Privacy Policy

1. Data Controller

The data controller responsible for your personal data is Shoulderdraindet. Contact: admin@shoulderdraindet.world, phone +1 212-753-4000, postal address 611 5th Ave, New York, NY 10022.

2. Categories of Data We Process

We may process identification data (name), contact data (email address), communication content (message text), technical data (IP address, browser type, timestamps), and preference data (cookie choices). We do not intentionally collect special categories of data unless you include them in a message.

3. Purposes and Legal Bases

We process data to respond to inquiries submitted through our contact form, to operate and secure the website, to comply with legal obligations, and, where you consent, for analytics and marketing cookies as described in our Cookie Policy. Under the GDPR, legal bases include consent, contract performance steps prior to contract, legitimate interests in site security and communication, and legal obligation where applicable.

4. Retention Periods

Contact form records are retained for up to twenty-four months unless a longer period is required for dispute resolution or legal compliance. Server logs may be retained for up to ninety days. Cookie preference records are stored locally in your browser and on our systems only when tied to authenticated interactions.

5. Recipients and Transfers

We use infrastructure providers located in the United States and, where applicable, the European Economic Area. When data is transferred internationally, we implement appropriate safeguards such as standard contractual clauses where required.

6. Security Measures

We apply access controls, encrypted transport (HTTPS), routine software updates, and staff training on data handling. No method of transmission or storage is completely secure; we review incidents according to applicable breach notification rules.

7. Your Rights

If you are in the European Economic Area or United Kingdom, you may have rights to access, rectify, erase, restrict processing, object, data portability, and withdraw consent without affecting prior lawful processing. You may lodge a complaint with your supervisory authority. We respond to verified requests within one month unless complexity requires extension.

8. Children

Our site addresses a general adult audience. We do not knowingly collect data from children under sixteen without parental authority where required by law.

9. Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects solely based on automated processing.

10. Changes

We may update this Privacy Policy to reflect operational or legal changes. Material changes will be indicated by an updated date at the top of this page.

11. Contact for Privacy Requests

Submit privacy-related requests via our contact form or email admin@shoulderdraindet.world with the subject line Privacy Request. We may ask for information to verify your identity before fulfilling certain requests.

12. Sources of Personal Data

We collect personal data directly from you when you submit the contact form, when you communicate by email or phone, and indirectly through server logs generated by your browser when you visit pages on shoulderdraindet.world. We do not purchase personal data lists from brokers for marketing purposes.

13. Processing Activities Detail

When you submit a contact form, we process your name and email to identify you, your message to understand the inquiry, and metadata such as submission time for record keeping. When you browse without submitting a form, we may process technical identifiers necessary for security monitoring and, if consented, aggregated analytics.

14. Legitimate Interests Assessment

Where we rely on legitimate interests, we balance our need to maintain a secure, functional website against your privacy expectations. You may object to processing based on legitimate interests by contacting us with a description of your particular situation.

15. Data Minimization

Form fields are limited to what is reasonably necessary to respond to inquiries. We encourage you not to include sensitive health information in free-text messages because our editorial team is not equipped to handle clinical data.

16. Records of Processing

We maintain internal documentation of processing activities as required by Article 30 GDPR for organizations meeting applicable thresholds. Summaries are available upon request for supervisory authority review where mandated.

17. California Privacy Notice

California residents may have additional rights to know, delete, and opt out of certain sharing under the CCPA/CPRA where applicable. We do not sell personal information as defined by California law. Submit requests using the contact details above.

18. UK and EEA Representatives

If we appoint an EU or UK representative in the future, their contact details will be published on this page. Until then, direct all privacy communications to the data controller address in New York.

19. Version History

Material revisions to this Privacy Policy are noted by updating the date in the hero section. Prior versions may be supplied upon request when legally required.

20. Related Policies

Please also review our Cookie Policy, Terms of Use, and Refund Policy for complementary information about site use and purchases.