Privacy Policy

1. Introduction & Data Controller

This Privacy Policy explains how Stalvena Health Ltd ("Stalvena", "we", "us", or "our"), based at 48 High Street, Oxford OX1 1AA, United Kingdom, processes personal data collected through our website stalvena.info, newsletter subscriptions, and correspondence.

We are dedicated to safeguarding your privacy and ensuring transparency in all our data handling practices in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

2. Personal Data We Collect

We only collect the minimal personal information necessary to deliver and improve our editorial service:

• Correspondence Data: Your name, email address, phone number (if provided), and the content of your enquiry when you submit our contact form or email us at [email protected].
• Newsletter Subscription Data: Your email address and subscription timestamp when you sign up to receive our monthly journal essays.
• Technical & Log Data: Internet Protocol (IP) address (anonymised), browser type and version, operating system, referring URL, pages visited, date and time of request, and server log details.
• Consent Preferences: Records of your cookie consent choices stored via your browser's local storage.

3. Lawful Bases for Processing (UK GDPR Art. 6)

We process your personal information under the following lawful bases:

• Consent (Art. 6(1)(a)): When you voluntarily subscribe to our email newsletter or accept optional analytics cookies via our consent banner. You may withdraw consent at any time.
• Legitimate Interests (Art. 6(1)(f)): To respond to reader enquiries, ensure website security, protect against fraud or misuse, and understand aggregate readership engagement to maintain our editorial quality.
• Legal Obligation (Art. 6(1)(c)): To comply with applicable UK statutory, financial, accounting, or regulatory requirements.

4. How We Use Your Information

Your data is used strictly for legitimate editorial and administrative purposes:

• To provide, operate, and maintain our website;
• To send you our editorial newsletter (only where requested);
• To respond directly to questions, feedback, or editorial corrections;
• To monitor website performance, diagnose technical errors, and optimize site speed;
• To comply with regulatory standards and legal duties.

5. Data Retention Periods

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy:

• Newsletter subscriptions: Retained until you unsubscribe. Unsubscribe requests are processed immediately and removed within 30 days.
• Contact enquiries: Retained for 12 months following resolution to maintain correspondence context, after which they are securely deleted.
• Technical server logs: Retained for a maximum of 90 days for security auditing, after which they are permanently deleted or fully aggregated.
• Cookie consent records: Retained for up to 180 days in your browser storage.

6. Sharing and Third-Party Processors

Stalvena does not sell, rent, or trade your personal information to third parties or marketing brokers. We may share data with vetted third-party service providers who assist us under strict data processing agreements:

• Web Hosting & Infrastructure: Secure servers located within the United Kingdom and EEA.
• Email Delivery Providers: Trusted platforms managing newsletter distribution under confidentiality agreements.
• Analytics Providers: Privacy-focused analytics operating with IP anonymisation.

7. International Data Transfers

Where third-party service providers process data outside the United Kingdom, we ensure appropriate safeguards are established in compliance with Chapter V of the UK GDPR, including UK International Data Transfer Agreements (IDTAs) or adequacy regulations.

8. Security Measures

We implement appropriate technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS 256-bit encryption for data in transit, strict access control, regular server patching, and minimal data collection protocols.

9. Your Legal Rights Under UK GDPR

As a data subject in the UK, you possess key statutory rights:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your data where no overriding legal basis applies.
• Right to Restrict Processing: You can request restriction of data processing under certain circumstances.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time with immediate effect.

To exercise any of these rights, please email our Data Protection Lead at [email protected]. We respond to all verified requests within one calendar month, free of charge.

10. Children's Privacy

Stalvena is intended for adults aged 18 and over, particularly those navigating midlife health after 40. We do not knowingly collect or solicit personal information from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately for prompt deletion.

11. Complaints to the Information Commissioner's Office (ICO)

If you have concerns regarding how we handle your personal data, we encourage you to contact us first at [email protected] so we can address the issue. You also have the right to lodge a formal complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk

12. Changes to This Policy

We review and update this Privacy Policy periodically to reflect technological, operational, or legal developments. The current version was updated on 16 September 2026. Any material revisions will be reflected on this page with a revised effective date.