Legal and privacy information
Privacy Policy
This policy explains how Pain Strategies, operating the Ticked Bucket List brand, handles personal information when you use the website, tools, forms, accounts, purchases, emails or Trip Decision Review.
Many tool answers can remain in your browser. Information is sent to us or a service provider when you submit a form, create an account, purchase, apply for a service, send an email, accept optional cookies or use another feature that clearly transmits information.
Some planning answers stay on the device and browser you use.
Forms, emails, orders and service intakes are received and processed.
Analytics or marketing technologies are controlled through consent where required.
You may ask about, access, correct or delete information where the law allows.
General forms and email are not secure clinical channels. Do not send full medical records, payment-card details or unrelated sensitive information. Do not use them for urgent or emergency help.
Who is responsible
Pain Strategies operates Ticked Bucket List.
Pain Strategies operates the Ticked Bucket List website, products and services. Where Pain Strategies decides why and how personal information is processed, it acts as the data controller or equivalent responsible organisation under applicable privacy law.
Some service providers process information for Pain Strategies. Other external platforms, payment providers or public websites may act as separate controllers under their own privacy notices when you interact with them directly.
Privacy questions and requests can be sent to info@tickedbucketlist.com . Please do not include unnecessary health information or payment-card details in the first message.
Information we handle
The information depends on the feature you use.
Information you submit
This may include:
- name, email address and contact details;
- messages, support requests, feedback or complaints;
- trip dates, destination, route, bookings and planning concerns;
- accessibility, mobility, fatigue, pain or symptom context you choose to share;
- application, intake and follow-up information for an accepted service;
- files or documents you deliberately upload or send.
Browser-local tool information
Some tools save answers, notes, checklists, preferences or progress in local browser storage. That information may remain on the device and browser you use rather than being sent to Ticked Bucket List.
Clearing site data, changing devices or browsers, using private browsing or selecting a tool reset option may remove this information.
Technical and usage information
This may include:
- browser, device and operating-system information;
- pages viewed, approximate visit time and referring page;
- general location derived from network information;
- cookie or similar identifiers where enabled;
- error, security and performance logs.
Account, order and service information
This may include:
- customer-account and access information;
- product, order, payment-status, invoice and refund records;
- Trip Decision Review application, intake and delivery records;
- support history and service communications;
- marketing preferences and unsubscribe records.
We collect information from you directly in most cases. We may also receive transaction status, account details, technical information or service-delivery information from providers used to run the website or fulfil your request.
Why we use information
We use information for a defined service, operating or legal purpose.
Purposes may include:
- providing the page, tool, download, account, purchase or service you request;
- responding to enquiries, support requests, privacy requests or complaints;
- processing applications, confirming service scope and delivering Trip Decision Review;
- providing Starter Kit access and purchase support;
- sending receipts, access messages, service communications and policy notices;
- operating, securing, debugging and improving the website and workflows;
- measuring visits, content use and advertising performance where permitted;
- preventing fraud, misuse, spam and security incidents;
- meeting accounting, tax, record-keeping and legal obligations;
- establishing, exercising or defending legal claims.
Depending on the processing and the law that applies, the legal basis may be consent, steps taken at your request, performance of a contract, compliance with a legal obligation or a legitimate interest that does not override your rights.
Where sensitive information, including health-related context, needs a separate or explicit legal basis, we will use one that is available under applicable law and provide any required notice or consent step.
Tools, accounts and cookies
Browser storage, account access and submitted data are different.
Use the feature-specific notice as the immediate guide when it gives more detail about what is stored or sent.
Free tools and planning inputs
Many current tools can store answers or progress in your browser. Ticked Bucket List does not automatically receive browser-local answers merely because you use the tool. Information may be sent if you deliberately submit, email, upload, sync or share it through a transmitting feature.
Starter Kit
Customer-account and purchase information may be held by the commerce or account provider so access can be supplied. Trip answers or progress stored in your browser are separate from account access and are not necessarily synced between devices.
Trip Decision Review
Application, intake, files, communications and the information needed to review one accepted trip are received and processed to assess scope, provide the service, answer the permitted follow-up, maintain records and handle a complaint or dispute.
Forms, email and downloads
Information is transmitted when you submit a form, send an email, request a gated download, join a mailing list or contact support. A form-specific notice or checkbox may add information about that processing.
Cookies and similar technologies
The website may use:
- essential technologies needed to run, secure and deliver the site;
- functional storage for preferences and saved tool progress;
- optional analytics technologies to understand visits and improve the site;
- optional marketing technologies to measure or improve advertising.
Where consent is required, optional analytics and marketing technologies should not be activated until you make a choice. You can accept, decline or manage available categories through the cookie controls and can also use browser settings to clear or block storage.
Blocking or clearing storage may remove saved progress, preferences or account-session information. It does not delete information already submitted to us or a provider.
Providers and transfers
We use service providers to operate and deliver the service.
Provider categories may include website hosting, customer accounts, forms, email delivery, file storage, payments, analytics, marketing, scheduling, customer support, security, professional advisers and other infrastructure needed for the requested service.
A provider should receive only the information needed for its role and should process it under an appropriate contract or its applicable terms. Some providers act only on our instructions. Others, including certain payment or external-platform providers, may determine parts of their own processing.
Payments
A payment provider processes payment credentials and the information needed to complete the transaction. Pain Strategies may receive customer, transaction, status, amount, invoice, receipt, refund and support information needed to fulfil and account for the purchase. The exact fields visible depend on the provider and payment method.
International processing
Providers and technical systems may process or store information outside Kenya or outside your country. Where the law requires it, we must use a recognised transfer basis, appropriate safeguards or consent and provide relevant information about the transfer.
External links
When you visit an airline, hotel, insurer, social platform, payment page, regulator or other external site, that organisation processes information under its own privacy notice. This policy does not control an external organisation's independent processing.
Sensitive information and AI
Health-related context receives additional care.
Health and accessibility context
Pain, fatigue, symptoms, mobility, sensory needs, medication context and similar information may be sensitive personal data. Share only what is relevant to the form or accepted service.
General tools do not require formal medical records or proof of a diagnosis. Do not upload records or detailed medication information unless a specific, approved workflow clearly requests it and explains why it is needed.
Analytics and advertising limits
Health details, free-text form content, tool answers, Trip Decision Review intake content, payment-card information and uploaded files should not be included in analytics or marketing event data.
Optional marketing technologies may use technical identifiers and visit or conversion information according to your consent choices, the site's configuration and the provider's notice.
No sale or rental
Pain Strategies does not sell or rent personal information and does not provide submitted health or trip information to data brokers.
Sharing with a service provider to operate the website or deliver a requested service is not treated as a sale by this policy, although applicable law may use different definitions.
General-purpose AI training
Ticked Bucket List does not use user-entered tool answers, private messages, uploaded files or Trip Decision Review submissions to train general-purpose AI models.
Any future feature that sends submitted information to an AI-assisted provider must be assessed, configured and explained in the relevant workflow before it is used.
Retention and security
Information is kept only for a defined purpose and review period.
| Information | What determines retention | What happens afterwards |
|---|---|---|
| Browser-local tool data | Remains until you reset the tool, clear site data, change the browser or device, or the browser removes it. | It may be removed from that browser. Ticked Bucket List may not be able to recover it. |
| Contact and support messages | Kept while the request is handled and for a limited operational, complaint or legal period afterwards. | Deleted, anonymised or retained only where a continuing legal or operational reason applies. |
| Orders, invoices and refunds | Accounting, tax, fraud-prevention, access, refund, dispute and legal record requirements. | Deleted or restricted when the relevant retention requirement ends. |
| Trip Decision Review records | Service delivery, follow-up, quality control, complaint, dispute, professional-risk and legal requirements. | Deleted, anonymised or restricted under the approved service retention schedule. |
| Marketing records | Kept while you are subscribed or while consent remains valid, plus a limited suppression record after unsubscribe. | Marketing stops; limited evidence of the request may be kept. |
| Security and technical logs | Limited period needed to secure, debug and investigate the website or meet legal requirements. | Deleted or aggregated when identifiable detail is no longer needed. |
Security
We use reasonable technical and organisational measures appropriate to the information and processing. These may include access limits, account controls, provider security features, secure transmission, data minimisation, update procedures and incident handling.
No website, browser, email, payment system or electronic storage method is completely secure. Use care when deciding what to send and contact us promptly if you believe information connected with Ticked Bucket List has been misused or exposed.
Your privacy rights
You can ask what information is held and how it is used.
The rights available and any exceptions depend on the law that applies to you and the processing.
Ask how and why personal information is being processed.
Ask whether we hold your information and request an available copy.
Ask us to correct information that is inaccurate or incomplete.
Request deletion where the law gives that right and no exception applies.
Object to or ask us to limit certain processing where available.
Withdraw consent for future processing that relies on consent.
Request portable information in circumstances where the law provides it.
Raise a concern with us or an appropriate data-protection authority.
Make a privacy request
Email the request, the right you want to exercise and enough information to identify the relevant interaction. We may need to verify identity and authority before disclosing or changing personal information.
Email a privacy requestWe aim to respond within the period required by applicable law. Some information may be retained or withheld where an exemption or continuing legal obligation applies.
In Kenya, you may also raise a concern with the Office of the Data Protection Commissioner . People in other countries may contact their local supervisory or privacy authority.
Children and policy changes
The services are intended primarily for adults.
We do not knowingly collect a child's personal information without the consent or other authority required by applicable law. A parent or guardian should contact us before submitting information about a child through a form, purchase or service workflow.
If you believe a child has provided personal information without the required permission, email info@tickedbucketlist.com so the matter can be reviewed.
Changes to this policy
We may update this policy when products, data flows, providers, cookie settings, legal requirements or business operations change. The last-updated date and version will be changed. Where required, a material change will also be communicated through an appropriate notice or consent step.
Related legal and trust pages
Issued by Ticked Bucket List, operated by Pain Strategies. Last reviewed 28 July 2026.