Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. Data We Collect

We collect and process only the following personal data:

We do not collect names, phone numbers, payment information, or any other personal data beyond what is listed above.

3. How Assessment Answers Are Stored

The back pain assessment runs entirely in your browser. Your responses to assessment questions are saved using the browser's localStorage mechanism. A client-side storage technology that keeps data on your device only.

Assessment data is never sent to BackPainSecret's servers, never shared with third parties, and is not accessible to us at any point. You can clear this data at any time by clearing your browser's local storage or site data.

4. How We Use Your Email Address

If you choose to submit your email address, it is stored in Systeme.io (see Section 6), our email marketing platform. We use your email address only to send you content you requested, such as your personalised assessment summary or programme updates.

Legal basis: Processing is based on your freely given consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time by unsubscribing (link included in every email) or by contacting us at info@backpainsecret.com.

5. Cookies and Analytics

This website uses Google Analytics to understand how visitors use the site (pages viewed, session duration, general geographic region). Google Analytics uses cookies and may transfer data to Google servers, including in the United States.

We use IP anonymisation and do not pass any personally identifiable information to Google Analytics. For more information, see Google's Privacy Policy at policies.google.com/privacy.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

6. Third-Party Services

We use the following third-party services to operate this website:

• Systeme.io, email marketing and list management. Your email address is stored on Systeme.io's servers when you voluntarily submit it. Systeme.io's privacy policy: systeme.io/privacy-policy.
• Vercel, website hosting and delivery. Vercel processes server logs (including IP addresses) for security and performance purposes. Vercel's privacy policy: vercel.com/legal/privacy-policy.
• Google Analytics, website usage analytics (see Section 5 above). Google's privacy policy: policies.google.com/privacy.

7. Your Rights

Under applicable data protection law (including the GDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Withdraw consent at any time (where processing is based on consent)
• Object to processing or request restriction of processing
• Lodge a complaint with a supervisory authority

To exercise any of these rights, in particular to request deletion of your email address, please contact us at info@backpainsecret.com. We will respond within 30 days.

8. Data Retention

We retain your email address for as long as you remain subscribed to our communications. Upon unsubscribing or requesting deletion, your email address will be removed from our mailing list within a reasonable time.

Assessment answers are stored only in your browser's localStorage and are controlled entirely by you. We have no access to this data and cannot delete it on your behalf. You can remove it at any time by clearing your browser's site data.

9. Data Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. This website is served exclusively over HTTPS. Email data stored in Systeme.io is subject to their security practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

11. Contact

For any questions about this Privacy Policy or to exercise your data rights, please contact us at: info@backpainsecret.com