Privacy Policy
Detailed disclosures regarding how Bare Home Clinic collects, processes, protects, and handles personal data, telemetry metrics, and affiliate tracking cookies in accordance with global privacy laws.
Last Reviewed: October 2026 |
Governance: GDPR & CCPA/CPRA Compliant
Plain-Language Privacy Summary
Bare Home Clinic values your digital privacy. We do not sell, rent, or trade your personally identifiable information to data brokers. We collect only minimal technical telemetry required to deliver fast, secure page performance and maintain transparent affiliate attribution when you follow our hardware testing links.
1. Information We Collect & How It Is Obtained
Depending on how you interact with our independent testing lab website, we may collect the following categories of data:
📨 Information You Provide
When contacting our laboratory desk or subscribing to research briefs, you may voluntarily submit your name, email address, and message contents. We do not store sensitive payment details or medical records on our servers.
🌐 Automated Telemetry Data
Our servers automatically log your IP address (anonymized/truncated where required by law), browser engine type, operating system, referring URL, time stamps, and pages viewed to optimize technical rendering and caching.
🍪 Cookies & Tracking Identifiers
Small alphanumeric text files saved on your terminal device to record session state, remember user interface settings, and track referral conversions when you access third-party merchant partners like Amazon.
2. Lawful Grounds & Purposes of Processing
Bare Home Clinic processes your technical information under the following legal frameworks (Article 6 GDPR and applicable US statutes):
- Legitimate Interests: To ensure server security, prevent denial-of-service (DDoS) attacks, preserve Core Web Vitals optimization, and maintain server responsiveness.
- Consent: To deploy non-essential analytical cookies or respond directly to communication requests submitted via our contact forms.
- Commercial Attribution: To attribute qualifying referrals to commercial partners (such as the Amazon Associates Program) when users choose to purchase reviewed hardware through our links.
4. Data Retention, Storage & Security Architecture
We adopt strict technical safeguards to shield website visitors from unauthorized access, interception, or disclosure:
- End-to-End Transport Encryption: All traffic on barehomeclinic.com is secured via mandatory HTTPS using modern TLS 1.3 encryption protocols.
- Limited Retention Windows: Server logs containing IP addresses are automatically flushed on a rolling 30-day schedule unless retained temporarily to address active malicious bot attacks.
- Restricted Access Controls: Email communications directed to our laboratory desk are accessible only by authorized editorial leads (such as Nora Hayes) using two-factor authentication.
5. Your Rights Under GDPR (EU/EEA/UK) & CCPA/CPRA (California)
Depending on your geographical jurisdiction, you possess explicit legal rights regarding your personal information:
- Right to Access & Portability: Request confirmation of whether we process your data and receive an electronic copy of recorded personal entries.
- Right to Rectification & Erasure (“Right to Be Forgotten”): Request correction of inaccurate information or the total deletion of your communication logs.
- Right to Restrict or Object: Restrict certain processing activities or object to legitimate-interest processing.
- CCPA/CPRA Non-Discrimination: We do not sell personal data for monetary or other valuable consideration. We do not discriminate against users who exercise their statutory privacy rights.
6. Children’s Online Privacy Protection Act (COPPA)
Bare Home Clinic provides technical evaluations of high-fluence medical-aesthetic electronics intended strictly for adult consumers. Our website is not engineered for, marketed to, or directed at children under the age of 16. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal contact information to our website, please notify us immediately for prompt deletion.
Exercise Your Privacy Rights or Submit Inquiries
Our data governance desk responds to formal data subject requests within 30 days.