1. Data Controller & Scope

This Privacy Policy explains how Draltov Health Ltd (Company Registration: 1234567, 31 Above Bar Street, Southampton, SO14 1AA, UK) handles personal information submitted through draltov.site. It applies to site visitors, newsletter subscribers, and individuals contacting our editorial desk.

  • Browsing informational articles does not require user registration.
  • Contact and subscription forms collect only data necessary for editorial correspondence.
  • Our privacy framework complies strictly with UK GDPR and the Information Commissioner's Office (ICO) guidelines.

2. Personal Data We Collect

We collect personal information solely when voluntarily provided, including:

  • Contact Enquiries: Name, email address, and message content sent via web forms or direct email.
  • Newsletter Subscriptions: Email address provided for receiving editorial health updates.
  • Technical Log Data: Anonymised IP addresses, browser types, device categories, referring pages, and access timestamps for cyber security and server diagnostic purposes.

3. Lawful Bases for Processing

Under Article 6 of the UK GDPR, we process personal data based on:

  • Consent: For distributing requested editorial newsletter updates. Consent may be withdrawn at any time.
  • Legitimate Interests: For answering correspondence, improving content quality, and securing our hosting infrastructure against malicious activity.
  • Legal Obligation: For maintaining compliance with applicable UK corporate and taxation laws.

4. Data Retention Periods

We retain personal information only for as long as necessary to fulfil the stated purposes:

  • Contact Messages: Retained for up to 12 months after resolution of correspondence.
  • Newsletter Subscriptions: Retained until unsubscription, after which records are suppressed to prevent future mailings.
  • Server Logs: Retained securely for up to 90 days before automatic cyclical deletion.

5. Processors and International Transfers

We work with trusted technical service providers (including secure cloud hosting, transactional email delivery, and consent management) under strict Data Processing Agreements. Where data is processed outside the UK, appropriate safeguards (such as the UK International Data Transfer Agreement or standard contractual clauses) are enforced. We never sell or rent personal data to third-party marketers.

6. Your Data Rights Under UK GDPR

UK residents possess statutory rights regarding their personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete records.
  • Right to Erasure: Request deletion of your personal data where lawful grounds apply.
  • Right to Restriction & Objection: Object to or restrict specific processing activities.

To exercise any of these rights, please contact our Data Protection Lead at [email protected]. We respond to verified requests within one calendar month.

7. Complaints & Supervisory Authority

If you have questions or concerns regarding our privacy practices, please contact us first at [email protected]. You also have the statutory right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Policy Updates

This Privacy Policy was reviewed and updated on 9 September 2026 for deployment on draltov.site.