Privacy Policy

Who we are

Our website address is: https://calmkindhappy.co.uk.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We use Google Analytics to monitor our site for performance and traffic. For more information please see Google’s privacy policy.

For Google Analytics Advertising Features, you can opt-out through Google Ads Settings, Ad Settings for mobile apps, or any other available means (for example, the NAI’s consumer opt-out listed above). Google also provides a Google Analytics opt-out plug-in for the web.

Who we share your data with

We don’t share your data with third-parties in a way as to reveal any of your personal information like email, name, etc. or for marketing purposes. However, some data is transferred and/or stored with third-party services we use, like our website provider and other cloud-based services.

Our Website design, support and development company

Our website services are provided and managed by Kate Fordy Designs and Cloudways. They provide ongoing support and maintenance for the website. Kate Fordy Designs and Cloudways do not share that data with anyone outside of the company. They can access and edit all information held on the website. Kate Fordy Designs and Cloudways business operations and third-party hosting servers are held in the UK, EU and the USA.

Videos from YouTube 

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you\’re logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.

Social Media Networks

We provide social media sharing buttons, links to our social media and a twitter feeds on our website to make the website better and improve communication across our community.

When you use social media platforms with this website, each platform has its own technologies and policies to be aware of. For information on limiting the use of widgets and sharing functions with social networks, see below:

• For Twitter widgets, you can find more information here.
• For Facebook widgets, you can find more information here.
• For Pinterest widgets, you can find more information here.

How long we retain your data

We only retain your personal data for as long as we need it to fulfil the purposes for which we have initially collected it, unless otherwise required by law. We will retain and use information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you leave a comment, the comment and its metadata are retained indefinitely, until you ask us to erase them. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users with accounts on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Website and database backups may be kept for 12 months, to ensure that we can restore or rebuild the website in case of failure.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

The personal data that we collect from you will be stored on servers inside the European Economic Area (“EEA”). We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with the GDPR and our data protection policies.

Copies of website files and database files may be taken and held on Cloudways business premises within the UK, for security and development purposes. 

Data such as username and email address may occasionally exchanged via email between our users, system admin and rainbowworks for resolving support queries. For security monitoring purposes, notification emails are also sent to a Cloudways site administration address when new users are created and user passwords are changed.

Your contact information

If you create a customer account on this website, we collect personal information to improve our checkout experience and customer service.

This information may include your:

• Billing and shipping address(es)
• Details about your orders (for example, your shirt size)
• Email address
• Name
• Phone number

We share this information with WordPress, our website hosting provider, so they can provide website services to us.

Additional information

How we protect your data

We take the protection of your personal information seriously and aim to ensure this this site is as secure as possible. We have implemented restrictions related to the storage of and the ability to access your personal information. These include:

• Daily malware scanning done automatically on our hosting servers.
• Making regular, secure backups of your website data.
• Backups are kept in secure storage. 
• Encouraging strong, unique passwords on all user accounts, using the integrated password strength indicator tool and encouraging user to change passwords periodically.
• Limiting the number of people with access to the website’s CMS and admin
• Restricting access to sensitive website files with current best hardening practices.
• Individual accounts for users – no shared logins.
• Removing accounts (or reset of associated passwords) when employees with user accounts leave our community
• Transferring of website files between local to public environments by secure transfer protocols (SFTP).

Our website platform is continually being upgraded and maintained by our website provider Cloudways, to keep up to date with latest versions, security practices and technologies, to help minimise security risk.

Please note that no transmission over the Internet or method of electronic storage can be guaranteed to be 100% secure.

What data breach procedures we have in place

In case of a data breach, our system administrators will go through affected users and will attempt to reset passwords if needed after informing the user. We will create a fresh backup, scan the site for malware and attempt to identify the breach, removing any associated code and means of access. Subsequently we will look at preventative measures that will prevent a similar breach from happening again, and take action where possible.