1. Data Controller

This Privacy Policy applies to the website kreltov.info and any correspondence sent to our Portsmouth office.

Data Controller: Kreltov Health Ltd
Registered Address: 17 Commercial Road, Portsmouth PO1 1AA, United Kingdom
Data Protection Email: [email protected]
Telephone: 023 9219 4718

2. Personal Data We Collect

We practice strict data minimisation and collect only information necessary for our editorial services:

  • Contact Enquiries: When you submit a message through our contact form, we collect your full name, email address, subject choice, and message content.
  • Newsletter Subscriptions: When you subscribe to our optional editorial updates, we store your email address and consent timestamp.
  • Server Logs & Security: Our web hosting infrastructure automatically logs standard technical metadata (IP address, browser user-agent, pages requested, referring URL, timestamp) for security monitoring and fraud prevention.

3. Lawful Basis for Processing (UK GDPR)

We process personal data under the following lawful bases set out in Article 6 of the UK GDPR:

  • Consent (Art 6(1)(a)): For optional newsletter subscriptions and non-essential cookies. You may withdraw consent at any time.
  • Legitimate Interests (Art 6(1)(f)): For maintaining website security, diagnosing technical errors, and defending against cyber threats.
  • Steps Prior to Contract / Direct Response (Art 6(1)(b)): For addressing and replying to direct editorial or reader inquiries sent to us.

4. Data Retention Schedules

Data Category Retention Period Purpose
Newsletter Subscriptions Until unsubscribe or 24 months of inactivity Delivering requested editorial notes
Contact Enquiries 12 months following resolution Editorial correspondence & audit trail
Server Security Logs Up to 90 days Site defence & intrusion detection
Cookie Consent Records Up to 12 months Demonstrating PECR/GDPR compliance

5. Your Rights Under UK Data Protection Law

Under the UK GDPR and the Data Protection Act 2018, you possess the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal details.
  • Right to Erasure: Request deletion of your personal data where retention is no longer justified.
  • Right to Restrict Processing: Request temporary pause on processing under certain legal grounds.
  • Right to Data Portability: Obtain your provided data in a structured, machine-readable format.
  • Right to Object: Object to processing carried out under legitimate interests.

To exercise any of these rights, email our team at [email protected]. We respond to verified requests within one calendar month.

6. Third-Party Service Processors

We work with trusted third-party providers who process data strictly under contractual data protection terms:

  • Web Hosting: Cloud hosting infrastructure in compliance with UK/EU data standards.
  • Google Maps & Fonts: Google Ireland / Google LLC for location map embedding (loaded only upon reader consent) and typography delivery.

We do not sell, rent, or trade reader personal data to advertisers, data brokers, or commercial third parties.

7. International Data Transfers

Where any processor transfers data outside the United Kingdom, we ensure adequate safeguards are in place, such as UK Adequacy Regulations or the UK International Data Transfer Agreement (IDTA).

8. Right to Lodge a Complaint with the ICO

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: https://ico.org.uk | Tel: 0303 123 1113

9. Updates to this Policy

This policy was published and reviewed in September 2026. Any material updates will be clearly reflected on this page with an updated review date.