Data Governance
Privacy Policy
How Stalvon Health Ltd collects, manages and protects your personal information under UK data protection law.
Stalvon Health Ltd ("Stalvon", "we", "us", or "our") is dedicated to safeguarding the privacy and personal data of visitors to stalvon.info. This Privacy Policy details the types of personal data we may collect, the lawful grounds upon which we process it, how it is retained and secured, and your statutory rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Stalvon Health Ltd
Company Registration Number: 14892345 (Registered in England & Wales)
Registered Office: 21 Surrey Street, Sheffield S1 1AA, United Kingdom
Data Protection Contact: [email protected] | 0114 946 0606
1. Information We Collect
We adhere to the principle of data minimisation and only collect personal data that is strictly necessary for our editorial communications and website security:
- Newsletter Subscriptions: Your email address, provided voluntarily when you opt in to receive our monthly health research digest.
- Contact & Editorial Enquiries: Your name, email address, topic, and message content submitted through our contact form or direct email correspondence.
- Technical & Server Logs: Standard web server logs including your IP address, browser user-agent, operating system, requested URL, HTTP status code, and timestamp, used for server diagnostics and security protection.
- Aggregated Analytics Data: Non-personally identifiable visit statistics (page views, session duration, referral pathways), processed with anonymised IP addresses where optional cookies are accepted.
Note: We do not intentionally collect special category data (such as personal medical records or financial payment data) through our website forms. Please do not include confidential health records in standard contact messages.
2. Lawful Basis for Processing
Under Article 6 of the UK GDPR, we process personal information under the following lawful bases:
- Consent (Article 6(1)(a)): For sending monthly newsletter digests and placing optional analytics cookies. Consent may be freely withdrawn at any time.
- Legitimate Interests (Article 6(1)(f)): For responding to editorial correspondence, preventing fraudulent activity, and maintaining website stability and security.
- Legal Obligation (Article 6(1)(c)): Where processing is required to comply with applicable statutory or regulatory requirements in the United Kingdom.
3. Data Retention Periods
We do not retain personal data longer than necessary for the purposes for which it was gathered:
| Data Category | Purpose | Retention Period |
|---|---|---|
| Contact Form Submissions | Responding to queries & editorial feedback | Up to 24 months from resolution |
| Newsletter Subscriptions | Delivering requested monthly editorial digest | Until unsubscription + suppression list |
| Server Security Logs | Network security & bot mitigation | 90 days rolling retention |
| Cookie Preferences | Recording consent choices | Up to 180 days |
4. Third-Party Service Providers (Sub-Processors)
We work with trusted technical partners to operate our platform securely. These suppliers process data strictly on our documented instructions and under binding Data Processing Agreements:
- Hosting & Cloud Infrastructure: Secure web hosting facilities located within the UK and European Economic Area (EEA).
- Email Delivery Services: UK GDPR-compliant dispatch systems for transmitting requested newsletter editions.
- Anonymised Analytics: Privacy-preserving analytics engines configured with IP anonymisation.
5. International Data Transfers
Where third-party service providers process data outside the United Kingdom, we ensure appropriate safeguards are implemented in accordance with UK GDPR Chapter V, including UK International Data Transfer Agreements (IDTAs), standard contractual clauses, or recognised adequacy regulations.
6. Your Statutory Data Protection Rights
Under UK data protection law, you possess key rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal records.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no ongoing lawful ground for processing.
- Right to Restrict Processing: Request temporary suspension of data processing under certain circumstances.
- Right to Data Portability: Request transfer of your data to another organisation in a machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct communications.
To exercise any of these rights, please email our desk at [email protected]. We respond to verified requests within one calendar month without charge.
7. Cookies and Similar Technologies
For detailed information regarding the cookies we use, their lifespans, and how to manage your preferences, please consult our dedicated Cookie Policy. You can adjust your consent at any time via the "Manage Cookie Settings" link in the footer of any page.
8. Right to Lodge a Complaint
If you have concerns about how we handle your personal data, we encourage you to contact us directly so we can resolve the matter promptly. You also have the right to lodge a formal complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our operational practices. The revised version will be published here with an updated effective date.
Published and effective: 9 September 2026. Stalvon Health Ltd.