Privacy Policy
Last updated: 1 October 2026
Harmony ("we", "our", or "us") operates this website (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our website.
1. Information We Collect
We may collect the following types of information:
- Account Data: your name, email address, age confirmation, encrypted password credentials, account preferences, and information you voluntarily submit.
- Automatically Collected Data: IP address, browser type, device information, pages visited, and time spent on the website.
- Cookies and Tracking: we use cookies and similar technologies to improve user experience and analyze traffic.
2. How We Use Your Information
We use collected data to:
- Provide and maintain our website.
- Improve user experience.
- Analyze traffic and usage.
- Ensure security and prevent abuse.
- Send essential account messages such as email verification, password recovery, and security notifications.
- Send occasional news and offers only when you have actively chosen to receive them.
3. Legal Basis (GDPR)
If you are located in the UK or EU, we process your data based on:
- Legitimate interests for website improvement and security.
- Consent for cookies and optional data submission.
- Contractual necessity and legitimate interests for account security and essential service messages.
4. Cookies Policy
We use cookies to:
- Store preferences.
- Remember an adult visitor's 18+ confirmation for up to one year.
- Analyze traffic using analytics tools.
- Improve performance.
Essential cookies operate without optional consent because they are needed for security, account access and the 18+ confirmation. Analytics starts only after you select "Accept analytics". You can reject non-essential cookies just as easily and change your choice at any time through the Cookie settings control.
5. Third-Party Services
Our website may contain links to third-party platforms such as social media or content platforms. We are not responsible for the privacy practices of these external websites.
6. Data Sharing
We do not sell your personal data.
We may share data only:
- With service providers such as hosting or analytics providers.
- With an email delivery provider only when needed to send account messages or, after your consent, optional marketing communications.
- If required by law.
7. Data Retention
We apply the following standard retention periods. We may keep specific records longer where required by law, needed to establish or defend legal claims, or necessary to investigate fraud or security incidents. When a period ends, data is deleted or irreversibly anonymised.
| Data category | Standard retention period | Purpose |
|---|---|---|
| Account and profile data | While the account is active, then up to 12 months after closure | Operate the account, handle restoration requests and resolve disputes |
| Authentication sessions | Until expiry, logout or password reset; returning-device preference up to 6 months | Secure sign-in and account continuity |
| Email verification and password-reset tokens | 48 hours and 6 hours respectively; used or expired records removed within 30 days | Verify ownership and restore access |
| Security and technical logs | Up to 90 days | Detect abuse, diagnose faults and protect the Service |
| Age confirmation cookie | Up to 12 months | Remember the visitor's 18+ confirmation |
| Cookie consent choice | Up to 12 months, or until the choice is changed | Remember whether analytics is permitted |
| Analytics and usage records | Up to 12 months from collection | Understand use and improve the Service; collected only after consent |
| Support, complaint, privacy and copyright correspondence | Up to 24 months after the matter is closed | Respond to requests and maintain an accountable record |
| Marketing consent record | While consent is active and up to 24 months after withdrawal | Respect the current preference and demonstrate when it changed |
| Email delivery records | Up to 90 days; no message tokens or content in delivery logs | Diagnose delivery failures and prevent abuse |
8. Your Rights (UK GDPR)
You have the right to:
- Access your data.
- Request correction or deletion.
- Withdraw consent.
- Change your marketing preference at any time in your account settings.
- File a complaint with a data protection authority.
9. Security
We implement appropriate technical and organizational measures to protect your data. However, no system is 100% secure.
10. Age Restriction
This website is intended for individuals aged 18 and over. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page.
12. Contact Us
If you have any questions about this Privacy Policy, you can contact us at:
- Email: discoverharmonyofficial@gmail.com
- Website: https://www.harmonymodels.com