Privacy Policy

1. Who We Are

Calmmind is a trading name of Itson Group Ltd, a company registered in Northern Ireland (Company Number: NI718987).

Data Controller: Itson Group Ltd
Registered Address: Office 517, Unit 6, 100 Lisburn Road, Belfast, BT9 6AG
Contact: [email protected]
Phone: 0800 123 4567

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, delivery address
• Payment Information: Billing address, payment method details (processed securely by our payment providers)
• Communication: Messages, emails, and feedback you send to us
• Health Information: Any health-related information you voluntarily share when contacting us

2.2 Information We Collect Automatically

• Website Usage: Pages visited, time spent, referral sources
• Device Information: IP address, browser type, operating system
• Cookies: See our Cookie Policy for detailed information

3. How We Use Your Information

3.1 To Provide Our Service

• Process and fulfil your orders
• Manage your subscription
• Provide customer support
• Send order confirmations and delivery updates

3.2 To Improve Our Service

• Analyse website usage to improve user experience
• Develop new products and services
• Conduct research and analytics

3.3 Marketing (with your consent)

• Send promotional emails about products and offers
• Personalise marketing content
• Measure marketing effectiveness

4. Legal Basis for Processing

We process your personal data based on:

• Contract: To fulfil our subscription service obligations
• Legitimate Interest: To improve our service, prevent fraud, and ensure security
• Consent: For marketing communications (you can withdraw consent anytime)
• Legal Obligation: To comply with tax, accounting, and consumer protection laws

5. Who We Share Information With

5.1 Service Providers

• Payment Processors: To process transactions securely
• Delivery Companies: To ship your orders
• Email Service Providers: To send transactional and marketing emails
• Analytics Providers: To understand website usage

5.2 Legal Requirements

We may disclose information when required by law or to protect our rights, property, or safety.

5.3 Business Transfers

If we sell or merge our business, customer information may be transferred to the new owners.

6. International Transfers

Some of our service providers may be located outside the UK/EEA. When we transfer data internationally, we ensure adequate protection through:

• Adequacy decisions by the UK/EU
• Standard contractual clauses
• Other appropriate safeguards approved by data protection authorities

7. Data Retention

We retain your personal data only as long as necessary:

• Account Data: Until you close your account, plus 7 years for legal compliance
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: Up to 38 months
• Customer Support: Up to 3 years after last contact

8. Your Rights

Under UK GDPR and Data Protection Act 2018, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Restrict: Request limitation of processing in certain circumstances
• Withdraw Consent: For marketing communications

9. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and login status
• Analyse website traffic and user behaviour
• Provide personalised content and advertising
• Ensure website security and prevent fraud

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

10. Security

We implement appropriate technical and organisational measures to protect your personal data:

• SSL encryption for data transmission
• Secure payment processing
• Access controls and authentication
• Regular security monitoring and updates
• Staff training on data protection

11. Children's Privacy

Our service is intended for adults. We do not knowingly collect personal information from children under 16 without parental consent. If you're a parent and believe we've collected your child's information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of significant changes by email or website notice. Your continued use of our service constitutes acceptance of the updated policy.

13. Complaints

If you're not satisfied with how we handle your personal data, you can:

• Contact us directly at [email protected]
• Lodge a complaint with the Information Commissioner's Office (ICO)

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: