Privacy Policy

1. Introduction

Eliminationfitwr ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website at eliminationfitwr.world (the "Website") in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

This policy applies to visitors and users of our Website based in the United Kingdom and elsewhere. We are the data controller for the personal data described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: your name when provided through our contact form.
• Contact Data: your email address and any contact details you provide.
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Website.
• Usage Data: information about how you use our Website, including pages visited and time spent on pages.
• Communication Data: messages and enquiries you send through our contact form.
• Cookie Data: preferences stored through our cookie consent mechanism. See our Cookie Policy for details.

4. How We Collect Your Data

We collect personal data through:

• Direct interactions when you complete forms on our Website or contact us by email or phone.
• Automated technologies including cookies and similar tracking technologies when you browse our Website.
• Third parties such as analytics providers, where you have consented to such processing.

5. Purposes and Legal Bases for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We process your personal data for the following purposes and on the following legal bases:

• Responding to enquiries: to respond to your contact form submissions and follow up on your request (legal basis: legitimate interests in operating our business and communicating with visitors, or consent where you tick the contact form consent box).
• Website operation: to ensure the Website functions correctly, securely, and to remember your cookie choices (legal basis: legitimate interests and, for non-essential cookies, consent under PECR).
• Analytics: to understand how visitors use our Website and improve our content (legal basis: consent).
• Marketing and advertising measurement: to measure the effectiveness of our online communications and, where you have consented, support relevant advertising (legal basis: consent).
• Legal compliance: to comply with applicable laws, regulations, and lawful requests from authorities (legal basis: legal obligation).

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interests as described in Section 9.

6. Whether Provision of Data Is Required

You are not required by law to provide personal data to browse our Website. However, if you wish to contact us through the contact form, you must provide your name, email address, and message, and confirm consent to processing, so that we can respond to your enquiry. If you do not provide this information, we cannot process your request.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: up to 24 months from the date of submission.
• Analytics data: up to 26 months, subject to your cookie preferences.
• Cookie consent records: up to 12 months.
• Technical logs: up to 90 days for security purposes.

After the retention period expires, data is securely deleted or anonymised.

8. Data Sharing, Processors, and Transfers

We do not sell your personal data. We may share personal data with the following categories of recipients:

• Service providers (data processors): hosting providers, email service providers, and analytics or advertising technology providers (such as Google), who process data on our instructions under written contracts that require appropriate security and confidentiality.
• Professional advisers: lawyers, accountants, or insurers where reasonably necessary.
• Regulators and authorities: when required by law or to establish, exercise, or defend legal claims.

Where analytics or marketing tools are enabled with your consent, data may be processed by third parties including Google LLC. Their processing is governed by their own privacy policies.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR, such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, or an adequacy decision recognised by the UK government.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted between your browser and our servers.
• Access controls limiting who can view personal data.
• Regular security assessments and updates to our systems.
• Staff training on data protection principles.

10. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data in certain circumstances.
• Right to restrict processing: request limitation of how we use your data.
• Right to data portability: receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
• Right to object: object to processing based on legitimate interests, including profiling related to those interests, and object at any time to processing for direct marketing.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details in Section 15. We will respond within one month, which may be extended by a further two months for complex requests. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the ICO as described in Section 14.

11. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

12. Marketing Communications

We do not send unsolicited marketing emails. If you contact us through the Website, we will use your details only to respond to your enquiry unless you separately opt in to further communications. You may withdraw consent for marketing or object to direct marketing at any time by contacting us.

13. Children's Privacy

Our Website is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete it.

14. Complaints

We hope to resolve any concerns about our use of your personal data directly. If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. Material changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

16. Contact Us

For any questions about this Privacy Policy or our data practices, contact us at: