Privacy

Privacy, explained plainly.

1. Scope

This policy applies to stalvena.info and explains how Stalvena Health Ltd handles information connected with visits, messages and subscriptions. It is written for UK readers and follows the UK GDPR and Data Protection Act 2018. We collect only information relevant to operating an editorial website. This policy was reviewed on 9 September 2026.

2. Information and use

We may receive an email address supplied for the newsletter, contact details included in a message, and technical data such as browser type, approximate location and page requests. We use this information to send requested updates, respond to enquiries, maintain security and understand broad readership patterns. The legal bases are consent, legitimate interests and compliance with a legal obligation where applicable. Newsletter records are removed within 30 days of unsubscribe, enquiry records within 12 months, and security logs within 90 days.

3. Information and use

4. Information and use

5. Information and use

6. Information and use

7. Information and use

8. Information and use

9. Information and use

10. Information and use

11. Your rights

You may request access, correction, deletion, restriction or portability, and may object to certain processing. Send a clear request to [email protected]; we aim to respond within one calendar month. You may complain to the Information Commissioner’s Office if you remain dissatisfied. Service providers helping with hosting, email delivery or analytics receive only the data needed for their task, under contractual safeguards. International transfers use appropriate legal protections.

12. Changes

We record material revisions by date. The current edition was published 9 September 2026; earlier editions were reviewed 1 April 2026 and 5 January 2026. Continued use after a revision means the updated explanation is available to you.

13. Children and young people

Stalvena is intended for adults and does not knowingly invite children to submit personal information. A parent or guardian who believes that a young person has sent details may contact [email protected]. We may request enough information to locate the record while avoiding unnecessary details. Where removal is appropriate, we aim to complete it within 30 days.

a. Do not include another person’s private information.
b. Newsletter subscriptions should be made by the named account holder.
c. A guardian may raise a concern about information supplied by a minor.

14. Processors and international transfers

Providers may include the website host, email delivery, consent tooling and analytics. They receive only information needed for a defined task and operate under contractual safeguards. Some providers may process information outside the United Kingdom, using an applicable lawful transfer safeguard. Further provider information can be requested from [email protected].

15. Security incidents and impact review

If an incident is identified, we record it, contain it and assess likely impact. Where UK law requires notification to the Information Commissioner’s Office, we aim to report without undue delay and, where feasible, within 72 hours of awareness. People affected are contacted promptly where risk requires direct communication. A data protection impact assessment is considered before a new activity that could create a high risk, such as materially different analytics or a new form.

13. Children and young people

Stalvena is intended for adults and does not knowingly invite children to submit personal information. A parent or guardian who believes that a young person has sent details may contact [email protected] so the record can be located and reviewed. We may request enough information to identify the message without asking for additional unnecessary details. Where deletion is appropriate, we aim to complete it within 30 days.

a. Do not include another person’s private information in a contact form.
b. Newsletter subscriptions should be made by the named account holder.
c. A guardian may raise a concern about information supplied by a minor.

14. Processors and international transfers

Service providers may include the website host, an email delivery provider, consent-management tooling and privacy-conscious analytics. Each provider receives only the information needed for a defined task and is expected to protect it under contractual safeguards. Access is limited to delivery, support, security or measurement needs. A current description of provider categories can be requested from [email protected].

Some providers may process information outside the United Kingdom. Where that occurs, Stalvena relies on an applicable adequacy decision, contractual protection or another lawful safeguard recognised by UK data protection law. We consider the nature of the information, access controls and retention settings when reviewing a transfer. Readers may ask for further information about the safeguard used.

15. Security incidents and impact assessment

We use limited collection, access controls and ordinary hosting safeguards to reduce the chance of unauthorised access. If an incident is identified, we record what happened, contain it, assess likely impact and preserve relevant evidence. Where UK law requires notification to the Information Commissioner’s Office, we aim to report without undue delay and, where feasible, within 72 hours of awareness. People affected are contacted promptly where the assessed risk requires direct communication.

A data protection impact assessment is considered before a new activity that could create a high risk, such as materially different analytics or a new information form. The assessment considers purpose, necessity, proportionality, risks and mitigations. It is revisited when the activity changes or a significant incident occurs. These safeguards reduce risk but cannot remove every technical threat.

16. Automated decisions and change record

Stalvena does not use personal information to make solely automated decisions that produce legal or similarly significant effects. Editorial selection and newsletter administration involve human review and ordinary operational rules. If a future service changes this position, the privacy notice will explain the purpose, logic, consequences and available rights before the change takes effect. Readers may ask whether an automated process was involved in handling their request.

The current edition was published 9 September 2026, following reviews on 1 April 2026 and 5 January 2026. Material changes will include a date and a short explanation of the affected topic. Questions about this notice are acknowledged within five working days where possible and rights requests are handled within one calendar month, subject to lawful extensions. The latest version on stalvena.info is the operative version.