Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Stolvon Health Ltd ("we", "our", or "us") processes personal data when you access stolvon.info, subscribe to our editorial newsletter, or correspond with our editorial team. We are committed to safeguarding the privacy of our visitors in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller Details

The designated Data Controller responsible for your personal data is:
Stolvon Health Ltd
Company Registration No: NI684912
Registered Office: 19 Donegall Square North, Belfast BT1 5GB, Northern Ireland, UK
Email: [email protected]
Telephone: 028 9046 1515

3. Personal Data We Collect

We believe in strict data minimisation. Depending on how you interact with our website, we may collect the following categories of personal data:

• Technical & Log Data: Internet Protocol (IP) address, browser type and version, operating system, referring URL, time stamp, and page interaction metrics collected automatically via secure server logs.
• Enquiry Data: Name, email address, message topic, and the text of your correspondence when you submit a query via our contact form or directly via email.
• Subscription Data: Email address and consent timestamp when you opt-in to receive our monthly editorial note.
• Cookie Consent Preferences: Records of your consent choices stored locally on your device.

4. Lawful Bases for Processing

Under Article 6 of the UK GDPR, we process personal data under the following lawful bases:

• Legitimate Interests (Art. 6(1)(f)): For server maintenance, technical troubleshooting, preventing fraud/abuse, ensuring network security, and aggregating anonymous readership metrics to improve editorial content.
• Consent (Art. 6(1)(a)): For sending our optional monthly email newsletter and for activating non-essential performance cookies where selected. You may withdraw consent at any time.
• Steps Prior to a Contract / Legitimate Communications (Art. 6(1)(b)/(f)): To review, process, and respond to your direct editorial questions or correction requests.

5. How We Use Personal Data

We process personal data solely for defined purposes, including:

• Delivering website content securely and reliably across devices;
• Responding promptly to reader feedback, correction notices, and accessibility enquiries;
• Dispatching our periodic editorial newsletter to subscribed readers;
• Maintaining internal publishing governance and compliance records.

We do not sell, rent, or trade your personal data to third parties, nor do we build behavioural advertising profiles.

6. Data Retention Schedules

We retain personal information only for as long as necessary to fulfil the purposes for which it was gathered:

• Web Server Logs: Retained for a maximum of 90 days, after which they are permanently deleted or anonymised.
• Contact Correspondence: Retained for up to 24 months from the last meaningful communication to allow for appropriate follow-up, then securely purged.
• Newsletter Records: Retained while your subscription is active. Upon unsubscribing, suppression records are kept for up to 36 months solely to ensure no further emails are sent.

7. Data Processors & Third Parties

We may engage trusted third-party service providers (data processors) who assist in hosting our website, delivering emails, or providing security infrastructure. All processors act strictly under written data processing agreements complying with UK GDPR Article 28, ensuring appropriate technical and organisational safeguards.

8. International Data Transfers

Where any technical processor is situated outside the United Kingdom, we ensure that transfer mechanisms recognised under UK data protection laws are in place — such as UK Adequacy Regulations or the UK International Data Transfer Addendum / Standard Contractual Clauses (SCCs).

9. Your Statutory Rights

Under UK data protection law, you possess key rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data under certain conditions.
• Right to Restrict Processing: Request temporary restriction of processing in specific circumstances.
• Right to Object: Object to processing based on our legitimate interests.
• Right to Data Portability: Request transfer of your data to another service where applicable.
• Right to Withdraw Consent: Withdraw consent at any time without affecting previous processing.

To exercise any of these rights, please email [email protected]. We will respond within one calendar month without charging a fee (unless requests are manifestly unfounded or excessive).

10. Cookies & Tracking

Our website utilizes essential cookies necessary for site function and optional analytics cookies to measure aggregated performance. For detailed information regarding cookie categories, lifespans, and how to change your settings, please see our Cookie Policy.

11. Data Security Measures

We maintain robust physical, technical, and managerial safeguards to protect your personal data against accidental loss, unauthorised access, disclosure, or alteration. These include TLS/HTTPS encryption across the entire domain, strict access controls, and regular system patching.

12. Children's Privacy

Stolvon is designed as an adult editorial resource and does not knowingly collect or solicit personal information from individuals under 18 years of age. If you believe a child has provided us with personal data, please contact us for prompt erasure.

13. Automated Decision-Making & Profiling

We do not employ automated decision-making processes or automated profiling that produces legal effects or significantly affects our visitors.

14. Right to Complain to the Regulator

If you have any concerns regarding our handling of your data, we encourage you to contact us first so we can resolve the matter. However, you also have the right to lodge a complaint directly with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk · Helpline: 0303 123 1113

15. Policy Changes & Version History

We may update this Privacy Policy from time to time to reflect changes in our operational procedures or legal obligations. The effective version is always published at this URL with an updated revision date.