(Date 29 Jan 2024)
Drinkbreak is committed to providing high quality help and aspires to lead the field in best practice. This includes earning the trust of users and this means ensuring privacy, confidentiality and security of all the data we receive to the best of our ability.
We collect and process the following information:
If you are using the free parts of drinkbreak we only collect data that is automatically available - your IP address and anonymous cookies for the purpose of tracking usage and ensuring quality of service.
If you sign up and subscribe to drinkbreak you can optionally supply an email address, which you can use to regain access to your account if you forget your password and so that we can email you with updates and reminders. You are free to set up and use a temporary email address if you do not wish to provide your personal or work address.
During registration, you can optionally provide a greeting name or nickname - you are free to use any name you choose for this and it does not have to be your real name.
We may also collect:
We use a third party payment provider, Stripe, to process subscription fee payments.
We do not collect the details used for payment, but these will be processed by Stripe according to their privacy policy. These include name, address, contact number and card payment details including. name on the card, card number, and expiry date.
This information is required in order for Stripe to process your payments and enable us to provide you with the subscription service you have signed up for.
Most of the personal information we process is provided to us directly by you for one of the following reasons:
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information is your voluntary consent. You are able to remove your consent at any time. You can do this by contacting data-protection@drinkbreak.org.uk
When you provide your personal data you acknowledge that drinkbreak will use this information in order to provide the services as set out in our Terms and Conditions. You can choose to withdraw your consent to drinkbreak processing of this personal data at any time by contacting us at privacy@drinkbreak.org.uk
Your information is securely stored using all appropriate technical and organisational measures to safeguard your data. We may store your personal data on the servers of our cloud service providers Digital Ocean, Heroku and Amazon Web Services, which for the purposes of the General Data Protection Regulation 2016/679 (GDPR) and the UK Data Protection Act 2018 (UK DPA 2018) is considered to be sharing.
We will never share or disclose your personal data with any other parties, except under the following circumstance:
We will continue to hold your personal data while you are actively using the Drinkbreak website. If you do not log in for a period of 24 months, we will delete your account.
We will delete your account at your written request.
Where your information is no longer required, we will ensure it is disposed of in a secure manner.
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website. For detailed information on the cookies we use and the purposes for which we use them, see our Cookies Policy.
The Drinkbreak website may contain links to other sites, for example NHS health information sites. This Privacy Policy applies only to the Drinkbreak website.
Under data protection law, you have rights including:
If you have any concerns about our use of your personal information, you can make a complaint to us at data-protection@drinkbreak.org.uk You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO's address: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk