Privacy Policy

1. Introduction

Drainingaedetoxi ("we", "us" or "our") is a workplace wellbeing studio that publishes general, educational content and organises voluntary, non-medical team activities. We take the protection of personal data seriously and want you to understand clearly how your information is handled when you visit our website or get in touch with us.

This Privacy Policy applies to the website published at the domain drainingaedetoxi.world and to any enquiry you send us through our contact form, by telephone or by email. It does not apply to third-party websites that may be linked from our pages; those services operate under their own privacy notices.

By using this website you acknowledge that you have read and understood this policy. Where we rely on your consent for a particular activity, we will ask for that consent separately and you may withdraw it at any time.

2. Who we are

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for your personal information is:

Organisation: Drainingaedetoxi
Registered address: Ariel Way, London W12 7GF, United Kingdom
Telephone: +44 20 3371 2300
Website: drainingaedetoxi.world

If you have any questions about this policy or about how we handle personal data, you can reach us using the details above or through our contact page.

3. Data we collect

We aim to collect as little personal data as possible, and only what we genuinely need. Depending on how you interact with us, this may include:

3.1 Information you provide

Contact details such as your name and email address, submitted through our contact form.
The content of your message, including any details you choose to share about your team or your enquiry.
Consent records, noting that you agreed to be contacted in response to your enquiry.

3.2 Information collected automatically

Technical data such as general device and browser information that your browser shares when loading a web page.
Usage data, where you have allowed analytics cookies, helping us understand which pages are visited.

We do not ask for, and we encourage you not to send us, sensitive personal information such as health details. Our activities are general in nature and do not require this kind of data.

4. How and why we use data

We use personal data only for clearly defined purposes:

To respond to enquiries you send us and to provide the general information you have requested.
To maintain a record of correspondence so we can follow up appropriately.
To keep our website secure, stable and working as intended.
With your consent, to understand how the website is used so we can improve our content.

We do not use your details to make automated decisions that produce legal or similarly significant effects, and we do not sell personal data to anyone.

5. Lawful bases for processing

Under the UK GDPR we must have a lawful basis to process personal data. The bases we rely on are:

Consent — for example, when you submit the contact form and agree to be contacted, or when you allow optional cookies.
Legitimate interests — to keep our website secure and to respond to enquiries in an organised way, balanced against your rights and freedoms.
Legal obligation — where we are required to retain certain records to comply with applicable law.

We keep your personal data confidential and share it only where necessary:

With trusted service providers who help us operate the website or manage correspondence, under written agreements that require them to protect your data.
Where we are required to do so by law, regulation or a valid request from a public authority.
To protect our rights, safety, or property, and those of our users, where this is lawfully permitted.

Any third parties who process data on our behalf act only on our instructions and are not permitted to use your information for their own purposes.

7. Retention periods

We keep personal data only for as long as necessary for the purpose it was collected:

Enquiry correspondence is generally retained for up to 24 months after our last contact, unless an ongoing relationship requires us to keep it longer.
Consent records are kept for as long as needed to demonstrate compliance with data protection law.
Analytics data, where collected, is retained for a limited period in line with the settings of the analytics tool.

When data is no longer required, we securely delete or anonymise it.

8. Security measures

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. These include:

Serving the entire website over a secure, encrypted HTTPS connection.
Limiting access to personal data to those who need it to carry out their role.
Reviewing our processes periodically to keep them appropriate to the data we hold.

While no method of transmission over the internet is completely secure, we work to maintain a level of protection appropriate to the limited data we collect.

9. Your rights

Subject to certain conditions, you have the following rights in relation to your personal data:

Access — to request a copy of the personal data we hold about you.
Rectification — to ask us to correct inaccurate or incomplete data.
Erasure — to ask us to delete your data where there is no good reason for us to keep it.
Restriction — to ask us to limit how we use your data in certain circumstances.
Portability — to receive certain data in a structured, commonly used format.
Objection — to object to processing based on our legitimate interests.
Withdraw consent — to withdraw consent at any time where we rely on it.

To exercise any of these rights, please contact us using the details in section 13. We will respond within the timeframes required by law.

10. Cookies

We use a limited number of cookies and similar technologies. Strictly necessary cookies keep the site working, while optional analytics and marketing cookies are used only with your consent. You can manage your preferences at any time through the cookie banner or by reading our Cookie Policy.

11. Children's privacy

Our website and activities are intended for an adult, professional audience. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate steps to remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. When we make material changes, we will update the date shown at the top of this page. We encourage you to review this policy periodically.

13. Contact and complaints

If you have questions about this policy or wish to exercise your rights, please contact us at Ariel Way, London W12 7GF, United Kingdom, or by telephone on +44 20 3371 2300. You may also use our contact page.

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the supervisory authority for data protection in the United Kingdom. We would, however, appreciate the opportunity to address your concerns directly before you do so.