At Men's Comfort Guide, we believe privacy is a fundamental right. We design our informational platform to minimise data collection, protect visitor anonymity, and avoid holding sensitive health data on remote web servers.
1. Who We Are (Data Controller)
For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller for this website is Men's Comfort Guide [Verified publisher details and registered UK office to be completed prior to formal public launch]. If you have questions regarding this policy, contact our Data Protection Lead via our Contact Page.
2. What Information We Process
We process very limited categories of information:
- Interactive Tool Data (Local Only): Any records you enter into our Sleep Diary, Routine Planner, or Guidance Assessment are processed and stored exclusively inside your web browser's local storage (HTML5 localStorage). We do not transmit, view, or store this data on our servers. You can clear this data at any time via the tool's clear button or by resetting your browser cookies.
- Contact Enquiries: If you voluntarily contact us via our contact form, we collect your name, email address, and message text to respond to your enquiry. Legal basis: Legitimate interests (Art. 6(1)(f) UK GDPR).
- Server Log Data: Like all web servers, our hosting provider automatically logs anonymous technical connection requests, including IP address, browser user-agent, operating system, and access timestamp, for cybersecurity and system stability. Legal basis: Legitimate interests (Art. 6(1)(f) UK GDPR).
3. Cookies and Tracking Technologies
We do not use invasive tracking pixels or fingerprinting technologies. Essential cookies necessary for core website functioning are set automatically. Optional analytical cookies require your explicit consent via our cookie banner in compliance with PECR. For full details, review our Cookie Policy.
4. Data Retention
General contact communications are retained for a maximum of 12 months for correspondence records, after which they are securely deleted. Server security logs are retained for 30 days and automatically overwritten.
5. Your Rights Under UK GDPR
Under UK data protection law, you have enforceable rights, including:
- The right of access: Request a copy of personal information we hold about you.
- The right to rectification: Request correction of inaccurate information.
- The right to erasure: Request deletion of your personal data ('right to be forgotten').
- The right to object: Object to processing based on legitimate interests.
You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.
6. International Data Transfers
Our hosting infrastructure is located within the United Kingdom and the European Economic Area (EEA). If data is ever transferred outside these jurisdictions, appropriate safeguards (such as UK International Data Transfer Agreements or adequacy regulations) are applied.