Privacy, explained plainly.

1. Scope

This policy describes how Drelvon Health Ltd handles information when visitors use drelvon.site, contact our editorial team or subscribe to updates. It applies to readers in the United Kingdom and visitors worldwide. The site is intended for adults and does not seek sensitive personal health details. We review this policy when our pages, suppliers or legal duties change.

2. Information collected

We may receive an email address when a reader subscribes to updates, plus the name and message supplied through the contact form. Basic technical information such as browser type, approximate region and pages viewed may be processed through standard hosting server logs. We do not collect or request special-category health data through public forms.

3. Lawful basis for processing

Under the UK GDPR, we rely on the following lawful bases:

• Consent: for optional newsletter subscriptions and non-essential cookies. Consent can be withdrawn at any time.
• Legitimate interests: for site security, technical maintenance, and responding to reader enquiries.
• Legal obligation: where UK law requires us to retain specific accounting, compliance or dispute records.

4. Data retention

Newsletter contact details remain until unsubscribe, or for 24 months after the last meaningful interaction. Contact enquiries are normally retained for 12 months after closure. Server security logs are generally kept for up to 90 days. Records needed for accounting or legal compliance may be kept for up to six years.

5. Your rights under UK GDPR

You have the right to request access to, correction of, deletion of, or restriction of your personal information, as well as data portability and objection to processing where applicable. To exercise any of these rights, email [email protected] with sufficient detail to identify your request. We aim to respond within one calendar month.

6. Processors and service providers

Drelvon may use selected service providers for website hosting, email distribution, security monitoring, form handling and mapping (Google Maps on the contact page). Each provider receives only the minimal information required for their service under written data protection terms. We do not sell reader information or provide it to third parties for commercial advertising.

7. Cookies

Session cookies may last until the browser closes. Preference cookies may last up to 12 months. Optional analytics cookies, where enabled, may last up to 13 months. Please see our Cookie Policy for complete details and controls.

8. International transfers and safeguards

Where service providers process limited data outside the United Kingdom, Drelvon ensures appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to standard contractual clauses.

9. Security and incident response

We implement technical and organizational measures, including HTTPS encryption, restricted administrative access, and regular security audits. If a personal data incident occurs that requires notification under UK GDPR, we will notify the Information Commissioner’s Office (ICO) without undue delay and, where feasible, within 72 hours.

10. Children's privacy

Drelvon is designed for adults over 40 and does not knowingly collect information from children under 16. If a parent or guardian believes a child has supplied details, please contact us at [email protected] so the record can be promptly removed.

11. Complaints

If you have questions or concerns about how we handle your data, please contact us first at [email protected]. You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at ico.org.uk.

12. Revision history

This policy was reviewed on 9 September 2026. Any material updates will be posted on this page with an updated revision date.

• First published: 9 September 2026
• Current review: 9 September 2026
• Next routine review target: September 2027