Privacy Policy

1. Controller details

The data controller responsible for this website is:

Washingfryouth
The Coach House, Sharpham House, Totnes TQ9 7UT, United Kingdom
Phone: +44 1803 731803
Email: chat@washingfryouth.world

2. Data we collect

We collect the following categories of personal data:

Contact form data

When you submit our contact form, we collect your name, email address, and the content of your message. This data is collected with your explicit consent (Article 6(1)(a) GDPR).

Technical data

When you visit this website, our hosting provider may automatically log your IP address, browser type, pages visited, and timestamps. This data is processed on the basis of our legitimate interests (Article 6(1)(f) GDPR) to maintain the security and performance of the site.

Cookie data

We use cookies as described in our Cookie Policy. Analytics and marketing cookies are only placed with your explicit consent.

Special category data

Please do not submit health or other sensitive personal data through our contact form. We do not intentionally request or require special category data for the purposes of this website.

3. Purposes and legal basis

Responding to enquiries: Legal basis — consent (Article 6(1)(a) GDPR). Data is used solely to respond to your message.

Site security and performance: Legal basis — legitimate interests (Article 6(1)(f) GDPR). Log data helps identify and address technical issues.

Analytics (if consented): Legal basis — consent (Article 6(1)(a) GDPR). Aggregated usage data helps us improve the site.

Cookie and similar technologies: We request consent for optional cookies in line with applicable UK privacy and electronic communications rules (PECR), and process related personal data under UK GDPR.

4. Data retention

Contact form data is retained for up to 24 months from the date of submission, after which it is securely deleted unless a longer retention period is required by law.

Server log data is retained for up to 90 days.

Cookie consent preferences are stored in your browser's localStorage until you clear them.

5. Data sharing

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

We may share data with trusted service providers acting as data processors on our behalf (e.g., hosting providers), subject to appropriate data processing agreements. All processors are required to maintain the confidentiality and security of your data.

We may disclose data if required by applicable law or to protect our legal rights.

6. International transfers

Where data is transferred outside the European Economic Area (EEA) or the United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant supervisory authority.

7. Security measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted transmission (HTTPS), access controls, and regular security reviews.

8. Your rights

Under GDPR and applicable UK data protection law, you have the following rights regarding your personal data:

Right of access

You may request a copy of the personal data we hold about you.

Right to rectification

You may request correction of inaccurate or incomplete data.

Right to erasure

You may request deletion of your data where there is no compelling reason for its continued processing.

Right to restriction

You may request that we restrict processing of your data in certain circumstances.

Right to data portability

Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.

Right to object

You may object to processing based on legitimate interests.

Right to withdraw consent

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at the details in Section 1. We will respond within one month.

9. Children

This website is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13 through this site. If you believe a child has provided personal data, contact us and we will take reasonable steps to delete it.

10. Automated decision-making

We do not use your personal data for solely automated decision-making, including profiling, that produces legal or similarly significant effects.

11. Complaints

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO): ico.org.uk, helpline: 0303 123 1113.

12. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site following any changes constitutes acceptance of the updated policy.