GDPR Notice

01Who is responsible for your information?

For purposes of this notice, Serenity Surgery & Wellness / Freeze Breast Cancer is the data controller for the website and book-request program, meaning we determine the purposes and means of processing personal information collected through these services.

You can contact us at privacy@freezebreastcancer.com or by mail at the address listed below.

02Personal information we process

Depending on how you interact with the website, we may process the following categories of personal information:

• personContact details - name, email address, phone number, mailing address, and similar information submitted through a form or correspondence.
• local_shippingBook-request details - information needed to verify, process, ship, and follow up on a complimentary book request.
• chatMessages and notes - questions, comments, or optional details you choose to provide.
• monitoringWebsite usage data - log data, browser type, device information, pages visited, referral information, and cookie or analytics data.

03Special category or health-related information

Some visitors may voluntarily include sensitive or health-related information when asking questions or requesting educational materials. Please do not submit medical details through the website unless you are comfortable doing so and believe the information is necessary for your request.

When sensitive information is voluntarily submitted, we process it only as reasonably necessary to respond to your request, provide educational information, administer the book-request program, comply with law, or with your explicit consent where required.

04Why we process information and our legal bases

Under GDPR-style privacy laws, we rely on one or more legal bases depending on the context:

05How we share information

We do not sell your personal information. We may share information with limited categories of recipients when needed to operate the website and book-request program:

• handshakeService providers that help with hosting, forms, analytics, email, shipping, security, and administrative support.
• gavelGovernment, regulatory, legal, or safety-related recipients when disclosure is required or appropriate under applicable law.
• business_centerProfessional advisors, such as attorneys, accountants, compliance consultants, or insurers, when reasonably necessary.

06International transfers

We are based in the United States. If you access the website from outside the United States or submit information from the EEA, United Kingdom, Switzerland, or another country, your information may be transferred to and processed in the United States or other locations where our service providers operate.

Where required, we use appropriate safeguards for international transfers, such as contractual protections with service providers and other measures designed to protect personal information.

07How long we keep information

We keep personal information only as long as reasonably necessary for the purposes described in this notice, including processing and documenting book requests, responding to communications, maintaining security, complying with legal obligations, resolving disputes, and enforcing agreements.

When information is no longer needed, we will delete it, anonymize it, or retain it only as required or permitted by law.

08Your GDPR privacy rights

Depending on where you live and how the GDPR or similar law applies, you may have the right to:

• visibilityAccess the personal information we hold about you.
• editCorrect inaccurate or incomplete personal information.
• deleteRequest deletion of personal information in certain circumstances.
• blockRestrict processing or object to certain processing activities.
• downloadData portability for information you provided to us, where the right applies.
• unsubscribeWithdraw consent at any time where processing is based on consent, without affecting processing that occurred before withdrawal.
• smart_toyAvoid solely automated decisions with legal or similarly significant effects, if such processing ever applies.

09How to exercise your rights

To exercise your privacy rights, email us at privacy@freezebreastcancer.com. Please describe the right you want to exercise and provide enough information for us to verify and locate your request.

We may need to verify your identity before responding. We will respond within the timeframe required by applicable law. Some rights are subject to exceptions, including where we must retain information to comply with law, protect legal rights, or complete a request you initiated.

10Cookies and analytics

We may use cookies and similar technologies to operate the website, remember preferences, understand website usage, and improve the visitor experience. You can control cookies through your browser settings. Where required by law, we will request consent before using non-essential cookies.

11Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, or misuse. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

12Your right to complain

If you believe your privacy rights have been violated, you may contact us first so we can try to resolve your concern. You may also have the right to lodge a complaint with your local data protection authority or supervisory authority.

13Changes to this notice

We may update this GDPR Privacy Notice from time to time to reflect changes in our practices, services, or legal requirements. When we update it, we will revise the "Last updated" date at the top of this page.

14Contact us

Questions about this notice, our data practices, or privacy rights requests may be directed to the contact information below.