GDPR query... slimming world still has my contact details more than two years after I stopped attending?

[Chapterandverse]

AIBU to think due to the data protection rules this shouldn't be the case?

A few years ago DH & I joined our local slimming world group. Filled in addresses/email/phone etc...

We lost what we wanted to and stopped going to group.

On Friday we received a letter addressed to both of us from the new consultant introducing herself and telling us now is the ideal time to return to group...

My first annoyance is that 1) if we wanted to go back we would- of our own accord
2) how has she our details when I have had to (through work) agree to businesses and companies holding my info on file? If it had been the same consultant it might not have bothered me, but our details have been passed on to a new woman without our consent.

I'm not going to cause a fuss or complain, I just wondered if this is ok within the new GDPR guidelines?

Any consultants there who can explain to me how this is ok?

It depends on what the t&c where when you originally signed up op. GDPR requires companies to make it clear how long your details will be held for / what they’ll do with them etc - they should have sent round an email asking you to actively resubscribe if you want to stay on their list, but I’m not 100% sure if they’re legally required to do that if you actively signed up for updates in the past.

Posted too soon - I would just reply asking her to take you off her list as you’ve not authorised the use of your details.

You’d be amazed how many massive national companies haven’t got their heads around gdpr yet so I’m not at all surprised there are weightwatchers consultants not getting it right!

As far as I remember it asked for all the details then asked the best way to contact me. I said text message.

Yes, through work we received loads of emails asking if we wanted to stay on their mailing list.

It was only today when dh said how did this new woman get our details I wondered if it was an OK thing to do.

GDPR only requires a re-confirmation of permission if the original one didn't meet the new standards. So if slimming world were confident that when you originally signed up they had met the GDPR standards (broadly that they clearly explained what they were going to do with your data and how long they would keep it for) and that they were acting within the permission that you gave them then they can continue to use your data. You can ask them to delete it and if they don't then they are in breach.

thanks
I don't recall what it said on the form we filled in. It was more than 2 years ago (in actual fact dh thinks it was more than 3 years but I don't remember offhand)

The thing is it seems to be that the info is stored and passed on to any new consultant when they take over.

The phrase to use is ‘right to be forgotten’. Contact them saying you wish to use this right and understand that they will consequently destroy all data they hold on you. As said above, they are likely in line with GDPR until you tell them to stop contacting you, but you have a right to be forgotten by any company you have given your details to (I use this with all cold callers too).

I would think it’s still “slimming world” data not one particular consultant’s data so doesn’t matter that a new consultant has it, if SW as a company is allowed to have it. Like it wouldn’t matter that your child’s new teacher now has access to all the data on your child as it’s school data.

tenthousand that makes sense!

If it's anything like Weight Watchers then they take a very long time to filter it through. I told our local branch that they still had a notice up advertising classes at a place they haven't been at for over 5 years. That was last November. They told me they'd take it down. It's still there.

Can't comment on the GDPR but just wanted to say I think slimming world is a complete con. It doesn't deal with the reason people get fat in the first place (eating too much which can be dealt with by portion control) and instead encourages you to eat shed loads of low calorie foods most of which is pretty bland. Without dealing with portion control the weight piles back on For most people who come off.And quark. Fuck quark. And those meetings, having to listen to some woman called Karen claim she was "on plan" and doesn't know why she gained 3lbs. Give over love, everyone knows you got steaming and munched a big kebab and then spent the rest of the week hitting the galaxy.

SS- yes I have to agree. We won't be going back. I feel the letters/texts/emails are a form of emotional blackmail too.

What even is quark? I once got some sent by accident in an online delivery. Didn’t have a clue what to do with it. Put it in the fridge until it was out of date then threw it away.

Emotional blackmail? It's called advertising.

Probably should not have contacted you after 2 years!

I joined slimming world a couple of years ago. For months after I quit I was receiving letters through the door, texts, phone calls... The letters in particular I thought were odd.

GDPR has different bases for holding your data, of which "consent" is only one. "Legitimate interest" is more likely to be the applicable one for a paid service, or anything where they can't actually do the business you want them to do without having your details - this is why your bank will have sent you a copy of its data protection policy but not asked your consent to hold your name and address and information about your balance.

Some financial data has to continue to be held after you've terminated your relationship in order to be able to complete financial records or deal with HMRC. If this is the case, the organisation should specify this in their data protection policy. Using the held information for continuing advertising isn't covered by this.

sitranced I get that it's advertising.

I also feel it can be intimidating to people who perhaps have gained a lot of weight since they left.

I recall a lady who returned to class as she felt "guilty" after receiving a text from the consultant and returned back to class.

I think they have to keep your data on file for around 3 years in case you try to pursue a lawsuit (i.e. for injury on the premises, or anything along those lines). However, if you no longer attend the sessions they have no right to plague you with marketing or advertising emails. All information should only be passed onto 3rd parties on a need to know basis, so in this instance as you are no longer a member they had no right to pass your info on to their new consultant.

Have found this on their website. It says they're entitled to retain my info for 36 months from last attendance.