Privacy Policy

This policy explains what Breath Wellness collects when you visit breathwellness.life, why we collect it, and what you can ask us to do with it. It is written to be read rather than skimmed.

Who we are

Breath Wellness is an independent editorial publication. For the purposes of the UK GDPR and the EU GDPR, we are the data controller for the small amount of personal data described here. Our contact address for privacy matters is [email protected].

We do not operate a user account system, we do not sell products, and we do not run advertising networks on this site.

What we collect

We collect two categories of information, and very little of either.

Information you give us

• Newsletter subscriptions. If you subscribe, we store your email address, the date of consent, and the IP address used at the point of sign-up as proof of consent.
• Messages. If you use the contact form or email us, we receive your name, email address and the content of your message.

Information collected automatically

• Server logs. Our hosting provider records standard request data: IP address, browser type, referring page, and the time of the request. These logs are retained for 30 days for security and troubleshooting.
• Aggregate analytics. We use a privacy-respecting analytics service that does not set cookies and does not build profiles. It records page views, referrers and country-level location in aggregate.

Cookies and similar technologies

This site does not set advertising or tracking cookies. A small number of strictly necessary cookies may be set by our hosting provider for security and load balancing; these do not identify you and cannot be disabled without breaking the site.

If we introduce analytics that requires consent, we will ask for it before any such cookie is set, and refusing will not limit your access to any article.

Why we process it

• Legitimate interest in keeping the site secure, understanding which essays are read, and improving the publication.
• Consent for the newsletter, which you may withdraw at any time using the unsubscribe link in every email.
• Legal obligation where we are required to retain records, for example in response to a valid legal request.

Who we share it with

We share data with a small number of service providers who process it on our behalf: our hosting provider, our email delivery provider, and our analytics provider. Each is bound by a data processing agreement and may not use your data for its own purposes.

We do not sell personal data. We do not share it with advertisers, data brokers or social networks. We may disclose information if required by law or to protect the rights and safety of our readers, but we will say so in this policy if that ever happens.

How long we keep it

• Newsletter records: until you unsubscribe, plus 30 days to process the request.
• Contact messages: 24 months, so we can follow up on corrections.
• Server logs: 30 days.
• Aggregate analytics: retained indefinitely, but never in a form that identifies a person.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive it in a portable format. You may also withdraw consent to the newsletter at any time.

To exercise any of these rights, write to [email protected]. We respond within 30 days and will not charge a fee for a reasonable request. If you are in the UK or EU and are unhappy with our response, you may complain to your local supervisory authority.

Children

This site is written for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted information, contact us and we will delete it.

International transfers

Our service providers may process data outside the UK and the European Economic Area. Where they do, transfers rely on standard contractual clauses or an equivalent safeguard recognised under applicable law.

Security

The site is served over HTTPS. Access to subscriber data is limited to two people, protected by multi-factor authentication. No system is perfectly secure, but we keep the amount of data we hold small precisely because that is the most effective protection available.

Changes to this policy

If we change how we handle personal data, we will update this page and revise the date below. Material changes affecting newsletter subscribers will be announced in the newsletter itself.

Contact

Questions about this policy can be sent to [email protected] or by post to the editorial address listed on our contact page.