1. Introduction
Brozelonkhel ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website at brozelonkhel.ddd.
We comply with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable data protection laws.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Brozelonkhel
- Address: Wellness Centre, 9 George St, Meuse Ln, Dumfries DG1 1HH, United Kingdom
- Phone: +44 7753 571212
- Email: request@brozelonkhel.world
If you contact us from within the United Kingdom, references to "GDPR" in this policy mean UK GDPR as incorporated into UK law, together with the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), where applicable.
3. Information We Collect
3.1 Information You Provide
We may collect the following personal data when you voluntarily submit it through our contact form:
- Full name
- Email address
- Message content
- Consent preferences
3.2 Automatically Collected Information
When you visit our website, we may automatically collect:
- IP address (anonymized where possible)
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website
- Date and time of access
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you submit a contact form or accept certain cookies
- Legitimate Interests: For website security, analytics (with anonymized data), and service improvement
- Legal Obligation: When required by applicable law
5. How We Use Your Information
We use your personal data for the following purposes:
- To respond to your inquiries and messages
- To provide information you have requested
- To improve our website and user experience
- To analyze website traffic and usage patterns (using anonymized data)
- To ensure the security and proper functioning of our website
- To comply with legal obligations
5A. Advertising and Measurement Transparency
We may run online advertising campaigns to make our educational content easier to find. Where advertising or analytics technologies involve personal data, we rely on consent for non-essential cookies and similar technologies.
- Non-essential analytics and advertising technologies are activated only after consent
- You can reject non-essential cookies via the cookie banner when it appears
- You can also manage cookies through your browser settings at any time
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Contact form submissions: 2 years from the date of submission
- Cookie consent records: 1 year from the date of consent
- Analytics data: 26 months (anonymized)
After these periods, data will be securely deleted or anonymized.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us using the details provided in Section 2.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS encryption for all data transmission
- Secure hosting infrastructure
- Regular security assessments
- Access controls and authentication
- Staff training on data protection
9. Third-Party Services
We may use third-party services that process personal data on our behalf:
- Website hosting providers (located within the EU/UK or with appropriate safeguards)
- Analytics services (configured to anonymize IP addresses)
- Content delivery networks (CDN)
All third-party providers are required to maintain appropriate data protection standards.
Where a third-party provider acts as our processor, we put contractual safeguards in place. Where a provider acts as an independent controller (for example, when you interact directly with their services), their own privacy policy applies.
10. International Transfers
If we transfer personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions
- Other legally recognized transfer mechanisms
11. Cookies
Our website uses cookies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
12. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
12A. Automated Decision-Making
We do not use your personal data for solely automated decision-making, including profiling, that produces legal effects or similarly significant effects on you.
13. Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.
14. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
We encourage you to contact us first so we can try to resolve your concerns directly.
14A. How to Exercise Your Rights
Please include enough detail in your request for us to identify your records and process your request securely. We may need to verify your identity before fulfilling certain requests.
We aim to respond within one month, subject to lawful extensions where requests are complex or numerous.
15. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: request@brozelonkhel.world
- Phone: +44 7753 571212
- Address: Wellness Centre, 9 George St, Meuse Ln, Dumfries DG1 1HH, United Kingdom