Privacy Policy

Last updated: 7 February 2024

This Privacy Policy explains how Thomas Kraits collects, uses, and protects your personal data when you use our services. Please read it alongside our Terms and Conditions.

1. Introduction

This policy applies to users of our services and the service owner. We are committed to protecting your privacy and handling your personal data responsibly under applicable data protection laws.

2. Definitions

  • Data: Information submitted to or collected by our service.
  • Cookies: Small text files placed on your device when you visit a website.
  • Data Protection Laws: EU Directive 96/46/EC, the General Data Protection Regulation (GDPR), and UK implementing legislation.
  • GDPR: General Data Protection Regulation (EU) 2016/679.

3. Scope

This policy covers actions taken by our service only. It does not extend to external linked sites. Thomas Kraits is the designated data controller for personal data processed through our services.

4. Data We Collect

Personal data you provide:

  • Name, date of birth, gender
  • Contact information (email addresses, phone numbers)
  • Financial information (where payments are made)

Data collected automatically:

  • De-identified IP address
  • Web browser type and version
  • Operating system
  • Referring site
  • User activity within the service

5. How We Collect Data

We collect data through:

  • Direct contact via our service, telephone, post, or email
  • Account registration
  • Survey completion
  • Competition or promotion entries
  • Payments
  • Marketing communication opt-in
  • General service usage

We also collect data automatically, including visit frequency, access times, and content interaction. Our analytics solution is cookie-free and complies with GDPR, ePrivacy, COPPA, and CCPA.

6. How We Use Your Data

  • Internal record-keeping
  • Improving our services and products
  • Delivering marketing communications (where you have consented)

7. Data Sharing

We may share your data with:

  • Group companies and affiliates
  • Employees, agents, and professional advisors
  • Third-party service providers
  • Payment processors
  • Relevant authorities (for crime detection, tax collection, or legal compliance)

8. Security Measures

We protect your data through unique username and password access, secure server storage, SSL encryption for payment details, and rapid breach response protocols. Any misuse or unauthorised access is reported immediately.

9. Data Retention

We retain personal data only as long as necessary. Backup and archival copies may persist for legal, tax, or regulatory purposes.

10. Your Rights

Under applicable data protection law, you have the right to access, correct, erase, restrict use of, and port your personal data, and to object to its processing. To exercise any of these rights, please contact us. You are responsible for maintaining the accuracy of the information you provide to us.

11. External Links

This policy does not extend to external websites or applications linked from our service. We recommend reviewing their privacy statements independently.

12. Ownership Changes

In the event of a change of ownership, personal data may be transferred to new controllers who adhere to this policy. Data may be disclosed to prospective purchasers under confidentiality obligations.

13. Policy Updates

We reserve the right to modify this policy as required by law or as our services evolve. We recommend reviewing it periodically.

14. General Terms

User rights under this policy are non-transferable. Delay in enforcing any provision does not constitute a waiver. This policy is governed by the laws of England and Wales, with exclusive jurisdiction in the courts of England and Wales.

15. Contact

For enquiries about this policy, to exercise your rights, or to withdraw consent, please use our contact form.