1. Data Controller Information
The data controller responsible for your personal information is:
Enerrrflushingux
170 O'Farrell St
San Francisco, CA 94102
United States
Phone: +1 415-397-3333
Email: hello@enerrrflushingux.world
Website: https://enerrrflushingux.world
For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us using the details above. We will respond to all legitimate requests within the timeframes required by applicable law, typically within 30 days of receipt.
2. Scope and Applicability
This Privacy Policy applies to all personal data collected through the Enerrrflushingux website (enerrrflushingux.world), including data submitted via our contact form, collected through cookies and similar technologies, and obtained during consulting engagements related to evening habit selection guidance.
This policy does not apply to third-party websites that may be linked from our pages. We encourage you to review the privacy policies of any external sites you visit. Our website provides general informational content on evening habit selection and does not constitute medical advice or clinical services.
3. Categories of Personal Data We Collect
3.1 Data You Provide Directly
When you contact us or engage with our services, we may collect the following categories of personal data:
- Identity data: your full name as provided in contact forms or correspondence
- Contact data: email address, telephone number, and postal address
- Communication data: the content of messages, inquiries, and correspondence you send to us
- Consent records: documentation of your agreement to data processing, including GDPR consent checkboxes submitted through our contact form
- Consulting data: information about your evening routines, schedule preferences, and habit selection goals shared during consulting sessions
3.2 Data Collected Automatically
When you visit our website, certain technical data may be collected automatically through cookies and similar technologies, subject to your consent preferences:
- Device data: browser type and version, operating system, device type, and screen resolution
- Usage data: pages visited, time spent on pages, navigation paths, and referral sources
- Network data: IP address (which may be anonymized), approximate geographic location derived from IP, and internet service provider
- Cookie data: preferences stored through our cookie consent mechanism, including your choices regarding analytics and marketing cookies
3.3 Data We Do Not Collect
We do not intentionally collect special categories of personal data as defined under GDPR Article 9, including data concerning health conditions, racial or ethnic origin, political opinions, religious beliefs, or biometric data. Our services focus on general evening habit selection guidance and do not require or request medical information.
4. Purposes and Legal Bases for Processing
We process your personal data only when we have a valid legal basis to do so. The following table outlines our processing activities:
4.1 Responding to Inquiries
Purpose: To receive, process, and respond to messages submitted through our contact form or sent via email and telephone.
Legal basis: Legitimate interest in operating our consulting business and responding to prospective clients (GDPR Article 6(1)(f)); consent where you have explicitly agreed to data processing via our contact form checkbox (GDPR Article 6(1)(a)).
Data used: Name, email, message content, consent records.
4.2 Providing Consulting Services
Purpose: To deliver evening habit selection consulting, prepare personalized plan documents, and conduct follow-up review sessions.
Legal basis: Performance of a contract or steps prior to entering a contract (GDPR Article 6(1)(b)); consent for any processing beyond what is necessary for service delivery.
Data used: Identity data, contact data, consulting data, communication records.
4.3 Website Analytics and Improvement
Purpose: To understand how visitors use our website, identify popular content, and improve user experience and site performance.
Legal basis: Consent for analytics cookies (GDPR Article 6(1)(a)); legitimate interest in maintaining a functional website for essential technical cookies.
Data used: Usage data, device data, anonymized IP addresses.
4.4 Marketing Communications
Purpose: To send informational updates about our evening habit selection resources, provided you have opted in to marketing communications.
Legal basis: Consent (GDPR Article 6(1)(a)). You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Data used: Contact data, communication preferences.
4.5 Legal Compliance and Security
Purpose: To comply with legal obligations, protect against fraud, maintain website security, and establish or defend legal claims.
Legal basis: Legal obligation (GDPR Article 6(1)(c)); legitimate interest in protecting our business and users (GDPR Article 6(1)(f)).
Data used: All categories as necessary for the specific compliance or security purpose.
5. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.
- Contact form submissions: Retained for 24 months from the date of submission, unless an ongoing consulting relationship extends this period.
- Consulting session records: Retained for 36 months from the conclusion of the consulting engagement, or longer if required for contractual dispute resolution.
- Cookie consent preferences: Stored locally on your device until you clear browser data or change your preferences.
- Analytics data: Aggregated and anonymized data may be retained indefinitely; identifiable analytics data is retained for a maximum of 26 months.
- Marketing consent records: Retained for the duration of your subscription plus 12 months after withdrawal of consent.
- Legal and compliance records: Retained for the period required by applicable law, typically 7 years for financial and contractual records.
When retention periods expire, personal data is securely deleted or anonymized so that it can no longer be associated with you. Anonymized data may be retained for statistical and analytical purposes without further notice.
6. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share data with the following categories of recipients under strict contractual safeguards:
- Hosting and infrastructure providers: Companies that host our website and store data on secure servers located within the United States and, where applicable, the European Economic Area.
- Analytics service providers: Third-party analytics tools used to measure website performance, activated only with your consent for analytics cookies.
- Communication tools: Email service providers used to send responses to your inquiries and deliver consulting materials.
- Professional advisors: Legal, accounting, or compliance consultants who assist us in meeting our regulatory obligations, bound by confidentiality agreements.
- Law enforcement and regulatory authorities: When required by law, court order, or governmental regulation, or when necessary to protect our legal rights.
All third-party processors are required to process personal data only on our documented instructions, implement appropriate security measures, and comply with applicable data protection laws. We maintain a record of processing activities as required under GDPR Article 30.
7. International Data Transfers
Enerrrflushingux is based in the United States. If you access our website from the European Economic Area, United Kingdom, or other regions with data protection laws, your personal data may be transferred to and processed in the United States.
Where personal data is transferred outside the EEA or UK to countries not deemed to provide an adequate level of data protection, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all third-party processors
- Technical measures such as encryption in transit and at rest
- Organizational measures including access controls and staff training on data protection
You may request a copy of the safeguards we have implemented by contacting us at the address provided in Section 1.
8. Security Measures
We implement technical and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers
- Secure server infrastructure with firewalls and intrusion detection systems
- Access controls limiting personal data access to authorized personnel on a need-to-know basis
- Regular security assessments and vulnerability monitoring
- Employee training on data protection practices and incident response procedures
- Encrypted storage for sensitive consulting records and communication archives
- Secure deletion protocols when data retention periods expire
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but commit to notifying affected individuals and relevant supervisory authorities of data breaches within 72 hours where required by GDPR Article 33.
9. Your Rights Under GDPR and Applicable Laws
Depending on your location, you may have the following rights regarding your personal data. We will honor all valid requests without undue delay and within the statutory timeframes:
- Right of access (Article 15 GDPR): Request confirmation of whether we process your personal data and obtain a copy of that data.
- Right to rectification (Article 16 GDPR): Request correction of inaccurate or incomplete personal data.
- Right to erasure (Article 17 GDPR): Request deletion of your personal data where there is no compelling reason for continued processing.
- Right to restriction of processing (Article 18 GDPR): Request that we limit processing of your data in certain circumstances.
- Right to data portability (Article 20 GDPR): Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Right to object (Article 21 GDPR): Object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
- Right not to be subject to automated decision-making (Article 22 GDPR): We do not use automated decision-making or profiling that produces legal or similarly significant effects.
California Residents (CCPA/CPRA)
California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.
To exercise any of these rights, contact us at hello@enerrrflushingux.world or call +1 415-397-3333. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with your local data protection supervisory authority.
10. Children's Privacy
Our website and consulting services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided personal data to us should contact us immediately.
11. Cookies and Tracking Technologies
Our use of cookies and similar tracking technologies is governed by our separate Cookie Policy, which provides detailed information about the types of cookies we use, their purposes, and how to manage your preferences. We respect your cookie choices and do not deploy non-essential cookies without your explicit consent.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website. We encourage you to review this policy regularly. Continued use of our website after changes constitutes acknowledgment of the updated policy.
13. Contact and Data Protection Inquiries
For questions about this Privacy Policy, to exercise your data protection rights, or to report a concern about how we handle your personal data, please contact:
Enerrrflushingux — Privacy Team
170 O'Farrell St, San Francisco, CA 94102
Email: hello@enerrrflushingux.world
Phone: +1 415-397-3333
We aim to resolve all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to contact the relevant data protection authority in your jurisdiction.