Data Protection
At SoberWay we take the protection of personal data seriously and are committed to ensuring that all information we process is handled securely, transparently, and in accordance with the General Data Protection Regulation (GDPR) of the European Union.
1. Data Collection
We collect personal data only when necessary to provide our services effectively. The types of data we may collect include:
-
Name and contact information (email, phone number, address)
-
Account and login details
-
Payment information
-
Usage data from our services, including technical information about devices and browsers
-
Any other data voluntarily provided by users
We ensure that all personal data is collected lawfully, fairly, and for specific purposes. Users are informed about the data collection and its intended use before providing any information.
2. Legal Basis for Processing
Under the GDPR, we process personal data based on one or more of the following legal grounds:
-
Consent: When the user has explicitly agreed to the processing of their personal data.
-
Contractual necessity: To provide or improve our services.
-
Legal obligation: To comply with applicable laws and regulations.
-
Legitimate interests: To maintain and protect our services and users’ rights, provided these interests are not overridden by the rights of the individual.
3. Data Use and Storage
Personal data is used exclusively for the purposes specified at the time of collection, which may include:
-
Delivering our products and services
-
Responding to inquiries and support requests
-
Improving our services and user experience
-
Complying with legal and regulatory requirements
We store personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once the retention period expires, data is securely deleted or anonymized.
4. Data Security
We implement strict technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
-
Secure servers and encryption of sensitive data
-
Access controls and authentication protocols
-
Regular monitoring and auditing of our systems
-
Employee training on data protection and confidentiality
5. Data Sharing and Third Parties
We do not sell, rent, or trade personal data. Personal information may be shared with trusted third-party service providers only when necessary to provide our services, under strict contractual agreements to ensure compliance with GDPR. These providers are carefully vetted and obligated to maintain the confidentiality and security of data.
6. Rights of Data Subjects
Individuals have the following rights under GDPR:
-
Access: The right to request access to personal data we hold.
-
Rectification: The right to correct inaccurate or incomplete data.
-
Erasure: The right to request deletion of personal data.
-
Restriction of processing: The right to limit how we process personal data.
-
Data portability: The right to receive personal data in a structured, machine-readable format.
-
Objection: The right to object to certain types of processing, including direct marketing.
-
Withdraw consent: The right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
Requests to exercise any of these rights can be submitted via soberwayuk@gmail.com
7. Cookies and Tracking Technologies
Our website may use cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and personalize content. Users can manage or disable cookies through their browser settings. For detailed information, please refer to our Cookie Policy.
8. Updates to this Policy
We may update this Data Protection Policy from time to time to reflect changes in legal requirements, business practices, or technological developments. Updates will be communicated on our website, and the date of the latest revision will be clearly indicated.
9. Contact Information
For any questions regarding these Terms, please contact us:
-
+44 07900 446389