Conversations In Orthopaedics (“we”, “us”, “the Publisher”) operates the website at conversationsinorthopaedics.com. We are an independent editorial journal. Questions about this Policy may be directed to editor@conversationsinorthopaedics.com.

We collect only what is necessary to operate the journal:

• ◆Email address — Provided voluntarily when you subscribe to the journal. Used only to deliver new issues and editorial communications.
• ◆Submission content — Name, affiliation, and manuscript text provided when you submit a piece or correspondence for consideration.
• ◆Usage data — Standard server logs including IP address, browser type, referring URL, and pages visited. Collected automatically by our hosting provider (Vercel) for security and performance monitoring.
• ◆Cookies — We use only essential session cookies required for site functionality. We do not use tracking, advertising, or behavioural profiling cookies.

We do not collect payment information directly. Donations processed through third-party payment providers are governed by those providers’ own privacy policies.

We use collected information solely for the following purposes:

• ◆Delivering new issues and editorial correspondence to subscribers
• ◆Reviewing and responding to article submissions and peer letters
• ◆Maintaining the security, reliability, and performance of the Site
• ◆Complying with legal obligations
• ◆Investigating reported abuse or violations of our Terms of Use

We do not sell, rent, trade, or otherwise commercially exploit your personal information. We do not use your data for targeted advertising.

For users in the European Economic Area, United Kingdom, and Switzerland, our legal basis for processing personal data is:

• ◆Consent — You have given clear consent by subscribing or submitting content. You may withdraw consent at any time.
• ◆Legitimate interests — We process server logs to maintain the security and integrity of the Site, where such interests are not overridden by your data protection rights.
• ◆Legal obligation — We may process data where required to comply with applicable law.

We use a limited number of third-party services to operate the Site. Each has its own privacy policy:

• ◆Vercel — Hosts the Site. Processes server request logs.
• ◆Supabase — Provides database infrastructure for journal content. Subscriber email addresses are stored here.
• ◆Substack — Used for newsletter distribution. If you subscribed via Substack, their privacy policy governs that relationship.

We do not integrate Google Analytics, Meta Pixel, or any other behavioural tracking or advertising technology.

Subscriber email addresses are retained until you unsubscribe or request deletion. Submission content is retained for as long as necessary for editorial consideration and, if published, indefinitely as part of the journal of record.

Server logs are retained by Vercel in accordance with their data retention policies, typically for a period not exceeding 30 days unless required for security investigation.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• ◆Access — request a copy of the personal data we hold about you
• ◆Rectification — request correction of inaccurate or incomplete data
• ◆Erasure — request deletion of your personal data (“right to be forgotten”)
• ◆Restriction — request that we limit the processing of your data
• ◆Portability — receive your data in a structured, machine-readable format
• ◆Objection — object to processing based on legitimate interests
• ◆Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of prior processing

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt out of sale (we do not sell data). To exercise any of these rights, contact us at editor@conversationsinorthopaedics.com. We will respond within 30 days.

Our infrastructure is operated from the United States. If you access the Site from outside the United States, including from the European Economic Area, your data may be transferred to and processed in the United States. We take reasonable steps to ensure that such transfers comply with applicable data protection law, including relying on Standard Contractual Clauses where required by GDPR.

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), access controls, and database security provided by our infrastructure partners. No method of electronic storage or transmission is completely secure; we cannot guarantee absolute security, and we encourage you to use secure and updated browser software.

This Site is intended for adult healthcare professionals and researchers. We do not knowingly collect personal information from individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date. We encourage you to review this Policy periodically. Continued use of the Site after any change constitutes your acceptance of the updated Policy.

For any privacy-related enquiry, request, or complaint, contact the editorial office:

Conversations In Orthopaedics
editor@conversationsinorthopaedics.com

If you are located in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority.