Privacy Policy

1. Introduction

Welcome to The IDEST Worldwide Limited website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our site. By using this website, you agree to the collection and use of information in accordance with this Privacy Policy.

Controller: IDEST Worldwide Limited is the data controller for the purposes of applicable data protection laws.

2. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Consent: For marketing communications and optional features
  • Contract performance: To provide our services and user account management
  • Legitimate interests: To improve our services and prevent fraud
  • Legal obligation: To comply with applicable laws and regulations

3. Information We Collect

Personal Data

  • Account Information: Email address, username, and profile preferences
  • Usage Data: How you interact with our services
  • Payment Information: Processed through an external processor (Stripe) – we do not store payment details
  • Comments: When visitors leave comments on the site, we collect the data shown in the comments form, and the visitor’s IP address and browser user agent string to help spam detection.
  • Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Other visitors to the website can download and extract any location data from images on the website.
  • Cookies: If you leave a comment on our site, you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. Other cookies which contain no personal data are used as necessary.

4. How We Use Your Information

We use your personal data to:

  • Communicate with you about your account, updates, and customer support
  • Process payments and manage subscriptions
  • Comply with legal obligations and prevent fraud
  • Conduct analytics to improve our services (using anonymized data where possible)

5. Information Sharing and Third Parties

We do not sell your personal information. We only share your information under specific circumstances

  • Legal Requirements: When required by law, court order, or to protect our rights
  • Password Reset: If you request a password reset, your IP address will be included in the reset email.
  • With Your Consent: For any other purpose with your explicit consent

International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We ensure adequate protection through reasonable safeguards such as using reputable third-party service providers i.e. host (Ionos), payment processor (Stripe) etc.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

  • Account Data: Until you delete your account, plus 30 days for backup purposes
  • Usage Analytics: Anonymized data may be retained indefinitely for service improvement
  • Legal Requirements: Some data may be retained longer to comply with legal obligations
  • Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
  • Registration: For users that register on our website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data:

  • Encryption of data in transit and at rest
  • Regular security assessments and monitoring
  • Access controls
  • Secure third-party service providers

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights (GDPR & Data Protection)

Under applicable data protection laws, you have the following rights:

  • Access: Request access to your personal data
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data (“right to be forgotten”)
  • Restriction: Request restriction of processing under certain circumstances
  • Data Portability: Request a copy of your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for consent-based processing
  • Lodge Complaints: File complaints with your local data protection authority

To exercise these rights:

We will respond to your request within 30 days and may request verification of your identity before processing.

9. Children’s Privacy (COPPA Compliance)

Our service is not intended for children or young adults under 18 years of age. We do not knowingly collect personal information from children or young adults under 18.

If we become aware that we have collected personal data from a child or young adults under 18 without parental consent, we will:

  • Immediately delete the child or young adult’s account and all associated data
  • Not use the data for any purpose
  • Not disclose the data to third parties
  • Notify the parents if contact information is available

Parents: If you believe your child has provided us with personal data, please contact us immediately at admin@idest.co.uk so we can delete the information.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

  • Posting the updated policy on this page
  • Updating the “Last updated” date

Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

  • Data Protection Officer: admin@idest.co.uk
  • Postal Address: c/o The Bower, Parsonage Road, Newton Ferrers, S. Devon, PL8 1AT, United Kingdom

[Last updated: 8 March, 2022]