Privacy Policy
1. Who We Are and How to Contact Us
This Privacy Policy explains how Clearyouthar ("we", "us", "our") processes personal data when you use our website. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data controller:
Clearyouthar
Chillies Ln, High Hurstwood, Uckfield TN22 4AB, United Kingdom
Email: touch@clearyouthar.click
Phone: +44 7980 212960
If you have questions about this policy or wish to exercise your rights, please contact us using the details above. We aim to respond within one calendar month, as required by UK law.
2. Scope of This Policy
This policy applies to personal data collected through our website, contact form, email correspondence, and related online services. It does not cover third-party websites linked from our pages; please review their privacy policies separately.
3. Data We Collect
We may collect and process the following categories of personal data:
- Identity data: your name as provided through our contact form
- Contact data: your email address submitted via the contact form
- Communication data: the content of messages you send to us
- Technical data: IP address, browser type and version, time zone setting, operating system, and platform
- Usage data: information about how you use our website, including pages visited, time spent, and navigation paths
- Consent records: your cookie and marketing preferences where applicable
We do not intentionally collect special category data (such as health information) through our contact form. Please avoid including sensitive medical details in your messages unless necessary; if you do, we will process that information only with your explicit consent or as otherwise permitted by law.
4. How We Collect Your Data
We collect data through the following methods:
- Direct interactions: when you fill in our contact form or correspond with us via email
- Automated technologies: as you navigate our website, we may automatically collect technical and usage data through cookies and similar technologies
5. Purposes and Lawful Bases for Processing
Under UK GDPR, we must have a lawful basis for each processing activity. The table below summarises how we use your data:
- Responding to contact enquiries — to handle your message and follow up where needed. Lawful basis: consent (when you submit the form and tick the consent box) and legitimate interests (operating and improving our enquiry service).
- Website security and operation — to protect the site, prevent abuse, and maintain technical functionality. Lawful basis: legitimate interests and, where required, legal obligation.
- Analytics and performance — to understand how visitors use the site and improve content. Lawful basis: consent for non-essential cookies and similar technologies under the Privacy and Electronic Communications Regulations (PECR); where strictly necessary, legitimate interests.
- Marketing measurement — only where you have accepted marketing cookies. Lawful basis: consent.
- Legal and regulatory compliance — to meet record-keeping, tax, or law-enforcement requirements. Lawful basis: legal obligation and legitimate interests.
Where we rely on legitimate interests, we balance those interests against your rights and freedoms. You may object to processing based on legitimate interests as described in Section 10 below.
6. Marketing Communications
We do not send promotional emails unless you have clearly opted in or we have another lawful basis to do so. If you receive marketing from us, you may unsubscribe at any time using the link in the message or by contacting us. We keep a record of opt-in and opt-out requests to demonstrate compliance with PECR and UK GDPR.
7. Cookies and Similar Technologies
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are placed only after you have given consent through our cookie banner. You may withdraw consent at any time by adjusting your browser settings or clearing site data and making a new choice when you return.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions: retained for up to 12 months after your last interaction
- Technical and usage data: retained for up to 26 months
- Cookie consent records: retained for up to 12 months
After the retention period expires, your data is securely deleted or anonymised.
9. Your Rights Under UK Data Protection Law
Under the UK GDPR and Data Protection Act 2018, you have the following rights (subject to certain exemptions):
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate or incomplete data
- Right to erasure — request deletion in certain circumstances ("right to be forgotten")
- Right to restrict processing — ask us to limit how we use your data in specific situations
- Right to data portability — receive data you provided in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means
- Right to object — object to processing based on legitimate interests, including profiling; object to direct marketing at any time
- Rights related to automated decision-making — we do not make decisions based solely on automated processing that produce legal or similarly significant effects
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal
To exercise any right, contact us using the details in Section 1. We will respond within one month unless the request is complex, in which case we may extend by a further two months and will explain why. We may ask for reasonable identity verification before disclosing data.
You also have the right to lodge a complaint with the UK supervisory authority (see Section 14).
10. Children
Our website is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13 without appropriate parental consent. If you believe we have collected such data, please contact us and we will delete it promptly.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted data transmission via HTTPS/TLS protocols
- Restricted access to personal data on a need-to-know basis
- Regular review of data processing practices and security measures
- Secure storage and systematic disposal of data that is no longer needed
12. Third-Party Sharing and Processors
We do not sell your personal data. We may share data with trusted third parties who process data on our behalf, including:
- Website hosting and infrastructure providers
- Analytics and measurement providers (only where you have consented to analytics or marketing cookies)
- Content delivery networks and font or icon libraries that support site display
- Professional advisers (lawyers, accountants) where reasonably required
- Regulators, courts, or law enforcement when required by UK law or to establish, exercise, or defend legal claims
Processors are required to handle data only on our instructions and under contracts that meet UK GDPR Article 28 requirements. A list of key processor categories is available on request.
13. International Transfers
We primarily store and process data within the United Kingdom. If personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
- Transfers to countries covered by UK adequacy regulations
- UK International Data Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses
- Other mechanisms recognised under UK GDPR Chapter V
You may request further information about safeguards by contacting us.
14. Complaints to the ICO
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK regulator for data protection:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in law, technology, or our practices. Material changes will be posted on this page with an updated "Last updated" date. Where required, we will seek renewed consent or provide additional notice.
16. Contact Us
For any questions regarding this Privacy Policy or your personal data, please contact us:
Email: touch@clearyouthar.click
Phone: +44 7980 212960
Address: Chillies Ln, High Hurstwood, Uckfield TN22 4AB, United Kingdom