Privacy Policy

1. Scope & Data Controller

This Privacy Policy explains how Grenvol Health Ltd collects, uses, and safeguards information in connection with grenvol.site. It applies to website visitors, newsletter subscribers, and individuals who correspond with our editorial team. The data controller is Grenvol Health Ltd, 56 Buchanan Street, Glasgow G1 1AA, Scotland, UK.

2. Information We Collect

We collect only the minimum personal information required to deliver our editorial services:

• Newsletter subscription: Your email address and subscription timestamp.
• Contact form submissions: Your name, email address, and message content.
• Technical server logs: Anonymised IP addresses, browser user agent, requested URLs, and access timestamps for security and operational monitoring.

We do not collect sensitive health records or financial information via this website.

3. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we process your personal data under the following lawful bases:

• Consent: For optional newsletter subscriptions and non-essential cookies. You may withdraw consent at any time.
• Legitimate Interests: For technical security, fraud prevention, server diagnostics, and responding to general enquiries.
• Legal Obligation: Where required by statutory obligations, record-keeping, or regulatory compliance.

4. Data Retention Periods

We retain personal information only for as long as necessary for the purpose collected:

• Newsletter data: Retained until you unsubscribe or 12 months after inactivity.
• Contact enquiries: Retained for 24 months to address ongoing dialogue.
• Technical security logs: Retained for 90 days, unless required for active security investigations.
• Compliance records: Limited records of data rights requests may be kept for up to 6 years for regulatory accountability.

5. Your Rights Under UK GDPR

As an individual in the United Kingdom, you have specific rights regarding your personal information:

• The right of access to a copy of your personal data.
• The right to rectify inaccurate or incomplete records.
• The right to erasure ("right to be forgotten") where data is no longer needed.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at [email protected]. We aim to respond within one calendar month.

6. Data Processors & Service Providers

We may share data with vetted third-party technical providers operating under strict data processing agreements, including web hosting, secure email dispatch, and privacy-conscious analytics. Providers process data solely on our instructions and cannot use it for their own purposes.

7. International Data Transfers

Where service providers store data outside the UK, we ensure adequate protection through UK Adequacy Regulations, the UK International Data Transfer Agreement (IDTA), or approved Standard Contractual Clauses with necessary supplementary measures.

8. Data Minimisation & Accuracy

We ask that visitors avoid sending confidential health records through general contact forms. If your email address or details change, please inform us so our records remain accurate.

9. Cookies & Tracking Technologies

We use essential cookies for core functionality and consent management, as well as optional analytics cookies where consented. Full details and management options are provided in our Cookie Policy.

10. Minors & Automated Decisions

Grenvol is intended for adults aged 18 and over. We do not knowingly collect personal information from minors. We do not use personal data for automated decision-making or profiling with legal effects.

11. Security & Incident Management

We employ TLS/HTTPS encryption, strict access controls, firewalls, and regular security reviews. In the event of a personal data breach posing risk to individuals, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals as required.

12. Complaints, Contact & Revision Record

If you have any questions or concerns about how your data is handled, please contact our data protection team first at [email protected].

You also have the right to lodge a complaint with the UK supervisory authority: Information Commissioner's Office (ICO) at ico.org.uk.

Grenvol Health Ltd
56 Buchanan Street, Glasgow G1 1AA, United Kingdom
Email: [email protected] · Telephone: 0141 946 0505
Revision record: Reviewed 9 September 2026; Initial publication 1 January 2026.