Privacy Policy

Introduction & Scope

At xshegroup, we respect your personal privacy and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains what information we collect when you browse our editorial website, how that data is used, and your rights as a visitor.

Data Controller Information

The data controller responsible for personal information processed through this website is:

Information We Collect

As an editorial publication, we keep data collection minimal. We only process information in the following contexts:

• Contact Enquiries: When you submit an enquiry via our contact form, we collect the details you provide (such as your first name, last name, email address, subject matter, and message body) to respond to your query.
• Technical & Session Data: Standard server logs that record IP addresses, browser types, and timestamp information necessary to ensure site security, diagnose server issues, and prevent malicious traffic.
• Local Preference Storage: We use browser localStorage solely to remember your cookie consent preferences so the notice does not reappear on every visit.

Affiliate Links & External Retailer Tracking

When you click on an external product link on this website (for example, links pointing to bayraw.co.uk), you are redirected to an independent retailer's website. These links include a referral parameter (such as a generated clickid).

This tracking code indicates to the retailer that your visit was referred from our editorial review. We do not receive, store, or process any payment details, delivery addresses, or personal purchasing data from your transactions with the external retailer. Once you navigate to the retailer's platform, their independent privacy policy and terms govern your browsing and transaction.

Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Legitimate Interests: To maintain website security, prevent fraudulent activity, and run a sustainable affiliate publishing model.
• Consent: When you choose to submit information via our contact form or manage non-essential browser preferences.

Data Retention & Security

We retain contact correspondence only for as long as necessary to address your specific enquiry and resolve related matters, typically not exceeding 12 months. We implement appropriate technical measures, including SSL encryption (HTTPS), to safeguard any data transmitted through our website.

Your Statutory Data Rights

Under UK data protection law, you have specific rights concerning your personal data, including:

• The right of access: Request a copy of the personal data we hold about you.
• The right to rectification: Request correction of inaccurate or incomplete information.
• The right to erasure: Request deletion of your personal data where there is no compelling reason for its continued processing.
• The right to object or restrict processing: Object to processing based on legitimate interests.

To exercise any of these rights, please contact our team at corrine@xshegroup.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled improperly.