Controller
Fyntherocrxak at 52 Haymarket, London, SW1Y 4RP, United Kingdom, determines how and why personal data is processed for this website.
Territory
We apply the UK GDPR and the Data Protection Act 2018. If you live outside the UK, additional local rules may still affect you when you use services directed at the UK market.
Data controller
The data controller responsible for your personal data is:
Fyntherocrxak
52 Haymarket
London, SW1Y 4RP
United Kingdom
Email: callback@fyntherocrxak.world
Phone: +44 20 8017 1788
Scope
This policy applies to information we process about visitors to our website, people who contact us, and users of our general lifestyle content. It is designed to align with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Sources of personal data
We obtain personal data directly from you when you complete forms, send email, or call us. We also generate technical and usage data automatically when you load pages, subject to your cookie choices. If a third party introduces you with your consent, we may receive minimal contact details and will verify the lawful basis before substantive processing.
We do not purchase marketing lists that contain personal data for this website. If that ever changes, this policy will be updated and, where required, we will seek consent or another valid basis before use.
Data we collect
We may process the following categories of personal data, depending on how you interact with us:
- Identity and contact data: name, email address, telephone number, and similar details you provide when you complete forms or correspond with us.
- Communication data: the content of messages you send, timestamps, and channel metadata needed to respond.
- Technical data: internet protocol (IP) address, browser type and version, time zone, device type, operating system, and approximate location derived from IP.
- Usage data: pages viewed, referring URLs, click patterns, session duration, and similar analytics events where permitted.
- Cookie and similar technologies data: identifiers stored on your device where you have consented or where strictly necessary. See our Cookie Policy for detail.
- Preference data: marketing and analytics consent choices stored locally or on our systems as applicable.
We do not intentionally collect special categories of personal data (such as health data). If you voluntarily include sensitive information in a message, we will only process it to handle your enquiry and will ask you to minimise such content where possible.
Purposes and legal bases
We process personal data for the following purposes and on these legal bases under UK GDPR:
- Website delivery and security (legitimate interests; necessary for compliance): operating the site, preventing abuse, enforcing terms, maintaining logs for security investigations.
- Responding to enquiries (performance of steps at your request; legitimate interests): replying to contact requests and managing the relationship.
- Analytics and improvement (consent where required; legitimate interests where applicable): understanding aggregate usage to improve structure and content, subject to your cookie preferences.
- Marketing communications (consent): where you have opted in to receive updates or campaigns.
- Legal obligations: retaining records where required by law, and responding to lawful requests from public authorities.
Where we rely on legitimate interests, we balance our interests against your rights and offer opt-outs where appropriate, particularly for non-essential cookies and marketing.
When we introduce a new feature that involves personal data, we document the purpose, category of data, and lawful basis before launch. If the change is material, we update this policy and, where consent is the appropriate basis for a new activity, we request consent through a clear affirmative action.
Recipients and processors
We may share personal data with:
- Service providers who host our website, deliver email, provide analytics (when consented), or support IT security, under written agreements that require protection of personal data.
- Professional advisers where required, such as legal or accounting firms bound by confidentiality.
- Regulators, courts, or law enforcement when required by applicable law.
We do not sell your personal data.
Advertising and digital measurement
Where we use online advertising platforms (which may include Google Ads in the United Kingdom), we and our partners may process limited technical data such as device identifiers, approximate location derived from IP, and conversion or engagement signals. Such processing occurs only where permitted by applicable law and, where required, your cookie consent for analytics or marketing categories. Advertising partners act under their own privacy notices and our agreements; you can manage many identifiers through our Cookie Policy, the platform’s ad settings, and your browser controls.
We do not use advertising to promote medical treatment, prescription products, or guaranteed health outcomes. Our landing pages describe general lifestyle information and link to this Privacy Policy and our disclaimer.
International transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards such as the UK International Data Transfer Agreement, UK Addendum to the EU Standard Contractual Clauses, or adequacy regulations, together with supplementary measures where needed.
Retention
We retain personal data only as long as necessary for the purposes described:
- Contact and enquiry records: typically up to twenty-four months after the last interaction unless a longer period is needed to resolve a dispute or meet a legal obligation.
- Security and server logs: typically up to twelve months, unless extended for incident investigation.
- Marketing consents and related profiles: until you withdraw consent, plus a short period to evidence consent.
- Legal and regulatory records: as required by applicable law, which may extend retention in specific cases.
When retention periods end, we delete or anonymise data in line with our internal procedures.
Security measures
We apply appropriate technical and organisational measures, including:
- TLS encryption for data in transit where HTTPS is used.
- Access controls and authentication for administrative systems.
- Least-privilege principles for staff and suppliers.
- Processes to detect and respond to incidents.
- Regular review of vendors and configuration.
No method of transmission or storage is completely secure; we work to reduce risk in proportion to the nature of the data we process.
Your rights
Under UK GDPR, you may have the right to:
- Request access to your personal data.
- Request rectification of inaccurate data.
- Request erasure in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests, including profiling in some cases.
- Data portability for data you provided where processing is automated and based on consent or contract.
- Withdraw consent at any time where processing is consent-based, without affecting the lawfulness of earlier processing.
- Lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk/.
To exercise rights, contact us using the details in the Data controller section. We may need to verify your identity before responding. We aim to respond within one month, which may be extended in complex cases as permitted by law.
Children
Our services are directed at adults. We do not knowingly collect personal data from children without appropriate parental authority. If you believe we have collected a child’s data, please contact us so we can delete it.
Automated decision-making
We do not use solely automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.
Changes
We may update this Privacy Policy from time to time. The “Last updated” date will change, and for material changes we will provide additional notice where appropriate, such as a banner on the website.
Personal data breaches
We maintain procedures to detect, assess, and report suspected personal data breaches. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the ICO without undue delay where required by law, and we will inform affected individuals when we are legally obliged to do so, describing the nature of the incident, likely consequences, and remedial steps.
Complaints
We encourage you to contact us first so we can try to resolve your concern. You may also lodge a complaint with the Information Commissioner’s Office. We do not charge a fee for handling internal privacy complaints submitted in good faith.
Contact
For privacy questions or requests: callback@fyntherocrxak.world or write to the postal address above.