Drinkbreak Privacy Policy

(Date 29 Jan 2024)

The type of personal information we collect.

Drinkbreak is committed to providing high quality help and aspires to lead the field in best practice. This includes earning the trust of users and this means ensuring privacy, confidentiality and security of all the data we receive to the best of our ability.

We collect and process the following information:

If you are using the free parts of drinkbreak we only collect data that is automatically available - your IP address and anonymous cookies for the purpose of tracking usage and ensuring quality of service.

If you sign up and subscribe to drinkbreak you can optionally supply an email address, which you can use to regain access to your account if you forget your password and so that we can email you with updates and reminders. You are free to set up and use a temporary email address if you do not wish to provide your personal or work address.

During registration, you can optionally provide a greeting name or nickname - you are free to use any name you choose for this and it does not have to be your real name.

We may also collect:

  • Date of Birth (to ensure you are over 18 years of age)
  • A username selected by you
  • A password, which will be immediately encrypted
  • Gender - so we can tailor information that we make available to you

We use a third party payment provider, Stripe, to process subscription fee payments.

We do not collect the details used for payment, but these will be processed by Stripe according to their privacy policy. These include name, address, contact number and card payment details including. name on the card, card number, and expiry date.

This information is required in order for Stripe to process your payments and enable us to provide you with the subscription service you have signed up for.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • When you engage with the exercises on drinkbreak you may be asked to provide information about your drinking, thoughts, feelings, mood and personal situation including people you know. Providing this information is entirely voluntary and we use it help you benefit from drinkbreak including use of tools to track your own drinking.
  • This information is stored in order to provide you with suggestions to help you make choices about your drinking, carry them through and keep track of your drinking.
  • Communicating with you to make you aware of new developments, news and sending you prompts and reminders. You can always choose to unsubscribe from receiving these communications by clicking the link provided at the bottom of our emails.
  • Paying for use of drinkbreak and additional services
  • For auditing and planning the future development and marketing of drinkbreak.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information is your voluntary consent. You are able to remove your consent at any time. You can do this by contacting data-protection@drinkbreak.org.uk

When you provide your personal data you acknowledge that drinkbreak will use this information in order to provide the services as set out in our Terms and Conditions. You can choose to withdraw your consent to drinkbreak processing of this personal data at any time by contacting us at privacy@drinkbreak.org.uk

How we store your personal information

Your information is securely stored using all appropriate technical and organisational measures to safeguard your data. We may store your personal data on the servers of our cloud service providers Digital Ocean, Heroku and Amazon Web Services, which for the purposes of the General Data Protection Regulation 2016/679 (GDPR) and the UK Data Protection Act 2018 (UK DPA 2018) is considered to be sharing.

Sharing and disclosing your data

We will never share or disclose your personal data with any other parties, except under the following circumstance:

  • when we are required by law to do so, for example by law enforcement.
  • Aggregated and anonymised data for external audit and marketing where we have a legitimate interest in doing so and in line with reasonable expectations.

How long will we hold your data?

We will continue to hold your personal data while you are actively using the Drinkbreak website. If you do not log in for a period of 24 months, we will delete your account.

We will delete your account at your written request.

Where your information is no longer required, we will ensure it is disposed of in a secure manner.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website. For detailed information on the cookies we use and the purposes for which we use them, see our Cookies Policy.

Links to Other Sites

The Drinkbreak website may contain links to other sites, for example NHS health information sites. This Privacy Policy applies only to the Drinkbreak website.

Your data protection rights

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information.
  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
  • Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
  • You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
  • Please contact us by email at data-protection@drinkbreak.org.uk if you wish to make a request.

    • How to complain

    If you have any concerns about our use of your personal information, you can make a complaint to us at data-protection@drinkbreak.org.uk You can also complain to the ICO if you are unhappy with how we have used your data.

    The ICO's address: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

    Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk