Privacy Policy

1. Who we are

The Fairview Review is operated by Fairview Editorial Ltd (the "Company", "we", "us", "our"). We are the data controller in respect of personal data collected through this website (wristsshoulder.world).

Registered address: 14 Blenheim Terrace, London, NW8 0EB, United Kingdom
Company No. / VAT: 13847562 / GB 398 7412 01
Contact: privacy@wristsshoulder.world · +44 20 7946 0312

2. The law that governs this policy

This policy is governed by the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the European Union (Withdrawal) Act 2018, and the Data Protection Act 2018. Where relevant, it also reflects the Privacy and Electronic Communications Regulations 2003 (PECR) as they apply to cookies and electronic marketing.

3. What personal data we collect and why

We collect only the personal data necessary for the specific purposes described below.

3.1 Order enquiries

Data collected: Full name, telephone number, UTM/tracking parameters (if present in the referring URL).
Purpose: To process and fulfil your product order, arrange delivery, and communicate order details with you.
Legal basis: Performance of a contract (UK GDPR Article 6(1)(b)) - processing is necessary to fulfil the order you have placed.
Retention: Order records are retained for 7 years to comply with UK tax and accounting obligations, then securely deleted.

3.2 Contact form and email enquiries

Data collected: Name, telephone number (optional), message content, subject.
Purpose: To respond to your enquiry and provide customer support.
Legal basis: Legitimate interests (UK GDPR Article 6(1)(f)) - it is in our and your interest to respond to your message.
Retention: Correspondence is retained for 2 years from last contact, then deleted.

3.3 Analytics cookies (with consent)

Data collected: Anonymised browsing data - pages visited, time on site, device/browser type, approximate geographic region (country/city level). No directly identifying data is collected via analytics.
Purpose: To understand how visitors use the website and improve its content and usability.
Legal basis: Consent (UK GDPR Article 6(1)(a)) - we only set analytics cookies after you have given your consent via our cookie banner. You may withdraw consent at any time by clicking "Manage settings" in the footer.
Retention: Analytics data is retained for 14 months in Google Analytics, then automatically deleted.

3.4 Marketing / advertising cookies (with consent)

Data collected: Cookie identifiers, ad interaction data, hashed identifiers where applicable.
Purpose: To serve relevant advertisements and measure the effectiveness of advertising campaigns.
Legal basis: Consent (UK GDPR Article 6(1)(a)).
Retention: As per the individual third-party cookie lifespans disclosed in our Cookie Policy.

3.5 Strictly necessary cookies

We set certain cookies that are essential for the website to function - including your cookie consent preference. These do not require consent under PECR as they are strictly necessary. See our Cookie Policy for a full list.

4. How we share your data

We do not sell your personal data. We may share it with the following categories of recipients where necessary:

• Delivery and logistics partners - to fulfil your order (name and delivery address only).
• Payment processors - if card payment is offered (we do not store card data ourselves).
• IT and hosting providers - our website and email infrastructure providers, acting as data processors under contract.
• Analytics providers - Google Analytics (if you have consented), operating under a data processing agreement.
• Legal and regulatory authorities - where we are required to disclose data by law, court order, or regulatory obligation.

All third-party processors are required by contract to process data only on our instructions and to maintain appropriate security measures.

5. International transfers

Google Analytics may transfer data to servers in the United States. This transfer is governed by Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), providing appropriate safeguards under UK GDPR Chapter V. We do not make other international transfers of your personal data in the ordinary course of our operations.

6. Your rights under UK GDPR

You have the following rights in relation to the personal data we hold about you:

• Right of access - to obtain a copy of the personal data we hold about you.
• Right to rectification - to have inaccurate data corrected.
• Right to erasure ("right to be forgotten") - to request deletion of your data where there is no legitimate reason for us to continue processing it.
• Right to restriction - to request that we restrict processing of your data in certain circumstances.
• Right to data portability - to receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object - to object to processing based on legitimate interests.
• Right to withdraw consent - at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@wristsshoulder.world. We will respond within one calendar month (extendable by a further two months for complex requests, with notice).

7. Right to complain

If you believe we have processed your personal data unlawfully or in breach of your rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you approach the ICO - please contact us first.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. These measures include TLS encryption of data in transit, access controls, and regular security reviews. No internet transmission is entirely secure; we cannot guarantee absolute security.

9. Children's data

This website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

10. Automated decision-making

We do not use automated decision-making or profiling processes that produce legal or similarly significant effects on individuals.

11. Links to third-party websites

This website contains links to external websites (such as the NHS, EFSA, and the BDA). We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The "last updated" date at the top of this page will reflect any changes. Where changes are material, we will take reasonable steps to notify you.