1. Introduction

Ventrica Ltd (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable US privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

For users based in California, this policy also explains your rights regarding the collection, sale, and sharing of personal data, as well as how you can exercise those rights. We ensure that our data practices align with industry best practices, evolving privacy legislation, and regulatory requirements across different jurisdictions.

2. Information we collect

We collect and process the following types of personal data:

a) Information You Provide to Us

• Identity data: First name, last name, username, and title.

• Contact data: Billing address, delivery address, email address, and telephone numbers.

• Profile data: Your username, password, purchases, preferences, feedback, and survey responses.

b) Information Collected Automatically

• Technical data: Includes IP address, login data, browser type, time zone, operating system, and other technology used to access this website.

• Usage data: Information about how you use our website, products, and services, including data collected through cookies and similar tracking technologies.

c) Information from Third Parties

• Analytics providers: Data from Google Analytics and similar services to track website engagement and performance.

Under CCPA and CPRA, California residents have the right to opt out of the sale or sharing of personal data collected through cookies and similar technologies. See our Cookie Policy for more details.

3. How we collect your personal data

We use different methods to collect data, including:

• Direct interactions: When you fill in forms, contact us, create an account, subscribe to our services, or engage with our content.

• Automated technologies: Cookies and other tracking mechanisms collect technical and usage data when you interact with our website.

• Third parties: Information from analytics providers and partners.

If you are a California resident, we are required under CPRA to provide transparency on data collection methods and allow you to request access, correction, deletion, or opt-out of data sharing.

4. How we use your personal data

We will only use your personal data in the following circumstances:

• Performance of a contract: When processing your data is necessary for fulfilling a contract.

• Legitimate interests: When processing is essential for our business operations and does not override your rights.

• Legal or regulatory obligation: When required by applicable laws.

Use of Cookies and California Compliance

In line with California’s cookie laws, the CCPA and CPRA require that we inform users if cookies collect personal data for advertising, analytics, or profiling purposes.

We use cookies to:

• Improve website functionality and user experience.

• Deliver targeted advertising.

• Analyse website traffic and usage.

California residents can opt-out of the sale or sharing of personal data through cookies. To manage your cookie preferences, refer to our Cookie Policy.

5. Your rights under the CCPA and CPRA (For California Residents)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request details about the personal data we collect, use, and share.

• Right to Delete: You can request that we delete your personal data, subject to certain exceptions.

• Right to Opt-Out: You can opt out of the sale or sharing of your personal data, including cookies used for targeted advertising.

• Right to Correct: You can request corrections to inaccurate personal data.

• Right to Limit Use of Sensitive Data: You can restrict the processing of sensitive data, such as financial or biometric data.

To exercise your rights, email us at [email protected] or visit our Do Not Sell or Share My Personal Information page.

6. Data Security

We have implemented appropriate security measures to prevent unauthorized access, data loss, or misuse of personal data. These measures comply with UK GDPR, CCPA, CPRA, and other applicable regulations.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including legal and regulatory obligations.

8. External Links Disclaimer

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

9. Governing Law and Jurisdiction

This policy is governed by the laws of England and Wales and applies to users in California and other US states where applicable privacy laws exist.

10. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our website. If significant changes are made, we will notify you as required by law.

11. Contact Us

For privacy-related queries or to exercise your CCPA/CPRA rights, contact:

• Email: [email protected]

• Phone: 01702 445860

This Privacy Policy ensures compliance with UK GDPR, the Data Protection Act 2018, CCPA, CPRA, and industry best practices.