1. Scope and Applicable Law
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit or use this website. It applies to visitors in the United Kingdom and, where relevant, to visitors in the European Economic Area (EEA).
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR) as amended.
2. Data Controller
Kneevitayoung is the data controller responsible for the personal data collected through this website (kneevitayoung.pro).
Business name: Kneevitayoung
Address: 47 Regent St, Eccles, Manchester M30 0BP, United Kingdom
Phone: +44 7888 666359
Email: contact@kneevitayoung.pro
3. Data We Collect
We collect only the personal data reasonably necessary to operate this informational website and respond to enquiries. We do not intentionally collect special category data (such as detailed health records) through this site. Please avoid including sensitive health information in contact messages unless it is essential to your enquiry.
3.1 Contact form submissions
- Full name
- Email address
- Message content
- Timestamp of submission
- GDPR consent record
3.2 Automatically collected data
- IP address (anonymised where possible)
- Browser type and version
- Pages visited and time spent
- Referring URL
- Device type
3.3 Cookie and local storage data
Cookie and similar technology usage is described in our Cookie Policy. Your cookie choice may be stored in your browser's local storage under the key cookie_consent.
4. Purposes and Legal Bases
Under UK GDPR Article 6, we rely on the following lawful bases:
| Processing activity | Purpose | Lawful basis |
|---|---|---|
| Contact form | Respond to your message | Consent (Art. 6(1)(a)) and legitimate interests (Art. 6(1)(f)) |
| Server and security logs | Operate and protect the website | Legitimate interests (Art. 6(1)(f)) |
| Analytics (if enabled) | Understand aggregated site usage | Consent (Art. 6(1)(a)) |
| Legal and regulatory requests | Comply with applicable law | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we balance those interests against your rights and freedoms. You may object to processing based on legitimate interests as described in section 8.
5. Data Retention
- Contact form data is retained for up to 2 years from the date of submission, after which it is securely deleted.
- Analytics data is retained for a maximum of 14 months in aggregate, anonymised form.
- Cookie consent records are retained for 12 months.
6. Data Sharing and Processors
We do not sell, rent, or trade your personal data. We may share data with trusted service providers (processors) who act on our instructions, including:
- Website hosting providers — to deliver and secure the site, under written data processing terms.
- Analytics providers — only if you have consented to analytics cookies.
- Professional advisers — where reasonably required (for example, legal or technical support), subject to confidentiality.
- Regulators and law enforcement — where required by applicable UK law, court order, or lawful request.
Processors must implement appropriate technical and organisational measures and process data only on documented instructions consistent with UK GDPR requirements.
7. International Transfers
Where personal data is transferred outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or reliance on adequacy decisions. You may request details of these safeguards by contacting us.
8. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — request a copy of personal data we hold about you (subject to exemptions).
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion where processing is no longer necessary, consent is withdrawn, or processing is unlawful.
- Right to restriction — request limited processing in certain circumstances.
- Right to data portability — receive data you provided in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
- Right to object — object to processing based on legitimate interests, and to direct marketing at any time.
- Right to withdraw consent — where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.
To exercise any right, contact us using the details in section 15. We will respond within one calendar month, which may be extended by up to two further months for complex requests (we will inform you if an extension applies).
We may need to verify your identity before responding. There is no fee for most requests; we may charge a reasonable fee or refuse manifestly unfounded or excessive requests as permitted by law.
9. Children
This website is intended for adults (18 and over). We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted personal data through our contact form, please contact us and we will delete it promptly.
10. Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- HTTPS encryption for all data in transit
- Access controls limiting data access to authorised personnel
- Regular reviews of data handling practices
11. Cookies and Similar Technologies
We use cookies and browser storage as described in our Cookie Policy. Non-essential cookies are not placed unless you have given consent through the cookie banner on the site.
12. Electronic Communications
We do not send unsolicited marketing emails. If you contact us, we will use your email address only to respond to your enquiry unless you separately opt in to further communications (where offered). You may unsubscribe from any optional marketing messages at any time using the unsubscribe link or by contacting us.
13. Automated Decision-Making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when the policy was last revised. Where changes are material, we will take reasonable steps to draw your attention to the update (for example, by updating this page). We encourage you to review this policy periodically.
15. Contact and Complaints
For all data protection enquiries, please contact:
Kneevitayoung
47 Regent St, Eccles, Manchester M30 0BP, United Kingdom
Email: contact@kneevitayoung.pro
Phone: +44 7888 666359
If you are not satisfied with our response, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113