Privacy Policy

1. About This Policy

Aritelon Workshop is an independent wellness catalogue presenting body care and daily supplement selections. The catalogue is not affiliated with any commercial, governmental, or institutional body.

This Privacy Policy describes how Aritelon Workshop collects, uses, stores, and protects personal data when you visit aritelon.info. It applies to all pages of this website and to any personal data you submit through the contact form or by corresponding with the team by email or telephone.

2. Data Controller

The data controller responsible for personal data processed through this website is:

3. Data We Collect

We collect only the personal data necessary to provide the functions of this website. The categories of data we collect are:

• Contact form data: name, email address, and message content when you submit an enquiry through the website.
• Technical data: IP address, browser type, operating system, referring URL, and pages visited, collected via server logs and analytics.
• Cookie data: as described in our Cookie Policy. You may manage your cookie preferences at any time via the Cookie Settings link in the site footer.

4. How We Use Your Data

We use the data collected for the following purposes:

• To respond to enquiries submitted via the contact form.
• To understand how visitors use the website and improve its content and functioning.
• To maintain the security and proper functioning of the website infrastructure.
• To comply with applicable legal obligations in the United Kingdom.

We do not use your personal data for automated profiling, targeted advertising, or for onward sale to third parties.

5. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

• Legitimate interests (Article 6(1)(f)): for website analytics and security logging, where those interests are not overridden by your data protection rights.
• Consent (Article 6(1)(a)): for non-essential cookies, where you have given consent via the cookie banner.
• Contract performance (Article 6(1)(b)): where processing is necessary to respond to your enquiry.

6. Data Retention

Contact form submissions are retained for a period of 24 months from the date of receipt, after which they are permanently deleted. Server log data is retained for 12 months. Cookie data is retained in accordance with the periods specified in our Cookie Policy.

We do not retain personal data for longer than is necessary for the purpose for which it was collected.

7. Third-Party Services

This website uses the following third-party services, which may process personal data as part of their functioning:

• Google Maps: used on the Contact page to display a location map. Subject to Google's Privacy Policy.
• Font delivery services: Google Fonts and Fontshare are used to load typefaces. These services may log IP addresses as part of CDN processing.
• CDN asset services: third-party CDN providers are used to load JavaScript libraries. These may log connection data per their respective privacy policies.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: to obtain a copy of personal data we hold about you.
• Right to rectification: to correct inaccurate personal data.
• Right to erasure: to request deletion of your personal data where no overriding legal basis exists.
• Right to object: to object to processing based on legitimate interests.
• Right to data portability: to receive data in a structured, machine-readable format where applicable.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. All data transmitted to and from this website is encrypted via HTTPS.

Where data is processed by third parties on our behalf, we take reasonable steps to ensure those parties maintain appropriate security standards.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of aritelon.info following any changes constitutes acceptance of the updated policy.

11. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, contact the team at [email protected] or by post to 36 Cross Street, London N1 2BG, United Kingdom.