Privacy Policy

Last updated:

1. Data Controller

Jointstdrain, located at Snapper, Barnstaple EX32 7JY, United Kingdom, is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You can contact us about data protection matters at callback@jointstdrain.world or by phone at +44 1271 343803. We will respond to privacy-related requests within one calendar month, as required by UK GDPR.

2. Scope of This Policy

This Privacy Policy applies to personal data collected through jointstdrain.world and related enquiries about our morning walking group information service in Barnstaple, United Kingdom. It does not apply to third-party websites linked from our pages.

3. Personal Data We Collect

We may collect the following categories of personal data:

  • Identity data: name
  • Contact data: email address, telephone number if you provide it
  • Communication data: messages sent through our contact form
  • Technical data: IP address, browser type, operating system, device information
  • Usage data: pages visited, time spent on the site, referral source, interaction with site features
  • Cookie and consent data: preferences stored via our cookie consent mechanism and similar technologies described in our Cookie Policy

We collect personal data when you submit our contact form, when you contact us directly, when you use our website, and where permitted when analytics or marketing tools are activated with your consent.

4. Purposes and Legal Basis for Processing

Under UK GDPR, we process personal data only where we have a lawful basis. The table below summarises our main processing activities:

  • Responding to enquiries submitted via our contact form — lawful basis: consent (when you tick the consent box) and legitimate interests (to respond to genuine requests about our service)
  • Operating, securing, and maintaining our website — lawful basis: legitimate interests (to run a safe and functional website)
  • Analytics to understand site usage — lawful basis: consent (via our cookie banner)
  • Measuring advertising effectiveness, including Google Ads where enabled — lawful basis: consent (via our cookie banner)
  • Compliance with legal obligations — lawful basis: legal obligation

Where we rely on legitimate interests, we balance our interests against your rights and only process data where this balance supports processing. You may object to processing based on legitimate interests at any time.

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Data Retention

Contact form submissions are retained for up to 24 months unless a longer period is required by law or needed to resolve an ongoing enquiry. Technical and usage data collected via analytics is retained for up to 26 months where consent has been given. Cookie consent preferences are stored locally on your device until you clear your browser data or change your choices through the cookie banner.

When retention periods expire, we securely delete or anonymise personal data unless we are legally required to keep it longer.

6. Your Rights Under UK GDPR

Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of access — to obtain a copy of the personal data we hold about you
  • Right to rectification — to correct inaccurate or incomplete data
  • Right to erasure — to request deletion in certain circumstances
  • Right to restrict processing — to limit how we use your data in certain circumstances
  • Right to data portability — to receive data you provided in a structured, commonly used format where processing is based on consent or contract and carried out by automated means
  • Right to object — to object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent — at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, contact us at callback@jointstdrain.world. We may need to verify your identity before responding. We aim to respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom

7. Data Sharing, Processors, and International Transfers

We do not sell your personal data. We may share data with trusted service providers (data processors) who assist us with website hosting, analytics, email delivery, content delivery networks, and advertising measurement. These providers may only process data on our documented instructions and subject to appropriate contractual safeguards under UK GDPR Article 28.

Some providers may process data outside the United Kingdom. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to EU Standard Contractual Clauses, or an adequacy decision recognised under UK law.

8. Marketing Communications

We do not send unsolicited marketing emails. If you contact us and we respond to your enquiry, that communication relates to your request only. Where we ever introduce optional marketing communications in future, we will obtain your explicit consent or rely on another lawful basis permitted under the Privacy and Electronic Communications Regulations (PECR), and you will be able to opt out at any time.

9. Children

Our website is not directed at children under 13 years of age, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it promptly.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), access controls, and proportionate security reviews. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

11. Cookies and Similar Technologies

Our website uses cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are used only with your consent. You can manage your cookie preferences at any time through the cookie settings banner.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Material updates will be posted on this page with a revised date. We encourage you to review this policy periodically.