Your Virtual Mind Trainer Limited Privacy Policy
Last updated 18 January 2021
The privacy and security of your personal information is extremely important to us. This privacy policy explains how and why we use your personal data, to make sure you stay informed and can be confident about giving us your information.
We’ll only use your personal data on relevant lawful grounds as permitted by the EU General Data Protection Regulation (GDPR), the Data Protection Act 2018 and Privacy and Electronic Communications Regulations 2003.
On this page:
Who is Your Virtual Mind Trainer Ltd. (YVMT)?
YVMT specialises in the creation of 360° videos of nature including unique audio recordings focusing on calming and training the mind. These videos are then available via online platforms to end users.
In this policy, whenever you see the words ‘YVMT’, ‘we’, ‘us’, ‘our’, it refers to Your Virtual Mind Trainer Ltd.
If you would like to contact us about this privacy notice or how we use your personal data, please contact us at: Your Virtual Mind Trainer, 22 Eltisley Road, Great Gransden, Sandy, Bedfordshire, SG19 3AR or email us at privacy@yvmtrainer.com.
YVMT is the data controller of the personal data we process, unless otherwise stated.
What personal data do we collect?
Your personal data is any information which identifies you, or which can be identified as relating to you personally. We’ll only collect the personal data that we need.
We collect, store or generate some or all of the following personal data from you when you sign up for a subscription through our website and use our services:
Name
Unique ID
Last Login Date
Email Addresses
Usage statistics
Opinions
We do not collect special category data (sensitive data) through our website unless you enter it into a free text field.
If you do not provide all the information required, we will not be able to contact you or deal with any enquiry you may have.
How we use your personal data
Personal data provided to us will be used for the purpose or purposes outlined in this privacy notice in a transparent manner at the time of collection, in accordance with any preferences you express. If asked by regulatory or government authorities investigating suspected illegal activities, we may need to provide your personal data.
Your personal data will be collected and processed principally to provide our services to you at your request, including to:
Fulfil you order for your monthly or annual subscription
Provide you with information about related services if you have consented to this
Satisfy our legal, accounting or reporting requirements.
We are entitled to use your personal data in the ways set out in this Privacy Policy either on the basis that you have consented to such use, or on the basis that the use of your personal data is necessary for our legitimate interests in:
ensuring the quality of the products and services we provide to you;
communicating with you; and
statistical analysis.
If you have provided your information to use our services, our lawful basis is that we have entered into a contract with you.
We process your sensitive personal data if you have provided it through any free text field with your explicit consent.
If you consent to hearing from us in the future, we will store your personal data and let you know about other services we provide.
Your personal data kept for 5 years before it is destroyed. If you want us to erase your personal data before this time, please contact us.
We do not use automated decision-making including profiling
Login Purpose
To secure access to some of our paid content we require you to login to view the paid content. The password you enter cannot be viewed by any YVMT employee.
Disclosure of personal data to third parties
We may share your personal data with the following third parties who perform services on our behalf:
Amazon Web Services
Our company website is self-hosted on servers provided by Amazon Web Services ('AWS'), physically located in London, United Kingdom and Dublin, Ireland. AWS supplies the infrastructure on which we have built the online platform that allows us to sell our products and services to you. Your data is stored in databases and storage facilities controlled by YVMT, and which only YVMT employees have access to. That access is limited and controlled by our Access Control policies. AWS cannot access your data. Further detail on AWS's security infrastructure is available here.
Stripe – YVMT uses Stripe (payment) services that enable us to run our business, and to safely conduct online payment transactions. YVMT does not see nor store your payment or credit card information; all transaction processing is conducted by Stripe. Stripe has been certified as a PCI Service Provider Level 1. Full details of their security infrastructure is available here.
We will only share your personal data when it is necessary to deliver the services detailed and in accordance with the Data Protection Act 2018 and the GDPR.
To fulfil our legal obligations we may be required to provide government bodies such as the police with your personal data.
Cookie Policy
A 'cookie' is a small text file that is placed on a user's computer hard drive by a website. There are several types of cookie and the most common are often referred to as 'session' cookies. These are used to keep track of information needed by a user as they travel from page to page within a website. These cookies have a short lifetime and expire within a few minutes of the user leaving the site.
Other types of cookies can be used to track internet activity after the user has left a website. These are either sponsored by organisations external to the website being visited (known as 'third party' cookies) or can originate from the website organisation itself ('first party' cookies). These usually have a long lifetime with several months being quite common. They are 'harvested' and 'refreshed' whenever the user visits a page where the same or a similar cookie is being used.
This website uses benign, short lived 'session' cookies and 'first party' cookies to tell whether a website user has logged-in, where to find details that can be used to pre-fill parts of on-line forms and to personalise the user's visit to the website. They are also used to track anonymously which areas of the site are popular and which are not used; this allows us to target carefully our website resources.
This website uses Google Analytics, a web analytics service provided by Google Inc., which uses cookies to help a website analyse how users use the site. The information generated by the cookie about your use of this website (including your IP address) will be used by Google for the purpose of evaluating your use of the website on our behalf. When your personal data is processed by Google Analytics, it will be processed under Google’s privacy notice, which can be found herehttps://www.google.com/analytics/terms/us.html.
Internet browsers normally accept cookies by default but you may refuse the use of cookies by selecting the appropriate settings on your browser.
Links to third party websites
This Privacy Policy applies solely to the personal data collected by YVMT and does not apply to third party websites.
Users should be aware that if they access other websites, using the links provided, these are outside our control. If they provide personal data to other companies, the privacy policies of those companies determine the uses to which that information is put and this Privacy Policy will no longer apply. YVMT is not responsible for the privacy policies of third party websites and advises users to read the privacy policies of other websites before registering any personal data.
Security
We recognise the need to ensure that personal information gathered via this website remains secure. We use industry standard Secure Server Software (SSL) for your interactions with us to protect against the loss, misuse and alteration of the personal information under our control. It encrypts all of your personal information, including name and email address, so that it cannot be read as the information travels over the Internet. However, you acknowledge that although we exercise adequate care and security there remains a risk that information transmitted over the Internet and stored by computer may be intercepted or accessed by an unauthorised third party.
When personal data is stored on YVMT’s systems we take every care to ensure the security of your personal data. Its information systems are adequately and appropriately protected, by the implementation and maintenance of security controls and against threats to the systems. The implemented security controls are appropriate to the measures of risks and the value of assets, and implemented, used, and where relevant, tested correctly, through information security compliance (audit) reviews, to ensure that the required level of security is maintained.
Where we process your data
YVMT holds your personal data in the UK and the EU. One of our processors may transfer your data outside of those jurisdictions.
Our payment processor Stripe may transfer your personal data outside the EU under either the EU-US Privacy Shield Framework or EU Standard Contractual Clauses.
Your rights as a data subject
As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email or use the information supplied in the About Us section above. In order to process your request, we will ask you to provide two valid forms of identification for verification purposes. Your rights are as follows:
The right to be informed - As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.
The right of access - You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
The right to data portability - This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. This right only applies if we are processing information based on your consent or under contract and the processing is automated.
The right to object - You have the right to object to processing in certain circumstances if we are able to process your information because the process forms part of our public tasks, or is in our legitimate interests, or if the processing is for direct marketing purposes. The right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
The right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
The right to erasure - You have the right to ask us to erase your personal information in certain circumstances. We will take all reasonable steps to ensure that we erase the data.
Rights related automated decision-making including profiling – You have rights surrounding our use of automated decision-making and profiling. You can object to us using your personal data in such a way at any time.
We will confirm that we have updated, ported, erased, provided or amended your personal data as requested within one month of receipt of your request. If we are unable to meet your request or require an extension to meet the request, we will inform you within one month.
If we are processing your personal data with your consent, then you have the right to withdraw that consent at any time and we will cease processing your personal data without undue delay.
Notification of changes
We may update this policy at any time without notice. Any changes to this policy will be notified by an announcement on this website. Your continued use of this website, following the posting of changes to this policy, will mean you accept these changes.
Complaints
Should you wish to discuss a complaint, please feel free to contact us using the details provided above. All complaints will be treated in a confidential manner. Should you feel unsatisfied with our handling of your data, or about any complaint that you have made to us about our handling of your data, you are entitled to escalate your complaint to a supervisory authority within the European Union. For the United Kingdom, this is the Information Commissioner’s Office (ICO). Its contact information can be found at https://ico.org.uk/global/contact-us/.
2) Confirm your email address
3) Select your subscription
£5/month or £35/year