Privacy Policy

This Privacy Policy explains how sflspinejoint.com (the “Site”) processes personal data when you browse our pages from the United Kingdom and, where relevant, the European Economic Area. It should be read together with our Cookie Policy. We describe what we collect, why we use it, how long we keep it, who we share it with, and what rights you may exercise under the UK General Data Protection Regulation and the Data Protection Act 2018 (together, “UK GDPR”).

Data controller

For the purposes of UK GDPR, the publisher operating the Site acts as the data controller responsible for decisions about why and how personal data is processed through pages we control. You can contact us about privacy matters at info@sflspinejoint.com. We will verify the legitimacy of requests and may ask for information to confirm your identity before disclosing or deleting records.

Categories of personal data

Depending on how you use the Site, we may process technical and usage data automatically transmitted by your browser or device, such as IP address, approximate geographic area derived from IP, user agent string, referring URL, timestamps, pages viewed, and error logs. If you email us, we process the contents of your message and metadata (sender address, time of delivery). We do not require you to create an account to read general editorial content, and we do not intentionally collect special-category data such as health information.

Purposes and legal bases

We process data to deliver and secure the Site (performance of our online service and legitimate interests in fraud prevention and abuse detection); to remember your age-gate and cookie preferences where stored locally or on our servers (consent where required, otherwise legitimate interests coupled with browser storage you control); to analyse aggregate traffic patterns in pseudonymised form where we deploy analytics in future (consent or legitimate interests, as documented at rollout); and to respond to correspondence (legitimate interests and, where applicable, pre-contractual steps). Where we rely on legitimate interests, you may object on grounds relating to your particular situation, subject to overriding legal grounds.

Cookies and similar technologies

We distinguish essential technologies needed for basic functions from optional categories such as analytics or marketing pixels. Our Cookie Policy lists categories, retention, and controls. You can manage many technologies through browser settings, industry opt-out tools, or our consent interface when provided. Blocking essential storage may prevent certain features, including repeated age prompts, from working smoothly.

Recipients and processors

We use infrastructure and communications providers that host the Site, distribute content, deliver email, or provide security monitoring. They act on our instructions as processors under Article 28 UK GDPR where required. We may disclose information to professional advisers bound by confidentiality, or to public authorities when compelled by lawful order. If we sell or reorganise the business, personal data may transfer subject to safeguards and notice consistent with law.

International transfers

Our hosting stack may involve processing in the United Kingdom, the European Economic Area, or other countries deemed adequate by the UK government, or otherwise protected by standard contractual clauses or equivalent safeguards. We assess transfer risks and implement supplementary measures where appropriate.

Retention

Server logs and security telemetry are retained only as long as needed for incident response and compliance, typically on a rolling basis defined by our hosting configuration. Email correspondence may be kept for several years where there is a legitimate need to evidence advice given or disputes raised. Local storage entries on your device persist until you clear them.

Security

We implement administrative, technical, and organisational measures appropriate to the risk, including access controls, encryption in transit where supported, patching, and monitoring. No internet transmission is completely secure; you should protect your devices and use updated browsers.

Your rights

Subject to conditions and exemptions, you may have the right to access, rectify, erase, restrict processing, object, data portability, and to withdraw consent without affecting prior lawful processing. You may lodge a complaint with the Information Commissioner’s Office (ICO) in the UK. We encourage you to contact us first so we can attempt to resolve concerns promptly.

Children

The Site is not directed at individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us and we will take appropriate steps to delete it.

Updates

We may update this Privacy Policy to reflect legal, technical, or business changes. The revised version will be posted here with an updated effective date when we display one. Significant changes may be highlighted through an on-site banner or email where we already correspond with you.