of every website you visit.
Your child’s data:
I will not collect data relating to children without the express permission/consent of a parent or legal guardian. The kind of information I process relating to children is listed below:
•Child’s name
•Date of birth
•Medical history (if appropriate)
•Gender
•Allergies
•Images or videos of children feeding
This data falls into what is known as “special category data” as set out above. My lawful basis for processing this data is contained within Article 9 2 (a) General Data Protection Regulations.
How long will I store your personal data?
I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.To determine the appropriate retention period for personal data, I consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which I process your personal data and whether I can achieve those purposes through other means, and the applicable legal requirements.
By law I have to keep basic information about my customers (including Contact, Identity, Financial and Transaction Data) for six (6) years after they cease being customers for tax purposes.In some circumstances you can ask me to delete your data: see Request erasure below for further information.
In some circumstances I may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case I may use this information indefinitely without further notice to you.
Your Data Protection Rights:
​
Under data protection law, you have rights including:
-
Your right of access - You have the right to ask me for copies of your personal information.Your right to rectification - You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
-
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.Your right to restriction of processing - You have the right to ask me to restrict the processing of your personal information in certain circumstances.
-
Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
-
Your right to data portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.Please contact me at mamasandmilkni@gmail.com if you wish to make a request.
Making a complaint:
​
If you have any concerns about my use of your personal information, please contact me at mamasandmilkni@gmail.com.
You can also make a complaint to the Information Commissioner’s Office (ICO)
at Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
I may need to request specific information from you to help me to confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).
This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response.
Time limit to respond:
I try to respond to all legitimate requests within 28 days. Occasionally it may take me longer than 28 days f your request is particularly complex or you have made a number of requests. In this case, you will be notified and will receive regular updates.