Privacy Policy

Grelvon Health Ltd ("Grelvon", "we", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you about how we look after your data when you visit grelvon.info, subscribe to our editorial newsletter, or contact our team.

1. Scope and Data Controller

This Privacy Policy applies to personal data collected through grelvon.info. The data controller responsible for your personal data is:

Grelvon Health Ltd
55 Pilgrim Street, Newcastle NE1 1AA, United Kingdom
Email: [email protected]
Telephone: 0191 946 1616

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identity and Contact Data: Name, email address, and correspondence content when you submit an enquiry form or subscribe to our reading list.
  • Technical and Usage Data: Internet protocol (IP) address, browser type, operating system, time zone, and page interaction data collected via standard server logs and consented analytics.
  • Consent Preferences: Records of your cookie and communication choices.

3. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we process data based on:

  • Consent (Art. 6(1)(a)): For sending our newsletter and setting non-essential cookies. You may withdraw consent at any time.
  • Legitimate Interests (Art. 6(1)(f)): For responding to your enquiries, maintaining site security, preventing spam, and improving editorial content.
  • Legal Obligation (Art. 6(1)(c)): Where required to comply with statutory or regulatory requirements.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Newsletter Subscriptions: Retained until you unsubscribe or after 24 months of total email inactivity.
  • Contact Enquiries: Retained for 24 months from resolution for editorial record-keeping.
  • Server Logs: Automatically purged within 90 days.

5. Your Legal Rights

Under UK data protection law, you have rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure ("Right to be forgotten"): Request deletion of your data where no lawful ground for continuing processing exists.
  • Restriction & Objection: Object to processing based on legitimate interests or request processing restriction.
  • Data Portability: Request transfer of your data in a structured, commonly used format.

To exercise any of these rights, email [email protected]. We aim to acknowledge requests within 5 business days and respond substantively within one calendar month.

6. Data Processors and Third Parties

We engage trusted service providers acting under binding data processing agreements:

  • Hosting: Vercel, Inc. (secure web infrastructure).
  • Mapping: Google LLC (consent-gated map embed).
  • Email Delivery: Transactional and editorial email services.

We do not sell, rent, or trade your personal data to third parties for commercial marketing.

7. International Data Transfers

Where third-party service providers process data outside the UK, we ensure appropriate safeguards are implemented, such as UK International Data Transfer Addendums (IDTA) or UK adequacy regulations.

8. Cookies and Tracking

For detailed information on the cookies we use and how to adjust your preferences, please consult our Cookie Policy.

9. Security and Breach Management

We implement technical and organizational security measures including TLS encryption, restricted access controls, and regular vulnerability monitoring. In the event of a reportable personal data breach under UK GDPR, we will notify the Information Commissioner’s Office (ICO) within 72 hours and inform affected individuals where high risk exists.

10. Children's Privacy

Our website and editorial publications are intended for adults over 40. We do not knowingly collect personal data from individuals under 18 years of age.

11. Complaints

If you have any concerns regarding how we handle your data, please contact us at [email protected] so we can resolve the matter. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk.

12. Changes to This Policy

This policy was published on 9 September 2026 (Version 1.0). Any material updates will be published on this page with an updated revision date.