Last Updated: 6th March 2025

1. Data Protection & Compliance

We adhere to the principles of the Data Protection Act 2018 and the UK GDPR when processing personal data collected from customers and visitors to our website.

2. Data We Collect & Purpose of Processing

We only collect and process personal data that is necessary to provide our services efficiently. This may include information related to purchases, support, and platform usage, processed under Article 6(1)(b) UK GDPR (contractual necessity). We do not request or use more data than required.

3. Data Processing & Storage

• Personal data is used solely for the purposes outlined in this policy.
• Data is stored securely and retained only for as long as necessary to fulfil its intended purpose.
• Once no longer required, data is securely deleted.

4. Payment Processing

All payment transactions are processed through trusted PCI-DSS-compliant third-party payment providers. Neurowaze does not store or have access to your card details. Under Article 6(1)(c) UK GDPR, we retain transaction data for tax and VAT compliance.

5. Data Transfers & International Storage

To ensure service continuity, some customer and email subscription data may be stored with third-party providers, including those located outside the UK or EEA. Where this occurs, we implement safeguards such as Standard Contractual Clauses (SCCs) or equivalent measures to protect your data.

6. Your Rights & Data Access

Under UK GDPR, you have the right to:

• Request a copy of the personal data we hold about you.
• Request correction or deletion of your personal data (Right to Erasure).
• Withdraw consent for marketing communications at any time.

Please note that deleting certain data may affect our ability to provide support for past purchases or services.

7. Marketing & Email Communications

• We send marketing communications only to users who have explicitly opted in, in compliance with Article 6(1)(a) UK GDPR.
• Every email contains an unsubscribe option for easy opt-out.

8. Data Security & Protection

Neurowaze implements robust security measures to protect your personal data from unauthorised access, alteration, or loss.

9. Data Sharing & Third Parties

• We do not sell, rent, or trade personal data with third parties.
• Data is only shared with trusted partners when explicit user consent is provided, ensuring full compliance with UK GDPR.

10. Spam Policy

In compliance with the Privacy and Electronic Communications (EC Directive) Regulations 2003, Neurowaze does not send unsolicited bulk emails (spam).

11. Cookies & Tracking Technologies

Our website uses cookies for essential functions. Non-essential cookies (e.g., analytics, tracking) require explicit user consent.

We use the following types of cookies:

• Essential Cookies: Required for the website to function properly.
• Analytics Cookies: Used to analyse site performance and visitor interactions.
• Advertising Cookies: Used for personalised advertising and remarketing.

Users can adjust or revoke their cookie preferences through via browser settings.

12. Use of Google reCAPTCHA

Neurowaze uses Google reCAPTCHA to enhance security and prevent spam and automated abuse. This service is provided by Google LLC and helps verify that interactions on our site are performed by human users.

12.1 How Google reCAPTCHA Works

Google reCAPTCHA analyses visitor behaviour to determine whether a user is human. This may include:

• Tracking mouse movements, keystrokes, and user interactions.
• Collecting device and browser information, including IP address, language settings, and installed plugins.
• Using cookies and tracking technologies set by Google.

The reCAPTCHA service runs in the background and processes this data to provide a risk score, helping prevent fraudulent activity.

12.2 Data Processing & Storage

The data collected by Google reCAPTCHA is processed by Google LLC, which may store data on servers outside the UK and EU, including in the United States.
This data processing is governed by Google’s Privacy Policy and Terms of Service, which you can review here:

• Google Privacy Policy
• Google Terms of Service

12.3 Legal Basis for Processing (GDPR Compliance)

Under UK GDPR and EU GDPR, the use of Google reCAPTCHA is based on our legitimate interest (Article 6(1)(f) GDPR) in:

• Preventing fraudulent activity
• Securing our website
• Ensuring a safe user experience

12.4 User Rights & Control

Since Google reCAPTCHA is a third-party service, Neurowaze does not directly access or control the collected data. However, users can:

• Manage cookie preferences via browser settings.
• Opt-out of personalised Google ads and tracking through Google My Activity.

By using our website, you acknowledge and agree to the processing of your data by Google reCAPTCHA as outlined above.

13. Contact Us

For any privacy-related questions or to exercise your data rights, please contact:

📧 Email: admin@neurowaze.health

‍