Last updated: 18 August 2026
A review site needs very little from its readers. This page describes precisely what arrives, why, and how to make it go away.
1. The controller
TheCosmedicCoach.com editorial team. Requests go to [email protected].
2. Data you hand over
- Correspondence. Name, email address and message content when you write to us.
3. Data the site records by itself
- Request metadata — IP address (usually truncated before reporting), browser, operating system, device class, screen size.
- Reading signals — which chapters are opened, dwell time, scroll depth, referring page, outbound clicks.
- Cookie identifiers — itemised in the Cookie Policy.
Financial and identity data are out of scope. We have no use for a card number, a bank detail, a casino password or a KYC scan, and anything of that sort that reaches us is deleted rather than stored.
4. Lawful basis
- Delivering and defending the site — legitimate interest.
- Answering your message — your own request.
- Audience measurement — consent where required, otherwise legitimate interest.
- Referral attribution — consent or legitimate interest by jurisdiction.
5. Recipients
Nothing is sold. A narrow slice is processed by our host and CDN, our analytics provider, and affiliate networks that receive a referral token when a partner link is clicked. Once you land on an operator's site, that operator is the controller of everything you enter there.
6. Cross-border processing
Providers may process data in the EU, the UK, India, Singapore or the United States, relying on safeguards such as standard contractual clauses.
7. Retention
- Email threads — up to 24 months after the last reply.
- Aggregate analytics — up to 26 months.
- Server logs — roughly 30 days.
- Cookies — as listed in the Cookie Policy.
8. What you can require of us
Under India's Digital Personal Data Protection Act and, where applicable, the EU or UK GDPR, you may request access, correction, erasure, restriction, portability, or object to processing; and you may withdraw consent at any time without affecting what was already done. You may also complain to your supervisory authority. We answer within 30 days.
9. Security posture
HTTPS throughout, restricted access to stored correspondence, and — most effectively — a deliberately small dataset. What is never collected cannot leak.
10. Minors
Adults only. We do not knowingly process data from anyone under 18; tell us if you suspect otherwise.
11. Revisions
The date at the top marks the current text. Substantive changes are announced on the site.