Privacy Policy & Cookie Usage

What Are Cookies?

Cookies are small text files that are stored on your device when you visit websites. They help websites remember your preferences and improve your browsing experience.

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly
• Analytics Cookies: Help us understand how visitors interact with our website
• Preference Cookies: Remember your preferences and settings

Third-Party Cookies

We use Matomo Analytics (self-hosted) for website analytics to improve our services. We do not use any external tracking services or advertising cookies.

Managing Cookies

You can control and/or delete cookies as you wish. You can delete all cookies that are already on your device and you can set most browsers to prevent them from being placed. However, if you do this, you may have to manually adjust some preferences every time you visit a site and some services may not function properly.

Purpose of Geolocation

We collect geolocation data for the following purposes:

• Server protection and security
• Know Your Customer (KYC) compliance
• Ensuring users are accessing services from expected locations
• Improving our service delivery

Data Collection Method

Geolocation data is collected through Nginx server headers, including:

• Country Code and Name
• City and Region
• Latitude and Longitude
• Autonomous System Number (ASN)
• Organization Information

Transparency

We make no secret of our geolocation practices. This data collection is transparent and is used solely for the protection of our services and compliance purposes. We do not sell or share this data with third parties.

Encryption

All personal data is stored encrypted at rest using industry-standard encryption methods. Data transmission is secured using HTTPS/TLS encryption.

Data Usage

We use your data solely for providing our services and improving user experience. We never sell, rent, or share your personal information with third parties for marketing purposes.

Retention Policy

We retain your data only for as long as necessary to provide our services or as required by law. You may request deletion of your data at any time through our support channels.

Compliance

We comply with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to protecting your privacy rights.

Modern Web Technologies

Our website is built using modern web technologies including:

• Node.js for server-side processing
• TypeScript for type-safe development
• React for user interfaces
• MySQL for database storage

Security Practices

While we use modern technologies, we take care to ensure that implementation details that could be exploited by malicious actors are not publicly disclosed. Our security is based on best practices, regular updates, and comprehensive testing rather than obscurity.

Under UK GDPR, you have the right to:

• Request access to your personal data
• Request correction of your personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data
• Withdraw consent at any time

Contact Information

If you have any questions about this privacy policy or your data rights, please contact us at:

privacy@breathtechnology.co.uk