Privacy Policy

1. Who We Are

This Privacy Policy applies to Harbor Journal Ltd ("Harbor Journal", "we", "us", "our"), operator of the website at thrivestrength.world.

We are the data controller for the personal data collected through this website. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect the following categories of personal data:

• -Identity data: name provided in order or contact forms.
• -Contact data: telephone number, email address.
• -Transaction data: order details including product, quantity and price.
• -Technical data: IP address, browser type, device identifiers, referring URLs, pages visited, time on site - collected via cookies and analytics tools (only with your consent).
• -Marketing data: UTM parameters and click identifiers (e.g. gclid) used to attribute traffic sources, only where consent is granted.
• -Communications data: content of messages sent to us via our contact form or email.

We do not collect special category data (e.g. health data) as part of our standard order process. If you voluntarily share health information in a message, we will treat it with heightened care and delete it once your enquiry is resolved.

3. How We Use Your Data

4. Cookies and Tracking Technologies

We use cookies and similar technologies on this website. For full details, please see our Cookie Policy. We implement Google Consent Mode v2: all advertising and analytics storage is set to denied by default until you actively accept via our cookie banner. You may withdraw consent at any time by clearing cookies and re-visiting our site.

5. Sharing Your Data

We do not sell your personal data. We may share it with the following categories of recipients:

• Delivery and logistics partners - to fulfil your order and arrange delivery within the UK.
• IT and hosting providers - who process data on our behalf under data processing agreements.
• Analytics providers (e.g. Google Analytics) - only where you have consented to analytics cookies.
• Law enforcement or regulatory bodies - where we are legally required to disclose data.

Where we engage third-party processors, we do so under written data processing agreements ensuring appropriate safeguards in line with UK GDPR.

6. International Transfers

We primarily process data within the United Kingdom and European Economic Area. Where data is transferred outside these territories (for example, to US-based analytics providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the UK International Data Transfer Agreement (IDTA), as applicable.

7. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Order and transaction records: 6 years from the date of transaction (UK tax and commercial law requirements).
• Contact enquiries: 2 years from the date of the last communication, unless an ongoing relationship continues.
• Analytics data: as configured in the analytics platform (typically 14 months).
• Cookie consent records: 12 months.

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access - to obtain a copy of the personal data we hold about you.
• Right to rectification - to have inaccurate data corrected.
• Right to erasure - to request deletion of your data where no lawful basis for processing remains.
• Right to restriction of processing - to request that we limit how we use your data.
• Right to data portability - to receive your data in a structured, machine-readable format.
• Right to object - to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making - we do not carry out solely automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, contact us at info@thrivestrength.world. We will respond within one calendar month. We may need to verify your identity before fulfilling a request.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

We would, however, appreciate the opportunity to address your concerns before you approach the ICO. Please contact us first at info@thrivestrength.world.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These include HTTPS encryption, access controls and regular security reviews. No method of electronic transmission is 100% secure; we cannot guarantee absolute security, but we take all reasonable precautions.

11. Children

Our website and products are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. We encourage you to review this policy periodically. Continued use of the website following any update constitutes acceptance of the revised policy.

13. Contact

For any data protection queries or to exercise your rights, contact our data controller at: