Privacy Policy

 

Last updated: October 29, 2026

1. General Information & Data Controller

This Privacy Policy outlines how your personal data is collected, handled, and protected when you interact with drchristopherfox.com.

The entity responsible for processing your personal data (the Data Controller) is:

  • Website: drchristopherfox.com

  • Contact Name: Dr Christopher Fox

  • Address: Bern, 3007, Switzerland

  • Contact Email: admin at drchristopherfox dot com

2. Legal Bases for Processing (EU & UK GDPR)

To satisfy EU and UK GDPR requirements, we process your personal data under the following legal frameworks: [1, 2]

  • Consent (Art. 6(1)(a) GDPR): You have given clear, affirmative consent for us to process your data for a specific purpose (e.g., opting into marketing newsletters or accepting analytical cookies). [1]

  • Performance of a Contract (Art. 6(1)(b) GDPR): Processing is required to complete an agreement or fulfill specific services requested by you.

  • Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for our legitimate business interests—such as tracking general performance, diagnosing technical server faults, and securing the web infrastructure—provided your baseline rights do not override these operations. [1]

  • Legal Obligation (Art. 6(1)(c) GDPR): Processing is mandatory to comply with applicable statutory laws (such as Swiss corporate reporting and commercial retention windows).

3. Data Collection and Integrated Infrastructure

Our web platform leverages modern third-party sub-processors to power its experience. Data is collected via the following channels: [1]

A. Core Platform (Squarespace)

Our website is built on Squarespace, which operates as our Content Management System (CMS). When you access this site, Squarespace automatically logs structural parameters in server log files. This logs: [1, 2, 3]

  • IP address and device fingerprint data

  • Timestamps and exact duration of pages visited

  • Operating system, browser layout, and language metrics

  • Referrer URL paths (the website you arrived from) [1]

Purpose & Legal Basis: This configuration is essential for Squarespace to serve website files safely, ensure stability, and track generic uptime (Legitimate Interests). [1]

B. Analytical Optimization (Google Analytics)

We use Google Analytics (a data processing service provided by Google LLC) to observe anonymous visitor behaviours and traffic flow patterns. Google Analytics tracks interactions such as what sections you select and how long you remain on elements of the site. [1, 2, 3]

  • Legal Basis: These tracking mechanics are disabled by default. They are only loaded if you grant active validation on our web cookie banner (Consent). [1, 2]

C. Direct Correspondence & Newsletters (Mailchimp)

If you interact with digital communication vectors on our site—such as contacting Dr Christopher Fox or registering for an update newsletter—your communication parameters (including name, email address, and metadata) are safely ingested and managed via Squarespace and Mailchimp (The Rocket Science Group LLC). [1, 2]

  • Purpose & Legal Basis: Used strictly to dispatch responses to queries or deliver requested marketing notifications based entirely on your express request (Performance of a contract or Consent). You can select the unsubscribe link at the bottom of any automated transmission to revoke permission immediately. [1]

4. Cross-Border Data Disclosures

Data collected through our site is primarily stored on servers located in Switzerland or the EU/EEA. However, because our infrastructure partners (Squarespace, Google, and Mailchimp) are headquartered in the United States, your personal data may be processed in the US. [1, 2]

We secure these international transmissions using legally approved safeguards:

  • Data Privacy Frameworks (DPF): Squarespace, Google, and Mailchimp participate in the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework, guaranteeing an adequate level of data protection. [1]

  • Standard Contractual Clauses (SCCs): We have established Data Processing Agreements (DPAs) incorporating the latest EU Standard Contractual Clauses (with Swiss and UK addenda) to protect cross-border operations. [1, 2]

5. Retention Windows

We retain personal data parameters only for the duration required to execute the collection objectives detailed in this policy, or to comply with explicit legal records preservation mandates (such as the 10-year statutory retention obligations under the Swiss Code of Obligations).

6. Your Rights

Under the Swiss FADP, EU GDPR, and UK GDPR frameworks, you maintain complete jurisdiction over your data assets: [1, 2]

  • Right to Access: Obtain clear confirmation and details detailing what data is logged regarding you.

  • Right to Rectification: Mandate immediate corrections to incomplete or erroneous records.

  • Right to Erasure ("Right to Be Forgotten"): Demand erasure of your stored variables, provided no legal preservation exception applies.

  • Right to Restrict Processing: Bound how we interact with your parameters under specific contexts.

  • Right to Data Portability: Request an electronic extract of your parameters in a structured, machine-readable format.

  • Right to Object: Challenge automated processes relying entirely on our legitimate business interests.

  • Right to Revoke Consent: Cancel previously activated permissions at any point with future effect. [1]

To exercise any element of your data privacy rights, please direct an explicit written prompt to our controller contact at the email address provided in Section 1.

Regional Supervisory Offices

Should you perceive an infraction regarding how your files are managed, you are entitled to file a grievance with your local ombudsman:

7. Data Security

We apply widespread TLS/SSL industry-standard encryption architecture across all communication vectors of our domain to protect personal components from exploitation, unauthorized alteration, loss, or access by third parties.