Privacy Policy

1. Introduction

This Privacy Policy explains how Drainingvital ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit drainingvital.world or use our services. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Data controller: Drainingvital
Address: Parmoor Ln, Frieth, Henley-on-Thames RG9 6NN, United Kingdom
Email: service@drainingvital.world
Telephone: +44 1494 881037

For data protection enquiries, contact us using the details above. Our ICO registration number is available on request.

3. Personal Data We Collect

• Identity data: first name, last name
• Contact data: email address, telephone number, postal address
• Communication data: messages sent via our contact form or email
• Transaction data: subscription details, payment references (processed by third-party payment providers)
• Technical data: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, session duration, referral source, click patterns
• Consent data: cookie preferences stored in localStorage

4. How We Collect Data

We collect data when you: submit our contact form; subscribe to PulseGrid; communicate by email or telephone; browse our website; configure cookie preferences; or interact with our advertising (where you have consented).

5. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Consent (Article 6(1)(a)): analytics and marketing cookies; marketing communications; contact form data processing where consent is given
• Contract (Article 6(1)(b)): delivering PulseGrid services you have subscribed to
• Legitimate interests (Article 6(1)(f)): website security, fraud prevention, service improvement, and responding to unsolicited enquiries — balanced against your rights
• Legal obligation (Article 6(1)(c)): compliance with tax, accounting, and regulatory requirements

6. Purposes of Processing

We use personal data to: respond to enquiries; provide and administer PulseGrid subscriptions; process payments; send service-related communications; analyse website usage (with consent); deliver marketing (with consent); maintain security; and comply with legal obligations.

7. Cookies and Similar Technologies

We use cookies and localStorage in accordance with the Privacy and Electronic Communications Regulations (PECR). For full details, see our Cookies Policy.

8. Data Retention

• Contact form enquiries: up to 24 months
• Active subscription records: duration of subscription plus 6 years (for tax and legal purposes)
• Technical server logs: up to 12 months
• Cookie consent preferences: until cleared or updated by you
• Marketing consent records: until withdrawn, plus 6 years for evidence of consent

9. Data Sharing

We do not sell your personal data. We may share data with:

• Hosting and infrastructure providers (UK/EEA where possible)
• Payment processors (subject to PCI-DSS standards)
• Analytics providers (only with your cookie consent)
• Professional advisers (solicitors, accountants) where necessary
• Law enforcement or regulators when required by law

All processors are bound by data processing agreements compliant with UK GDPR Article 28.

10. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements (IDTAs), adequacy regulations, or Standard Contractual Clauses approved by the ICO.

11. Security

We implement appropriate technical and organisational measures including HTTPS encryption, access controls, staff training, regular security reviews, and incident response procedures. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

12. Your Rights

Under UK GDPR, you have the right to:

• Request access to your personal data (Subject Access Request)
• Request correction of inaccurate data
• Request erasure ("right to be forgotten") in certain circumstances
• Request restriction of processing
• Data portability for data processed by automated means under contract or consent
• Object to processing based on legitimate interests or for direct marketing
• Withdraw consent at any time (without affecting prior lawful processing)
• Not be subject to solely automated decision-making producing legal effects

To exercise your rights, email service@drainingvital.world. We respond within one month, extendable by two further months for complex requests.

13. Complaints to the ICO

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk · Helpline: 0303 123 1113

14. Children's Data

Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us immediately.

15. Marketing Communications

We send marketing communications only with your explicit consent. You may opt out at any time by clicking the unsubscribe link in emails or contacting us directly. Service-related communications (e.g. subscription renewals) are not marketing and may continue during your subscription.

16. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by updating the date above. We encourage you to review this page periodically.