Privacy Policy

1. Who We Are

This Privacy Policy applies to the website located at hipsskeleton.world, operated by Hipsskeleton (the “data controller”), with a registered address at Unit 3, Victor House Barnet Rd, London Colney, St Albans AL2 1BJ, United Kingdom.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), as retained in UK law, and the Data Protection Act 2018 (DPA 2018).

For any data protection enquiries, please contact us at: help@hipsskeleton.world or by post to the address above.

2. What Data We Collect

We may collect and process the following categories of personal data:

• Contact data: Your name and email address when you submit our contact form.
• Message content: The content of messages you send us via the contact form.
• Technical data: IP address, browser type, device type, operating system, and pages visited, collected via analytics cookies (only if you consent).
• Cookie preference data: Your cookie consent choices, stored locally in your browser via localStorage.

We do not collect any special categories of personal data (e.g. data relating to physical or mental condition, financial details, or government identification numbers).

3. How We Use Your Data and Lawful Bases

Under UK GDPR, we must have a lawful basis for each purpose of processing. We use your personal data only as follows:

• To respond to enquiries: Processing contact form submissions and providing information about our coaching programmes. Legal basis: Consent (Article 6(1)(a) UK GDPR), given when you tick the consent box on our contact form; and, where applicable, steps taken at your request prior to entering a contract (Article 6(1)(b)).
• To improve our website: Analysing usage data to understand how visitors interact with our content. Legal basis: Consent (Article 6(1)(a)), obtained via our cookie banner before non-essential cookies are used.
• To manage cookie preferences: Storing your consent decisions in your browser. Legal basis: Legitimate interests (Article 6(1)(f)) and compliance with the Privacy and Electronic Communications Regulations 2003 (PECR).
• To comply with legal obligations: Retaining records where required by tax, accounting, or regulatory law. Legal basis: Legal obligation (Article 6(1)(c)).

We do not use your personal data for fully automated decision-making or profiling that produces legal or similarly significant effects.

4. Marketing Communications

We do not send marketing emails unless you have explicitly opted in. If you opt in, you may withdraw consent at any time by contacting us or using the unsubscribe link in any marketing email. We will not share your contact details with third parties for their own marketing purposes.

5. How Long We Retain Your Data

• Contact form submissions: Retained for up to 24 months from the date of submission, then securely deleted.
• Analytics data: Aggregated and anonymised; retained in accordance with the applicable analytics provider's policy.
• Cookie preference records: Stored in your browser's localStorage until you clear your browser data or withdraw consent.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data to any third party. We may share data with the following categories of recipients only where necessary:

• Email service providers: To send responses to your enquiries, operating under appropriate data processing agreements.
• Analytics providers: Only where you have consented to analytics cookies. Data is anonymised where technically feasible.
• Legal authorities: Where required by law or legal proceedings.

All third-party processors are required to handle your data in accordance with applicable data protection legislation.

7. International Transfers

Your data is primarily processed within the United Kingdom. Where we use service providers outside the UK, we ensure appropriate safeguards are in place under UK GDPR Chapter V, which may include the UK International Data Transfer Agreement (IDTA), the UK Addendum to EU Standard Contractual Clauses, or an adequacy regulation where the destination country has been recognised as providing adequate protection.

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data where there is no longer a lawful basis for its retention.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests.
• Right to withdraw consent: Where processing relies on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at help@hipsskeleton.world. We will respond within one calendar month, as required by UK GDPR (this may be extended by up to two further months for complex requests, in which case we will inform you).

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our website is served exclusively over HTTPS. Access to personal data is restricted to authorised personnel only.

10. Cookies

We use cookies on this website. Please refer to our Cookie Policy for full details of the cookies we use, their purposes, and how to manage your preferences.

11. Children's Data

Our website and services are not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have collected data from a child under 13, please contact us immediately and we will delete it without undue delay.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. The "Last updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically.