Privacy Policy

Scope and legal framework

This Privacy Policy applies to personal data processed through strengthregen.world when you are in the United Kingdom or otherwise subject to UK data protection law. We comply with the UK General Data Protection Regulation (UK GDPR) as retained in UK law and the Data Protection Act 2018. Where EU GDPR applies to you, equivalent rights are honoured.

Data controller

We have not appointed a Data Protection Officer, as our processing is limited in scale. Privacy enquiries may be sent to the contact details above.

Nature of our service

The website provides free, educational information about personal habit plans. We do not sell products or subscription services through this site. Any future paid offering would be described separately before collection of payment data.

Categories of personal data

Depending on how you use the site, we may process:

• Identity and contact data: name and email address when you submit the contact form.
• Communication data: message content and records of our replies.
• Consent records: confirmation that you agreed to GDPR processing and your cookie choices.
• Technical data: IP address, browser type, operating system, referral URL, and pages viewed (mainly where analytics are enabled).
• Usage data stored locally: anonymous visit counts and navigation sequence stored in your browser to adapt layout (not used to identify you by name).

We do not intentionally collect special category data (for example data revealing racial origin, political opinions, or detailed records about physical condition). Please do not include sensitive information in contact messages unless necessary.

How data is collected

• Directly from you (contact form, email, phone).
• Automatically through server logs and, if you consent, analytics or advertising technologies.
• Through local storage on your device for consent and layout adaptation.

Purposes and lawful bases

Under UK GDPR Article 6, we rely on the following bases:

• Consent (Art. 6(1)(a)): contact form submission where you tick the GDPR box; optional analytics and marketing cookies.
• Legitimate interests (Art. 6(1)(f)): operating, securing, and improving the website; responding to enquiries; keeping records of communications; preventing abuse. Our interests are balanced against your rights, and you may object where applicable.
• Legal obligation (Art. 6(1)(c)): retaining information required by tax, accounting, or regulatory rules where applicable.

Recipients and processors

We may share personal data only where necessary with:

• Website hosting and infrastructure providers in the UK or EEA.
• Email or communication tools used to respond to your messages.
• Analytics providers (only if you enable analytics cookies).
• Advertising partners such as Google (only if you enable marketing cookies or interact with ads linking to this site), which may process data under their own policies.

Processors act under written terms requiring confidentiality and appropriate security. We do not sell your personal data.

Advertising and Google services

If we use Google Ads or related measurement tools, Google may process cookies or similar identifiers when you consent to marketing cookies or when you interact with an advertisement. Google’s processing is governed by Google’s Privacy Policy. You can manage ad personalisation in your Google account settings. We describe cookies in our Cookie Policy.

Retention periods

• Contact form and email correspondence: up to 24 months from last contact, unless a longer period is required for legal claims or compliance.
• Cookie consent records (local storage): up to 12 months, then renewed when you visit again.
• Server security logs: up to 90 days.
• Local layout adaptation data: until you clear site data in your browser.
• Analytics data held by third parties: according to their retention schedules, typically 14–26 months for standard analytics where enabled.

Your rights

Subject to UK GDPR, you may request:

• Access to personal data we hold about you.
• Correction of inaccurate data.
• Erasure (“right to be forgotten”) where applicable.
• Restriction of processing or objection to processing based on legitimate interests.
• Data portability for data you provided in structured form, where processing is based on consent or contract and carried out by automated means.
• Withdrawal of consent at any time (without affecting prior lawful processing).

We respond within one calendar month, extendable by two further months for complex requests with notice. We may need to verify your identity before responding.

Supervisory authority

You may lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority:

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom. Website: ico.org.uk/make-a-complaint/. Helpline: 0303 123 1113.

Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Layout adaptation on your device is a local, non-scoring visual adjustment only.

Children

The site is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will delete it promptly.

Security measures

We implement appropriate technical and organisational measures, including HTTPS encryption, access limitation, and procedures to address suspected personal data breaches. Where a breach is likely to pose a risk to your rights, we will notify the ICO and you as required by law.

International transfers

Where processors are located outside the UK, we ensure a valid transfer mechanism applies, such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, or an adequacy regulation recognised by the UK Government.

Third-party links

Our pages may link to external sites (for example Google policies). We are not responsible for their privacy practices. Review their policies before providing personal data.

Changes to this policy

We may update this policy to reflect legal or operational changes. The “Last updated” date shows the current version. Material changes will be indicated on this page.

Contact for privacy requests

Submit requests via our contact form or email with the subject line “Privacy request”. Include enough detail for us to locate your data. There is no fee for most requests; excessive or unfounded requests may be refused or charged as permitted by law.