1. INTRODUCTION

This Privacy Policy & Data Protection describes how the company collects, uses, and shares information about visitors to our website at www.draishaalsheikh.com, attendees of our workshops/events/programs, individuals who contact us to purchase materials, register or request information, and other users of our services. The Web Site and our other programs and services are the “Services”. This Policy describes how we obtain and use personal data (which can be used to identify a specific individual) and anonymous data (which cannot).

This Web Site also uses cookies to personalize your experience and target advertising.  By continuing to use our Web Site, you accept the terms of this Privacy Policy, our Terms & Conditions, Disclaimers, and our Cookies Policy. [HYPERLINKs all underlined]

This Privacy Policy (together with our Terms & Conditions and any other policies referenced) identifies how we will collect and process any personally identifiable information, such as your name, email, address, financial account information, etc., that we collect from you, or that you provide to us. We are committed to ensuring that your privacy is protected at all times and therefore have defined within this privacy notice the key principles of how we handle both your Personal Data and Sensitive Personal Data.

As our services evolve and we perceive the need or desirability of using your personal data collected in other ways, we may from time to time amend this Privacy Policy. The effective date appears at the beginning of this Privacy Policy. We encourage you to check our Web Site frequently to review the current Privacy Policy in effect and any changes that may have been made to it.

The General Data Protection Regulation (GDPR) is a new legal framework set up by the European Union in April 2016 to build upon existing data protection legislation. GDPR came into effect on 25th May 2018, and has introduced a range of fresh guidelines spelling out the rights of consumers and dictating how companies can store and share information. As a hugely significant change to the global business landscape, it is critical that Aisha Alsheikh International LTD embraces all aspects of GDPR to maintain full compliance.

Please note that by submitting information about yourself through our website, you are agreeing for Minds Rewired LTD. to process and store that data. This data shall be stored only for the duration outlined below in section (3). We never store or process your data longer than we need to, and we do not use your data for any purpose other than those you have agreed to.

Minds Rewired LTD. collects, processes and stores the information and personal data you submit to our website in relation to reasons explained below in section (3). All processing activities shall be carried out in accordance with your individual rights as defined by the European Union’s General Data Protection Regulation. 

You reserve the right to request Minds Rewired LTD. update your personal data at any time. You can also request information about your personal data, withdraw your consent for us to process your information or request a transfer or deletion of your data as explained further in section (3) below. 

2. SCOPE OF THIS PRIVACY POLICY

This privacy policy applies only to the actions of Dr. Aisha Alsheikh and Users with respect to this Website. It does not extend to any websites that can be accessed from this Web Site including, but not limited to, any links we may provide to social media websites.

For purposes of the applicable Data Protection Laws, Dr. Aisha Alsheikh is the “data controller”. This means that Dr. Aisha Alsheikh determines the purposes for which, and the manner in which, your Data is processed.

3. DATA COLLECTION, PROCESSING, AND SECURITY

Here at Minds Rewired LTD., we collect, process and store personal data for a range of business purposes. Data subjects include customers, suppliers, partners, employees, clients and other stakeholders and individuals. 

Bearing in mind Minds Rewired LTD.’s commitment to uphold the rights of the individual as enshrined in law, our data security policy is designed to protect all past, current and future employees, customers, or partners, from illegal or damaging activity conducted by others using their personal data. 

Our data security policy outlines how Minds Rewired LTD. will endeavour to guard and protect all personal data. It also sets out to raise the awareness of staff members in relation to the ways in which GDPR impacts their use of individual’s personal data. 

You reserve the right to request Minds Rewired LTD.  update your personal data at any time. You can also request information about your personal data, withdraw your consent for us to process your information or request a transfer or deletion of your data.

Data Collected

We may collect and process the following data, which includes Personal Data and Sensitive Personal Data (Special Category Data) from you. 

The following are the data being collected and processed: 

• Personal & Sensitive Data: Email address, first name, last name, phone number, address & Postal/Zip code, date of birth, marital status, physical and mental health information (e.g. medications, allergies, medical history, etc.), GP name and address. 

• IP address (automatically collected)

• Web browser type and version (automatically collected) 

• Operating system (automatically collected) 

• Consent, contracts and waiver forms   

• Written documents 

• Spreadsheets 

• Hardcopy client case notes and files 

• Database entries 

• Images 

• Recordings 

• Emails and text messages

• Supervision notes 

• Visits to the company’s websites (automatically collected)

• Social media communication (automatically collected)

How is Data Collected?

• Data is given to us by you; and 

• Data is collected automatically

Data that is given to us by you 

Dr. Aisha Alsheikh will collect your Data in a number of ways, for example:

• When you contact us through the Web Site, e-mail or through any other means;

• When you enter a competition or promotion through a social media channel;

• When you elect to receive marketing communications from us;

• When you elect to receive marketing communications from us; in each case, in accordance with this privacy policy.

Data that is collected automatically 

To the extent that you access the Website, we will collect your Data automatically, for example:

• We automatically collect some information about your visit to the Website. This information helps us to make improvements to Web Site content and navigation, and includes your IP address, the date, times and frequency with which you access the Web Site and the way you use and interact with its content.

• We will collect your data automatically via Cookies, in line with the cookie settings on your browser. For more information about Cookies, and how we use them on the Web Site, please see our Cookies Policy. [HYPERLINK]

Our Use of Data Collected 

Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Web Site. Specifically, Data may be used by us for the following reasons:

• Internal record keeping; 

• improvement of our services;

• Transmission by email of marketing materials that may be of interest to you;

• Contact for market research purposes which may be done using email, telephone or mail. Such information may be used to customise or update the Web Site; in each case, in accordance with this privacy policy.

We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. If you are not satisfied with this, you have the right to object in certain circumstances please see “what are your rights” sub-section below. 

For the delivery of direct marketing to you via e-mail, we’ll need your consent, whether via an opt-in or soft-opt-in. Soft opt-in consent is a specific type of consent which applies when you have previously engaged with us (for example, you contact us to ask us for more details about a particular service, and we are marketing similar services). Under “soft opt-in” consent, we will take your consent as given unless you opt-out.

for other types of e-marketing, we are required to obtain your explicit consent; that is, you need to take positive and affirmative action when consenting by, for example, checking a tick box that we’ll provide.

If you are not satisfied about our approach to marketing, you have the right to withdraw consent at any time. To find out how to withdraw your consent please contact us by email or telephone. 

Sensitive Personal Data (Special Category Data)

Minds Rewired LTD.  may process both Personal Data and Special Category Data. The type of data that is needed to take an accurate medical record before performing Therapy, Hypnosis or Lifestyle Prescriptions and Health Coaching may fall under both Personal Data and Special Category Data (sensitive personal data). 

Special Category Data is personal data that the GDPR says is more sensitive and, therefore, needs more protection. In order to lawfully process ‘Special Category Data’, and ‘Sensitive Personal Data’ we have identified both a lawful basis under Article 6 Consent and Vital Interest and a separate condition for processing special category data under Article 9 (2) (h) of the GDPR.

(h) ‘processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3;’

Lawful basis for processing your data

We have reviewed our Lawful Basis and have identified Consent and Vital Interests as being the most appropriate Lawful Basis for processing your data. (Article 6)

Lawful Basis requires that the processing of patient data must be ‘necessary’.

Under the guide for transparency, ‘right to be informed’, Minds Rewired LTD. will ensure that all persons will be informed of the Lawful Basis for processing and the intended purpose for processing your data.

How long the personal data is kept and to whom and when it will be disclosed or shared?

We will not share, sell, distribute or lease your personal information to any third party unless we have your prior permission or are required to do so by law.

In the case of third party, where you have given your permission for us to share your information, such as with specific health care professionals, if we do, we will require that these third parties acting on our behalf protect the confidentiality and security of your data that you have agreed to share with them.

In addition, these information will only be disclosed lawfully to a third-party under special conditions explained in section (20. Confidentiality) in Terms & Conditions. (Hyperlink)

These Data held by Dr. Aisha Alsheikh will be held lawfully and securely for the retention periods of 6 years and then will be destroyed (hard copy data will be destroyed via a cross shredding machine owned by the organisation, electronic data will be permanently deleted).

Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted.

Keep in mind that even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

How your Data is kept secure?

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

We will use technical and organisational measures to safeguard your Data, for example: we store your Data on secure servers. Hard copies of written information will be kept in securely locked filing cabinet. Technical and organisational measures include measures to deal with any suspected data breach. 

Remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us. If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.

What are your rights?

Here at Minds Rewired LTD., we fully appreciate and support the European Union’s focus on expanding upon digital rights. As a company, we strongly believe in the need for greater business transparency and accountability concerning the collection and handling of personal data. That is why Minds Rewired LTD.  is a firm advocate of GDPR and its many implications. These include among many other aspects: 

• The Right to Object to Processing 

• The Right to Be Forgotten

• The Right to Data Portability 

• The Right to Withdraw Consent

In summary, you have the right to be informed, have access to, rectify, erase, object or restrict processing of any data that we hold on you. To exercise these rights please contact us either by phone or in writing.

As part of our commitment to GDPR and the rights of our customers and clients, Minds Rewired LTD. vows to ensure our organisation considers and actions all necessary changes surrounding data processing, data storage and the disposal of personal data. 

This includes a commitment to fully fulfil Breach Disclosure Requirements by notifying authorities and concerned individuals of any compromise within 72 hours.

If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/. 

It is important that the Data we hold about you is accurate and current. PLEASE KEEP US INFORMED IF YOUR DATA CHANGES DURING THE PERIOD FOR WHICH WE HOLD IT.

This policy applies to all data processing activities involving Minds Rewired LTD., and includes activities or systems related to both internal business operations, as well as external relations and any third-party agreements.

This document is subject to regular review to ensure ongoing regulatory compliance.

4. SERVICE PROVIDERS

We may employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services or to assist us in analysing how our Service is used. These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. 

We operate an email mailing list program, used to inform subscribers about products, services and/or news we supply/publish. Users can subscribe through an online automated process where they have given their explicit permission.

Subscriber personal details are collected, processed, managed and stored in accordance with the regulations named in this Policy. Subscribers can unsubscribe at any time through an automated online service, or if not available, other means as detailed in the footer of sent marketing messages (or unsubscribe from all Mailchimp lists). The type and content of marketing messages subscribers receive, and if it may contain third party content, is clearly outlined at the point of subscription.

Email marketing messages may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.

The following systems or third-parties are used for Data collection, processing, and Cookies to facilitate our services and assist us in analysing how our Service is used and performed.

1. Analytics: Google Analytics and Facebook Analytics for apps. This analytics collect information about what visitors do when they click on my website or Facebook, e.g. which page they visit the most. Google analytics only collect non-identifiable data which means I or they cannot identify who is visiting. Google analytics privacy notice can be found here: https://policies.google.com/privacy?hl=en-US  and for Facebook: https://www.facebook.com/policy.php 

2. Tealfeed: Tealfeed is a third-party service that hosts Minds Rewired LTD.’s website. And manages clients booking also uses anonymised data to collect visitor information such as how long an individual remains on a page of a website. Tealfeed’ privacy notice can be found here for further information: https://tealfeed.com/privacy 

3. Social Media: Minds Rewired LTD. may choose to use a third-party provider, Brill creations., to manage its social media interactions. Social90 LTD’s Privacy notice can be found here:  https://brillcreations.com/

4. MailChimp: Minds Rewired LTD. uses MailChimp Customer relationship management (CRM), email marketing, and automation, e.g. to contact opted in contacts, with information that may be of interest to you, including, but not exhaustive: details of workshops, new venues, events, special offers and news. MailChimp’s privacy notice can be found here: https://mailchimp.com/legal/privacy/   

5. LiveChat Tidio: used for interaction and support with live chat platform. Tidio privacy notice can be found here: https://www.tidio.com/privacy-policy/ 

6. Advertising & Other Parties: only relevant Personal Data and Cookies be used for performance analysis, advertising, and marketing purposes e.g. Google Ads conversion tracking, Facebook Ads conversion tracking (Facebook pixel), Google Ad Manager and Facebook Lookalike Audience remarketing and behavioural targeting (Facebook Custom Audience), Displaying content from external platforms (Google Maps widget and YouTube video).  

7. Selling Services/Products Online: The Personal Data collected to complete the payment may include financial information i.e. the credit/debit card details, the bank account details used for the transfer, or any other means of payment envisaged. The kind of Data collected by this Web Site depends on the payment system used.

5. DOWNLOADS & MEDIA FILES

Any downloadable documents, files or media that are made available on this website are provided to users at their own risk. While all precautions have been taken to ensure that downloads and files are virus free, users are advised to verify their authenticity using third party anti-virus software or similar applications.

6. MINORS’ PRIVACY 

Our Services does not address anyone under the age of 18 (“Children”) or knowingly collect information from children. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we discover that a child under 18 has provided us with personal information, we will delete such information from our servers immediately.  

7. PRIVACY POLICY REVISION AND CHANGES 

Minds Rewired LTD. reserves the right to change this Privacy Policy as it may deem necessary from time to time in the ways in which we process your data, or to reflect changes in legal obligations as may be required by law. 

This Privacy & Data Protection Policy is effective from 28/09/2023 and may be updated without notice. You are advised to review this Privacy Policy periodically for any changes. 

Changes to this Privacy Policy are effective when they are posted on this page. By using this site, you signify your acceptance of the terms of this Privacy Policy, our Terms & Conditions, Disclaimers, and our Cookies Policy. [HYPERLINKs all underlined]