Legal
Privacy Policy
Last updated: 21 May 2026
1. Who we are
Vagus Reset ("we", "us", "our") operates the website vagusreset.co and is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us at hello@vagusreset.co.
2. What personal data we collect
- Newsletter sign-ups: your email address (and, optionally, your name).
- Purchases: name, email address, billing country, and transactional details collected by our payment processor, Stripe. We do not store full payment card details.
- Correspondence: the content of any emails you send us.
- Technical data: IP address, browser type, and basic usage data via essential cookies and standard server logs.
3. How we use your data and our lawful basis
- To fulfil orders and provide the ebooks you have purchased — lawful basis: performance of a contract.
- To send you the newsletter and related marketing — lawful basis: consent, which you give when you sign up and can withdraw at any time.
- To run, secure, and improve the website — lawful basis: legitimate interests in operating our business.
- To comply with legal obligations, including tax and accounting — lawful basis: legal obligation.
4. Marketing and unsubscribing
You can withdraw consent for marketing emails at any time by clicking the unsubscribe link in any email we send, or by emailing hello@vagusreset.co. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
5. Cookies
We use only essential cookies required for the site to function. We do not use third-party advertising or tracking cookies. If this changes, we will update this policy and ask for your consent where required.
6. Third parties we share data with
- Stripe — payment processing.
- Email service provider — to send newsletters and order emails. (Specific provider to be confirmed; this page will be updated accordingly.)
- Hosting provider — to deliver the website to your browser.
We only share what is necessary, and each provider is bound by its own data protection obligations.
7. International transfers
Some of our providers are based outside the United Kingdom. Where this is the case, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
8. How long we keep your data
We keep newsletter data for as long as you remain subscribed. We keep order and transactional records for at least six years to meet UK tax and accounting requirements. Other data is kept only as long as needed for the purpose it was collected.
9. Security
We take reasonable technical and organisational measures to protect your personal data. No system is perfectly secure, so we cannot guarantee absolute security, but we work to minimise risk.
10. Your rights under UK GDPR
You have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data ("right to be forgotten");
- restrict or object to certain processing;
- request data portability;
- withdraw consent at any time where consent is the lawful basis.
To exercise any of these rights, email hello@vagusreset.co. We will respond within one month.
11. Complaints
If you are unhappy with how we have handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
12. Changes to this policy
We may update this policy from time to time. The latest version will always appear on this page with the "Last updated" date above.