1. Data controller
Youthrestore (operating at youthrestore.world) is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR), as supplemented by the Data Protection Act 2018, and the EU GDPR where it applies to you.
Legal entity: Youthrestore
Address: 15 Battlebarrow, Appleby-in-Westmorland CA16 6XS, United Kingdom
Country: United Kingdom
Phone: +44 17683 32431
Email: reach@youthrestore.world
We have not appointed a Data Protection Officer. For all data protection matters, please use the contact details above.
2. Scope
This policy applies to personal data collected through our informational website about employee workplace habit education, contact forms, cookies and similar technologies, and related communications. It does not cover third-party websites linked from our pages.
3. Data we collect
We may collect the following categories of personal data:
- Identity and contact data: name, email address, and message content when you submit the contact form.
- Technical data: IP address, browser type, device information, referring URLs, and pages visited when you use our site.
- Cookie and consent data: preferences stored locally and, if you consent, analytics or marketing identifiers. See our Cookie Policy.
- Communications data: records of enquiries and our replies when you contact us by email or phone.
We do not intentionally collect special category data (such as health data) through the contact form. Please do not include sensitive information in your message unless necessary; if you do, we will process it only as required to handle your enquiry and in line with this policy.
4. How we collect data
Data is collected directly from you when you submit forms or contact us, automatically through server logs and similar technologies when you browse the site, and from your device when you manage cookie preferences.
5. Purposes and legal bases
Under UK GDPR we must identify a lawful basis for each purpose. The table below summarises our main processing activities:
| Purpose | Typical data | Legal basis |
|---|---|---|
| Responding to enquiries and follow-up communication | Name, email, message | Legitimate interests (operating our business and answering requests); consent where you tick the form checkbox; pre-contractual steps where relevant |
| Operating, maintaining, and securing the website | Technical and log data | Legitimate interests |
| Analytics and marketing technologies | Cookie identifiers, usage data | Consent (you may refuse or withdraw at any time) |
| Legal, regulatory, and record-keeping obligations | Relevant contact and transaction records | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we balance our interests against your rights and will explain our reasoning on request. You may object to processing based on legitimate interests in certain circumstances.
6. Whether you must provide data
Contact form fields marked as required are necessary to respond to your enquiry. If you do not provide them, we may be unable to reply. Other browsing data is collected automatically when you use the site.
7. Automated decision-making
We do not use your personal data for solely automated decision-making or profiling that produces legal or similarly significant effects.
8. Marketing
We do not send promotional email solely because you submitted the contact form unless you have clearly opted in or we have another lawful basis. You may unsubscribe from any marketing messages at any time using the link in the message or by contacting us.
9. Retention
We keep personal data only for as long as necessary for the purposes described above:
- Contact form submissions and related correspondence: up to 24 months from the last interaction, unless a longer period is required for legal claims, regulatory obligations, or active contractual discussions.
- Server and security logs: typically up to 90 days.
- Cookie consent records: stored in your browser local storage until you clear them or change your preferences via our banner.
10. Recipients and processors
We do not sell personal data. We may share data with trusted service providers who process data on our instructions, including categories such as website hosting, content delivery (for example fonts or icons), email delivery, and analytics or advertising platforms if you consent to those cookies. Each processor is bound by a contract requiring appropriate security and confidentiality.
11. International transfers
Some providers may process data outside the United Kingdom. Where required, we implement appropriate safeguards recognised under UK law, such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, or an adequacy decision. You may request further information about safeguards by contacting us.
12. Security measures
We use HTTPS, access controls, and organisational measures designed to protect data against unauthorised access, alteration, or disclosure. No method of transmission over the internet is completely secure; we encourage you to use secure channels when sending sensitive information.
13. Your rights
Subject to applicable law, you may have the following rights:
- Right of access to a copy of your personal data.
- Right to rectification of inaccurate data.
- Right to erasure in certain circumstances.
- Right to restrict processing in certain circumstances.
- Right to object to processing based on legitimate interests or for direct marketing.
- Right to data portability where processing is based on consent or contract and carried out by automated means.
- Right to withdraw consent at any time for processing that relies on consent, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, contact us using the details in section 1. We will respond within one month in most cases, which may be extended by a further two months for complex requests as permitted by UK GDPR. We may need to verify your identity before acting on a request.
If you are unhappy with our response, you may lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Website: ico.org.uk — complaints: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
14. Children
Our website and services are directed at organisations and adults in professional contexts. We do not knowingly collect personal data from children under 13 in the United Kingdom without appropriate parental authority. If you believe we have collected such data, please contact us so we can delete it.
15. Changes
We may update this policy to reflect legal or operational changes. Material changes will be indicated by updating the date at the top of this page. We encourage you to review this policy periodically.