Privacy Policy
Last updated: 16 May 2026 · Applies in the United Kingdom · We process personal data in line with the UK General Data Protection Regulation (UK GDPR), as defined in section 3 of the Data Protection Act 2018 (“DPA 2018”) and as amended by UK law, and with the Data Protection Act 2018 (including Part 2 Chapter 2 rights and Part 3 where relevant).
1. Who we are
Vivovita.world (“we”, “us”, “our”) is the data controller for personal data processed through this website unless we tell you otherwise. We determine the purposes and means of processing.
Identity and contact details (Articles 13–14 UK GDPR):
Name / trading name: Vivovita.world
Address: bloc, 17 Marble St, Manchester M2 3AW, United Kingdom
Email: clients@vivovita.world
Phone: +44 7557 368304
Controllers who meet the threshold must pay the ICO data protection fee. You can check the public register at ico.org.uk (guidance). We keep any required registration current.
2. Supervisory authority
The UK data protection supervisory authority is the Information Commissioner’s Office (ICO):
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · Helpline 0303 123 1113 · www.ico.org.uk · Complaints: ico.org.uk/make-a-complaint.
3. Scope
This Privacy Policy describes how we collect, use, store and disclose personal data when you use https://vivovita.world/ (guides, events information, contact tools, cookies and similar technologies). It does not cover third-party websites you open via links. Our content is general lifestyle information, not regulated professional advice. We operate an information-only website: we do not sell medicines, supplements, or individual clinical services through this site.
4. Personal data we collect and sources
- Contact form: name, email address, message content, record that you gave GDPR consent, and typical technical data the request carries (for example IP address and user agent) where our systems receive them.
- Correspondence: whatever you provide by email, post or phone.
- Browsing: standard server logs (e.g. IP, requested URL, time, referrer) needed to operate and secure the service.
- Optional cookies: analytics or marketing data only with consent — see our Cookie Policy.
We do not intend to collect special category data (Article 9 UK GDPR, e.g. health). If you volunteer such details in a message, we use them only to respond and may suggest appropriate medical services; where explicit consent or another Article 9(2) condition applies, we apply appropriate safeguards.
5. Purposes and lawful bases
We only process personal data where a lawful basis in Article 6 UK GDPR applies.
| Activity | Purpose | Lawful basis |
|---|---|---|
| Replies & workshop admin | Respond to enquiries, manage RSVPs, provide requested information | Art 6(1)(b) steps at your request / Art 6(1)(f) legitimate interests in running an information service |
| Operating the website | Deliver pages, fix errors, protect against attacks | Art 6(1)(f) legitimate interests; Art 6(1)(c) legal obligation where applicable |
| Cookie / consent evidence | Store choices, demonstrate PECR / accountability compliance | Art 6(1)(c) legal obligation; Art 6(1)(f) legitimate interests |
| Optional analytics / marketing | Measure readership or run agreed marketing tests | Art 6(1)(a) consent (via banner) |
Where we rely on legitimate interests, we assess necessity and balance our interests against your rights; you may object under Article 21 UK GDPR where the law allows. We do not sell personal data.
6. Recipients and processors
We use processors (for example web hosting, email delivery, and with your consent analytics providers) under contracts that meet Article 28 UK GDPR. We may disclose personal data to law enforcement, regulators or courts when required by UK law.
7. International transfers
We prefer storage in the UK or EEA. If personal data is transferred to countries without a UK adequacy decision, we implement an approved mechanism under Chapter V UK GDPR (for example the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses) and conduct a transfer risk assessment where required. We will update this policy if our providers or locations change.
8. Retention
- Enquiries: typically up to 24 months after the last message, unless a longer period is needed for legal, regulatory or insurance reasons.
- Cookie consent records: up to 36 months from withdrawal or last update to evidence compliance.
- Security / server logs: typically 90 days rolling unless an investigation requires longer retention.
9. Security
We implement appropriate technical and organisational measures under Article 32 UK GDPR (including encryption in transit, access controls and staff confidentiality). A personal data breach that risks rights and freedoms will be reported to the ICO and, where legally required, to you (Articles 33–34 UK GDPR).
10. Your rights
Where applicable you have the right to: access (Art 15), rectification (Art 16), erasure (Art 17), restriction (Art 18), data portability (Art 20), object to processing (Art 21), not to be subject to solely automated decisions with legal effects (Art 22 — we do not conduct such processing), and to withdraw consent (Art 7(3)) where processing is consent-based.
To exercise rights, email clients@vivovita.world with “Data subject request” in the subject. We respond within one calendar month (extendable by two months in complex cases, with an explanation). We may refuse manifestly unfounded or excessive requests as permitted by the UK GDPR/DPA 2018.
You may complain to the ICO at any time (contact details in section 2). We encourage you to contact us first.
11. Children
Our site is not directed at children. We do not intend to collect personal data from anyone under 13 without parental responsibility. We follow the ICO’s Age Appropriate Design Code expectations for services likely to be accessed by children where applicable. If you believe we hold a child’s data in error, contact us for prompt review and deletion where appropriate.
12. Automated decision-making
We do not take decisions based solely on automated processing that produce legal or similarly significant effects concerning you (Article 22 UK GDPR).
13. Electronic marketing (PECR)
We send email or SMS marketing only in line with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), usually with your prior consent or under the limited soft opt-in for our own similar services where it applies. Every marketing email will include an unsubscribe or opt out route.
14. Changes
We will update this page when our practices or the law change. The date at the top shows the current version. Material changes to optional processing (e.g. new cookies) will be reflected in our cookie banner and Cookie Policy and may require fresh consent.