Privacy Policy

Last Updated: 28th December, 2025.

Website: https://venthaven.co.uk
Controller: VentHaven (“we,” “our,” “us”)

VentHaven (“we,” “our,” or “us”) values your privacy and is committed to protecting your information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our website https://venthaven.co.uk (the “Site”), including services built with Firebase Authentication and Firebase Realtime Database.

By accessing or using the Site, you consent to the collection and processing of your information as described in this policy. If you do not agree with the terms, please do not use the Site.

---

1. Who We Are & Contact Details

VentHaven is the data controller responsible for the personal data collected on our Site.
Contact:
Email: support@venthaven.co.uk

If you have any questions about this policy or our data practices, please contact us using the details above.

---

2. Information We Collect

2.1 Anonymous Submissions

VentHaven is designed to protect your anonymity. When you submit thoughts, messages, or feedback through the Site, we do not require or collect personal information such as your name, email address, or other contact details unless you choose to provide such information.

2.2 Automatically Collected Data

When you visit the Site, some technical data is collected automatically. This may include:

• IP address and anonymised location
• Browser type and version
• Device and operating system
• Date and time of visit
• Pages viewed and time spent

This data helps us improve the Site and protect against misuse. Some of these may be regarded as personal data under UK GDPR because they can be linked to an individual user.

2.3 Optional Personal Data

If you contact us (e.g., via a contact form or email), we may collect your name and email address to respond to your inquiry.

2.4 Firebase Authentication & Realtime Database

If you log in using Firebase Auth or interact with the Site in a way that stores data in Firebase Realtime Database:

• User identifiers (Firebase UID)
• Data you explicitly submit (e.g., feedback content)
• Authentication credentials are managed by Firebase
• Firebase may process metadata such as IP address and user agent for security, as described in their documentation.

---

3. How We Use the Information

We use information we collect for the following purposes:

• To operate and improve the Site
• To authenticate users via Firebase
• To provide, maintain, and protect the integrity of the Site
• To monitor and prevent abuse, spam, or inappropriate content
• To respond to your requests when you provide contact information
• To analyse usage patterns and trends

Lawful Bases for Processing Personal Data under UK GDPR:

• Legitimate Interests: improving and securing the Site
• Performance of a Contract: where you choose to log in or interact with Firebase services
• Consent: where you voluntarily provide contact information for communication purposes

We do not sell, rent, or trade your personal information.

---

4. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Remember basic site preferences
• Improve performance and analytics
• Detect and prevent misuse

You can control cookie settings via your browser. Disabling cookies may affect Site functionality. We may use third-party analytics, which will collect anonymous usage data.

---

5. Data Sharing and Third Parties

We do not share personal information with third parties except:

• Service providers (e.g., Firebase, hosting providers, analytics tools)
• To comply with legal obligations
• To protect rights, safety, or property

We have contracts with third parties to ensure they process data only as instructed and in accordance with applicable laws.

Firebase as a Processor:
When you use services like Firebase Auth and Realtime Database, Google processes personal data on our behalf under its data processing terms. Firebase encrypts data in transit and at rest and maintains security controls.

---

6. Data Retention

We retain personal data only as long as necessary to fulfil the purposes described above, including:

• Contact information (12 months)
• Anonymous usage data (as needed for analytics and security)
• Firebase Auth and stored content as long as your account remains active

After such periods, data is securely deleted or anonymised.

---

7. Security Measures

We use reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. However, no online service is completely secure.

---

8. Children’s Privacy

The Site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us and we will delete it.

---

9. International Data Transfers

Some processing (e.g., Firebase) may involve transferring data outside the UK. Where this occurs, appropriate safeguards such as UK-approved transfer mechanisms are used as required by law.

---

10. Your Rights (UK GDPR)

Under the UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time (where applicable)
• Data portability

To exercise any of these rights, contact us at support@venthaven.co.uk. If you have concerns about our handling of your personal data, you can lodge a complaint with the UK Information Commissioner’s Office (ICO).

---

11. Changes to This Policy

We may update this Privacy Policy periodically. We will post the updated policy with a revised “Last Updated” date. Continued use of the Site after changes means you accept the updated policy.

---

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your information, contact us at:

📧 Email: support@venthaven.co.uk
🌐 Website: https://venthaven.co.uk