Privacy Policy

1. Introduction

This Privacy Policy explains how Vibeglowneck ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website and digital habit-tracking services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Vibeglowneck, 17 The Old High St, Folkestone CT20 1RL, United Kingdom, is the data controller. Contact: welcome@vibeglowneck.world, telephone: +44 1303 243366.

3. Data We Collect

• Identity data: name, username
• Contact data: email address, telephone number, postal address
• Technical data: IP address, browser type, device information, time zone, operating system
• Usage data: pages visited, features used, session duration, referral source
• Communication data: messages sent via our contact form or email
• Account data: plan preferences, ritual entries, reflection notes, subscription status
• Marketing data: communication preferences where you have opted in

4. How We Collect Data

We collect data when you complete forms, create an account, use our platform, correspond with us, subscribe to communications, or interact with cookies and similar technologies. Some technical data is collected automatically through server logs.

5. Purposes and Lawful Bases

• Contract (Article 6(1)(b) UK GDPR): to provide habit-tracking and wellness plan services you have requested
• Legitimate interests (Article 6(1)(f)): to improve our platform, prevent fraud, and ensure security — balanced against your rights
• Consent (Article 6(1)(a)): for non-essential cookies, marketing emails, and optional features
• Legal obligation (Article 6(1)(c)): to comply with tax, accounting, and regulatory requirements

6. Data Retention

• Contact form enquiries: 24 months
• Account and subscription data: duration of subscription plus 12 months
• Technical server logs: 90 days
• Marketing consent records: 36 months from consent or withdrawal
• Financial records: 6 years (as required by UK tax law)

7. Data Sharing

We do not sell your personal data. We may share data with:

• Hosting and infrastructure providers (UK/EEA where possible)
• Payment processors for subscription billing
• Analytics providers (only with your cookie consent)
• Professional advisers bound by confidentiality
• Law enforcement or regulators where required by law

All processors operate under written data processing agreements compliant with UK GDPR Article 28.

8. International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards such as UK International Data Transfer Agreements (IDTAs) or adequacy regulations approved by the Secretary of State.

9. Security

We implement technical and organisational measures including TLS encryption in transit, access controls, role-based permissions, regular security reviews, and staff data protection training.

10. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate or incomplete data
• Erase data in certain circumstances ("right to be forgotten")
• Restrict processing in certain circumstances
• Data portability for automated processing based on consent or contract
• Object to processing based on legitimate interests
• Withdraw consent at any time (without affecting prior lawful processing)
• Not be subject to solely automated decision-making with legal effects

To exercise your rights, email welcome@vibeglowneck.world. We respond within one calendar month.

11. Complaints to the ICO

You have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Telephone: 0303 123 1113.

12. Children's Data

Our services are not directed at anyone under 16. We do not knowingly collect data from children. If you believe we have collected a child's data, please contact us immediately.

13. Changes

We may update this policy periodically. Material changes will be posted on this page with an updated date. Where appropriate, we will notify registered users by email.