Privacy Policy

Last updated:

This Privacy Policy applies to Viphnorenrax, operating from 137 Harley St, London, W1G 6BF, United Kingdom. It governs how we handle personal data collected through this website and during consultation services.

1. Who We Are

Viphnorenrax ("we", "us", "our") is a sleep hygiene consultancy based in London, United Kingdom. We provide professional sleep hygiene consultation services to individuals seeking to improve their sleep-related habits and wellbeing.

We are committed to protecting the privacy and security of your personal data. This policy explains how we collect, use, store, and share information about you when you use our website or engage our services.

For the purposes of UK GDPR and the Data Protection Act 2018, Viphnorenrax is the data controller for personal data collected through this website.

2. Data We Collect

We may collect the following categories of personal data:

Contact information: name, email address, telephone number.
Enquiry content: the content of messages you send via our contact form.
Consultation data: information you provide during consultations, including sleep habits, lifestyle factors, and health-related context you choose to share.
Technical data: IP address, browser type, device type, pages visited, and session duration, collected via cookies and server logs.
Communication records: records of correspondence between you and our team.

We do not collect special category data (such as medical records) unless you voluntarily share it in the course of a consultation. In such cases, we treat it with the highest level of care and confidentiality.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to enquiries submitted via the contact form.
To deliver consultation services you have booked.
To send appointment confirmations, reminders, and follow-up communications.
To maintain consultation records and provide continuity of service.
To improve our website and services through analysis of aggregated usage data.
To comply with applicable legal and regulatory obligations.

We do not use your data for automated decision-making or profiling. We do not send unsolicited marketing communications without your explicit consent.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract: where processing is necessary to deliver consultation services you have requested.
Legitimate interests: to respond to general enquiries and to improve our services, where this is balanced against your rights.
Consent: where you have given explicit consent, for example by ticking the consent checkbox on our contact form or accepting cookies.
Legal obligation: where we are required to process data to comply with UK law.

We do not sell, rent, or trade your personal data to any third party. We may share data in the following limited circumstances:

Service providers: trusted third parties who assist us in operating our website or delivering services (e.g., hosting providers, email services), bound by data processing agreements.
Legal requirements: where disclosure is required by law, court order, or regulatory authority.
Business transfers: in the event of a merger or acquisition, personal data may be transferred as part of that process, subject to equivalent privacy protections.

All third-party service providers we engage are required to process your data only on our instructions and in accordance with applicable data protection law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Contact form enquiries: up to 24 months unless a consultation relationship is established.
Consultation records: up to 7 years from the date of the last session, in accordance with standard professional practice.
Technical/analytics data: up to 26 months in anonymised or aggregated form.

When data is no longer required, we securely delete or anonymise it.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to request that we limit how we process your data.
Right to data portability: to receive your data in a structured, commonly used format.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 10. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies. Please see our Cookies Policy for full details of the cookies we use, their purpose, and how to manage your preferences.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.

While we take reasonable steps to protect your information, no transmission over the internet is completely secure. We cannot guarantee absolute security but will notify you and the relevant authorities in the event of a data breach as required by law.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Address: 137 Harley St, London, W1G 6BF, United Kingdom
Phone: +44 20 7725 0523
Email: reach-us@viphnorenrax.world

This policy may be updated from time to time. The current version is always available on this page with the date of the most recent revision.