1. Scope and Data Controller
This Privacy Policy explains how Belvorn Health Ltd ("Belvorn", "we", "us", or "our"), operating from 37 Princes Street, Edinburgh EH1 1AA, Scotland, collects, stores, and uses personal data when you visit belvorn.site, subscribe to our newsletter, or correspond with our editorial team.
Belvorn Health Ltd is the Data Controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We only collect personal information that is necessary for providing our editorial publication and responding to enquiries:
- Correspondence Data: Your name, email address, and message content when you use our contact form or email [email protected].
- Subscription Data: Your email address when you voluntarily sign up for our editorial newsletter.
- Technical & Log Data: IP address, browser type, operating system, referring URL, pages viewed, and timestamps collected automatically in web server logs for security and fault diagnosis.
- Consent Preferences: Records of cookie consent choices made through our cookie banner.
We do not collect sensitive special-category health data through ordinary web forms. Please do not submit confidential medical histories in contact messages.
3. Lawful Basis for Processing
Under UK data protection law, we rely on the following lawful bases:
- Consent (Article 6(1)(a) UK GDPR): For sending optional editorial newsletter digests and storing non-essential analytical cookies. You may withdraw consent at any time.
- Legitimate Interests (Article 6(1)(f) UK GDPR): For responding to your enquiries, maintaining website security, preventing fraudulent activity, and ensuring stable server operation.
- Legal Obligation (Article 6(1)(c) UK GDPR): Where retention of specific records is required to comply with statutory legal, accounting, or regulatory requirements.
4. Data Retention Periods
We retain personal information only for as long as necessary to fulfil the stated purpose:
- Contact Enquiries: Retained for up to 12 months after the last correspondence to facilitate follow-up communication.
- Newsletter Subscriptions: Retained until you unsubscribe or after 24 months of total inactivity.
- Server Security Logs: Retained for up to 30 days before automated deletion or anonymisation.
- Compliance & Legal Records: Retained for up to 6 years where required by applicable UK statutory limitation periods.
5. Your Statutory Rights
Under UK GDPR, you possess rights regarding your personal data, including:
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data where no overriding lawful ground exists.
- Right to Restriction of Processing: Ask us to pause processing under certain circumstances.
- Right to Object: Object to processing based on legitimate interests.
- Right to Data Portability: Request transmission of your data in a structured, machine-readable format.
To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We respond within one calendar month.
6. Third-Party Processors
We may share limited data with trusted technical service providers operating under strict data processing agreements:
- Web Hosting & Infrastructure: Cloud server providers ensuring reliable page delivery and technical security.
- Email Dispatch: Secure newsletter and transactional email delivery providers.
- Embedded Maps: Google Maps for displaying our registered Edinburgh location on the contact page.
We do not sell, rent, or trade your personal data to third parties for commercial or advertising purposes.
7. International Data Transfers
Where technical infrastructure involves data processing outside the United Kingdom, Belvorn ensures appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs), approved Standard Contractual Clauses (SCCs), or UK adequacy regulations.
8. Data Security & Incident Management
We employ robust technical and organisational security measures, including SSL/TLS encryption, restricted access controls, firewalls, and regular security audits. In the unlikely event of a personal data breach posing a risk to individuals, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals without undue delay.
9. Children's Privacy
Belvorn is an editorial resource aimed at adults aged 40 and older. We do not knowingly solicit or collect personal information from individuals under the age of 18.
10. Cookies
For complete details on the small text files used on belvorn.site and how to control your preferences, please consult our dedicated Cookie Policy.
11. Complaints and Regulatory Contact
If you have questions or concerns regarding our privacy practices, please first contact us at:
Belvorn Health Ltd
37 Princes Street, Edinburgh EH1 1AA, Scotland, UK
Email: [email protected]
Telephone: 0131 946 0909
You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
12. Review History and Amendments
This policy was reviewed on 9 April 2026. Any material updates will be published on this page with an updated review date.