This Privacy Policy explains how The Baymont Review Ltd ("we", "us", "our"), operator of wristpower.shop, collects, uses, stores and protects your personal data. It applies to all visitors to our website and all persons who submit an order or contact enquiry through our site.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

The Baymont Review Ltd
55 Baker Street, London W1U 7EU, United Kingdom
Email: info@wristpower.shop

2. What Personal Data We Collect

We collect the following categories of personal data, depending on how you interact with our website:

a) Order and enquiry data

  • Full name
  • Telephone number
  • Email address (contact form)
  • Order details (product, quantity, price)
  • UTM and advertising parameters (utm_source, utm_medium, utm_campaign, gclid) - collected automatically from your URL when you arrive via a marketing link

b) Technical and usage data

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited, time on page and referral source (via analytics cookies, subject to your consent)

c) Cookie data

We use cookies and similar technologies as described in our Cookie Policy. Advertising and analytics cookies are only set following your explicit consent.

3. How We Collect Your Data

  • Directly from you when you complete our order form or contact form
  • Automatically through cookies and analytics tools when you browse our website (subject to consent)
  • From URL parameters when you arrive via an advertising or referral link

4. Legal Basis for Processing

We rely on the following legal bases under UK GDPR Article 6:

  • Contract performance (Article 6(1)(b)): to process and fulfil your order and respond to your enquiries.
  • Legitimate interests (Article 6(1)(f)): to improve our website, prevent fraud and maintain site security.
  • Consent (Article 6(1)(a)): for analytics and advertising cookies, which we only set after you have given explicit consent via our cookie banner.
  • Legal obligation (Article 6(1)(c)): where we are required to retain data to comply with applicable law (e.g. tax and accounting records).

5. How We Use Your Data

  • To process and fulfil your order for Revixol
  • To respond to your enquiry or complaint
  • To send you a transactional confirmation email
  • To analyse website usage and improve our content (analytics cookies, with consent)
  • To detect, prevent and investigate fraudulent activity
  • To comply with our legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Sharing

We do not sell your personal data. We may share it with:

  • Payment processors (Visa, Mastercard, Klarna, PayPal) - to process payments securely. Each processor operates under its own privacy policy and is an independent data controller for payment processing purposes.
  • Logistics and fulfilment partners - to dispatch your order. Only the data necessary for delivery (name, address) is shared.
  • Analytics providers (e.g. Google Analytics) - subject to your cookie consent. Data is processed in accordance with Google's privacy policy and EU/UK Standard Contractual Clauses where applicable.
  • Legal and regulatory authorities - where we are required to disclose data by law, court order or regulatory obligation.

Any third parties with whom we share data are required to handle it in accordance with UK GDPR and, where applicable, to enter into a Data Processing Agreement with us.

7. International Transfers

Where data is transferred outside the UK or European Economic Area (for example, to Google Analytics servers), we ensure that appropriate safeguards are in place, including UK IDTA (International Data Transfer Agreement) or EU Standard Contractual Clauses (SCCs) as applicable under UK adequacy and transfer regulations.

8. Retention Periods

  • Order data: retained for 7 years from the date of order to comply with UK tax and accounting law (HMRC requirements).
  • Contact enquiry data: retained for 2 years from the date of last contact, then securely deleted.
  • Analytics data: retained in accordance with the analytics provider's data retention settings (default 14 months for Google Analytics 4).
  • Cookie consent records: retained for 1 year.

9. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access: to request a copy of the personal data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): to request deletion of your data, subject to our legal retention obligations.
  • Right to restriction of processing: to request that we limit how we use your data.
  • Right to data portability: to receive your data in a structured, commonly used, machine-readable format.
  • Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at info@wristpower.shop. We will respond within one calendar month.

10. Right to Lodge a Complaint

If you are not satisfied with our handling of your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include TLS encryption for data in transit, access controls and regular security reviews. No method of transmission over the internet is 100% secure; however, we take all reasonable steps to protect your data.

12. Children's Data

Our website is not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@wristpower.shop.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated effective date. We encourage you to review this page periodically.

14. Contact Us

For any privacy-related queries, please contact us at:
info@wristpower.shop
The Baymont Review Ltd, 55 Baker Street, London W1U 7EU, United Kingdom