1. Introduction

This Privacy Policy explains how G.R. Lane Health Products Ltd collects, uses, and protects your personal data when you engage with the Moments of Kalmfulness gallery. It also outlines your rights concerning the personal data we collect and how you can exercise those rights.

Please read this Privacy Policy carefully to understand how we process and protect your data in compliance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. What is Personal Data?

Under the UK GDPR, personal data refers to any information relating to an identified or identifiable individual. This may include identifiers such as your name, email, social media accounts, and IP addresses, among others.

You remain the data controller of any personal data you upload, including images for the gallery. By sharing your photograph to the Moments of Kalmfulness gallery, you grant us the right to use and publicly display the image as part of the virtual and any future physical gallery, as well as on Kalms’ social media platforms, along with any accompanying statement, your name, and linked social media accounts, without compensation, for the duration of the gallery. If you are under 18, you must have the permission of a parent or legal guardian. You may request removal at any time by emailing kalmfulness@beyondpr.com

3. About Kalms

Kalms is a brand manufactured by G.R. Lane Health Products Ltd, offering traditional herbal remedies designed to help manage stress, anxiety, sleeplessness, and exhaustion.

For questions or concerns regarding this Privacy Policy, contact us at:

G.R. Lane Health Products Ltd, Sisson Road, Gloucester, GL2 0GR, United Kingdom

Email: kalmfulness@beyondpr.com 

Alternatively, you can complete our contact form.

4. Information We May Collect

When interacting with the Moments of Kalmfulness gallery, we may collect the following types of information:

Personal Information: This includes data you voluntarily provide, such as your name, email, social media accounts, and content you upload (e.g. images, commentary).

Automatically Collected Information: This includes technical data such as your IP address, device type, cookies, and web beacons, which are used to enhance your user experience.

5. Purposes for Data Collection:

• To provide, personalise, and improve your experience at the gallery.

• To respond to your queries and provide customer support.

• To monitor and analyse visitor interaction with our website.

Exclusions:

This policy does not cover data collected offline or through third-party websites linked to our services.

6. How We Use Your Data

We use your data for the following purposes:

• To respond to queries and provide assistance.

• To personalise and improve the gallery experience.

• To monitor and improve website performance.

• To protect against fraud and security threats.

We ensure that all data-processing activities, particularly those involving sensitive data, are based on lawful grounds, including your consent, our legitimate interests, or contractual obligations.

7. Legal Basis for Processing

The legal basis on which we rely for processing your personal data include:

• Contractual Necessity: To fulfil obligations related to your participation in the gallery.

• Legitimate Interests: To protect our website, improve services, and provide security.

• Your consent: For marketing communications and certain uses of sensitive personal data.

• Legal Compliance: To comply with legal obligations or regulatory requirements.

8. Automated Decision-Making and Profiling

We do not engage in any automated decision-making processes, including profiling, that could have a legal or significant impact on you.

9. International Data Transfers

In some cases, your personal data may be transferred outside of the UK or the European Economic Area (EEA). Whenever such transfers occur, we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses (SCCs) or other legally-approved mechanisms, to protect your data and maintain compliance with UK GDPR.

10. Third-Party Sharing

We may share your personal data with the following:

• Service Providers: For website hosting, IT services, and analytics.

• Marketing Partners: With your explicit consent for marketing activities.

• Legal Authorities: Where we are legally obligated to disclose data or cooperate with regulatory bodies.

All third parties we engage with are required to comply with the UK GDPR or equivalent data protection regulations.

No Third-Party Direct Marketing Use. We will not sell or otherwise transfer the personally-identifiable information you provide to us at our websites to any third parties for their own direct marketing use unless we provide clear notice to you and obtain your explicit consent for your data to be shared in this manner.

11. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected or as required by law. Any content uploaded for the gallery will be deleted upon the conclusion of the event or when you request its removal.

12. Your Rights

Under UK GDPR, you have certain rights in respect of the information that we hold about you, including:

• The right to be informed of the ways in which we use your information, as we seek to do in this Privacy Policy.

• The right to ask us not to process your personal data for marketing purposes.

• The right to request access to the information that we hold about you.

• The right to request that we correct or rectify any information that we hold about you which is out of date or incorrect.

• In certain circumstances, the right to ask us to stop processing information about you.

• The right to lodge a complaint about us to the UK Information Commissioner’s Office (https://ico.org.uk). You will also be able to lodge a complaint with the relevant authority in your country of work or residence.

• The right to withdraw your consent for our use of your information in reliance of your consent, which you can do by contacting us using any of the details at the top of this Privacy Policy.

• The right to object to our using your information on the basis of our legitimate interests (or those of a third party) and something about your particular situation which makes you want to object to processing on this ground.

• The right to receive a copy of any information we hold about you (or request that we transfer this to another service provider) in a structured, commonly-used, machine-readable format, in certain circumstances.

• The right to ask us to limit or cease processing or erase information we hold about you in certain circumstances.

To exercise these rights, please contact us at kalmfulness@beyondpr.com Please note, to process your request, we may need the following information: 

• Specific information from you to help confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to receive it. We may also contact you to request further information in relation to your request, in order to expedite our response.

• You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We aim to respond to all legitimate requests within one month. Occasionally, it may take longer than a month if your request is particularly complex or if you have made multiple requests. In such cases, we will notify you and keep you informed of progress.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been processed unlawfully.

13. Consent and Marketing

We will only process your personal data for marketing purposes if you have provided explicit consent. You may withdraw this consent at any time by contacting us or using the "unsubscribe" link in any marketing emails.

14. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children without verifiable parental consent. If we discover such data has been collected without the necessary consent, we will promptly delete it. Parents or guardians can contact us to request the removal of their child’s data.

15. Changes to the Policy

This Privacy Policy may be updated from time to time to reflect changes in our data-processing practices or to comply with regulatory updates. Any significant changes will be communicated to you, and your continued use of our services after the changes take effect signifies your acceptance of the updated policy.

16. Legal Disclosures

We may disclose your personal data to comply with legal obligations, enforce our terms of service, or protect the rights, safety, or property of Kalms, our users, or the public. This includes cooperating with law enforcement agencies or resolving legal disputes.

17. Security Measures

We implement appropriate technical and organisational measures, such as encryption and access controls, to protect your personal data from unauthorised access, loss, or misuse. We also ensure that third parties who process data on our behalf adhere to these security standards.

18. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or your personal data, please contact us:

G.R. Lane Health Products Ltd, Sisson Road, Gloucester, GL2 0GR, United Kingdom

Email: kalmfulness@beyondpr.com 

Alternatively, you can complete our contact form

You may also lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.