The Posture Revolution Ltd, (Company Number: 11695079), trading as Corefulness (“we/us/our”), respects and values the privacy of everyone who visits www.corefulness.com (“our website”), and we understand that your privacy is important to you and that you care about how your personal data is used. Accordingly, when you use our website, we will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
You should also read the following:
We may alter our policies and terms and conditions at any time. You are therefore advised to check these pages each time you visit corefulness.com. In the event of any conflict between the current version of our policies or terms and conditions and any previous version(s), the provisions current and in effect shall prevail unless it is expressly stated otherwise.
If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the ICO. We would, however, welcome the opportunity to resolve your concerns ourselves before you approach the ICO, so please contact us in the first instance using the contact details above.
Individuals under the age of 18 may only use the services provided on our website with the involvement and consent of a parent or legal guardian, under such person’s account and subject to our Terms and Conditions. We do not knowingly collect personal data relating to children.
“Personal data” is any information relating to you that identifies you either directly from that information or indirectly, by reference to other information that we have access to.
Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers. It does not include data where your identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of data about you, which we have classified as follows:
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic or biometric data). Nor do we collect any information relating to criminal convictions and/or offences.
We collect personal data directly from you as follows:
Most of the personal data that we collect from you will be information that you provide voluntarily. In some circumstances, we may also receive information from:
Data we collect automatically
When you visit our website, we will automatically collect, store and use Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.
It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed.
We will only use your data fairly and where we have a lawful reason to do so.
We are allowed to use your personal data if we have your consent or another legally permitted reason applies. These include to fulfil a contract with you, when we have a legal duty to comply with, or when we have a legitimate interest.
“Legitimate Interest” means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to do so by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
If we are relying on your consent as the lawful basis for using your personal data, you are free to withdraw that consent at any time. If you withdraw your consent, we may not be able to provide certain products and services to you.
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and we need to use your personal data for that purpose.
Please contact our Data Protection Officer if you have any questions about how we collect and use your personal data using the contact details above.
|Uses of personal data||Our lawful basis for the use of your personal data|
|Registering you on our website||Where we have your consent and so that we can create a unique user account for you.|
|Providing and managing your account||Where you have consented; or where it is appropriate to our business relationship with you and/or fulfil contract(s) with our customers.|
|To maintain security and manage access to our systems and website||To comply with legal obligations, and because we have a legitimate interest in maintaining the security of our website and networks, including those of our service providers|
|To provide news and information services, including newsletters||Where you have consented and expressed a preference to receive such marketing communications; or where it is appropriate and relevant to our business relationship with you.|
|To send you details of surveys, campaigns or other initiatives that we co-ordinate||Where you have consented and expressed a preference to receive such marketing communications; or where it is appropriate and relevant to our business relationship with you.|
|To operate suppression lists to ensure that you do not receive communications if you object or unsubscribe||To respect your rights and comply with our legal obligations.|
|To understand how you interact with our services so that we can improve our website and services and personalise our communications with you||Where we have your consent or where it is necessary so that we can deliver our website and online services effectively.|
|To provide the products and/or services that you apply for/subscribe to, to manage our business relationships, including communicate with our customers, to manage billing and payment and to keep records||Where you have consented; or where it is appropriate and relevant to our business relationship with you. To fulfil our contract(s) with our customer(s) and to comply with legal and regulatory obligations, including accounting, tax and data privacy.|
|To manage our supply chain/service providers||Where necessary for the efficient running of our business.|
|Sharing personal data in connection with the sale, transfer, merger, of all or part of, our business or assets||To comply with legal obligations and to facilitate the transaction.|
|Other purposes that we have identified at the point of collection||Where we have your consent.|
With your permission and/or where permitted by law, we may use your personal data for marketing purposes, which may include contacting you by email with information, news, and offers on our products and/or services. We will always obtain your express opt-in consent before sharing your personal data with third parties for marketing purposes and you will be able to opt-out at any time.
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us.
Where you opt out of receiving marketing messages, this will not apply to personal data provided to us as a result of registering on our website, where we have provided a product or service to you or any other transaction.
We do not keep your personal data for any longer than is necessary to fulfil the purpose for which we collected it, or to comply with any legal, regulatory or reporting obligations or to assert or defend against legal claims. For more information about how long we keep your personal data, please contact our Data Protection Officer.
We will not share your personal data with third parties, subject, when necessary, to the following exceptions:
We will only transfer your personal data outside of the European Economic Area under the following circumstances:
The security of your personal data is essential to us, and to protect your data, we take a number of important technical and organisational measures, including the following:
You may also have the right, in certain circumstances to:
We will try to respond to all legitimate requests within one month. Occasionally it could take us longer than one month if your request is particularly complex or you have made a number of requests, in which case we will notify you and keep you updated.
We generally do not make any charge for dealing with these requests, however in some cases, if a request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding or we may refuse to deal with a request. In either case, we will explain our reasons to you.
You can exercise the above rights by contacting our Data Protection Officer, whose details are set out at the beginning of this policy. We will require you to provide satisfactory proof of your identity in order to ensure that your rights are respected and protected and that your personal data is disclosed only to you.
Further information about your rights can also be obtained from the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).