Data Governance & Compliance
Privacy Policy
1. Overview & Data Controller
This Privacy Policy explains how Trelvon Health Ltd ("Trelvon", "we", "us", or "our") collects, processes, and protects your personal data when you visit trelvon.info, interact with our editorial content, subscribe to our newsletter, or contact our Coventry editorial office.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is:
Trelvon Health Ltd
29 Broadgate, Coventry CV1 1AA, West Midlands, United Kingdom
Email: [email protected]
Telephone: 024 7946 1414
2. Personal Data We Collect
We believe in strict data minimisation. We only collect personal information that is strictly necessary to provide our editorial service and maintain website security:
- Correspondence Data: When you send a message via our contact form or directly via email/phone, we collect your name, email address, phone number (if provided), and the contents of your message.
- Subscription Data: When you voluntarily subscribe to our editorial updates, we collect your email address.
- Technical & Server Logs: To ensure network security and site stability, our UK-based web servers automatically log IP addresses, browser types, referring pages, device operating systems, and access timestamps.
- Aggregated Analytics: With your consent, we use privacy-preserving analytics cookies that aggregate page views and interaction metrics without building individual user profiles.
Note: We do not intentionally collect special category data (such as confidential medical records or health status) through our general contact forms. Please do not submit confidential medical information.
3. Lawful Bases for Processing
Under UK GDPR Article 6, we process your personal data under the following lawful bases:
- Consent (Art. 6(1)(a)): For sending our monthly editorial newsletter and deploying optional analytics cookies. You may withdraw consent at any time.
- Legitimate Interests (Art. 6(1)(f)): For responding to editorial enquiries, investigating reported corrections, defending against cybersecurity threats, and optimising site performance.
- Legal Obligation (Art. 6(1)(c)): Where processing is required to comply with statutory accounting, regulatory, or legal reporting obligations in Great Britain.
4. Data Retention Schedule
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected:
| Data Category | Retention Period | Action at Expiry |
|---|---|---|
| Newsletter Subscriptions | Until unsubscribed + 24 months suppression record | Permanent erasure from mailing databases |
| Editorial Enquiries & Corrections | 24 months following resolution of query | Secure archiving or deletion |
| Server Security Logs | 90 days (unless subject to ongoing incident investigation) | Automated log rotation and overwriting |
| Cookie Consent Records | 12 months from recorded consent | Prompt for re-consent |
5. Sharing & International Transfers
Trelvon will never sell, lease, or rent your personal information to third parties. We only share information with trusted third-party service providers (data processors) who assist us in operating our site, including:
- Cloud hosting providers and infrastructure management located within the United Kingdom and EEA.
- Email delivery services operating under strict GDPR Data Processing Agreements (DPAs).
- Website security and DDoS protection platforms.
Where any data is processed outside the UK, we ensure adequate protection through UK International Data Transfer Agreements (IDTAs) or standard contractual clauses (SCCs) recognised by the UK Government.
6. Your Statutory Rights Under UK GDPR
As a data subject in the United Kingdom, you have significant rights under data protection laws:
- Right of Access (Subject Access Request): You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You may ask us to correct inaccurate or incomplete personal data.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where there is no compelling legal reason for continued processing.
- Right to Restrict Processing: You may request that we suspend processing your personal data in certain circumstances.
- Right to Data Portability: You may request the transfer of your personal data to another controller in a structured, machine-readable format.
- Right to Object: You have the right to object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please email our privacy team at [email protected]. We respond to all verified requests within one calendar month at no charge.
7. Complaints to the Supervisory Authority (ICO)
If you have any concerns regarding our data handling, we encourage you to contact us directly so we can resolve the issue promptly. You also have the legal right to lodge a formal complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk
8. Contact Our Editorial Desk
For questions regarding this policy or our data practices, contact:
Trelvon Health Ltd — Privacy Desk
29 Broadgate, Coventry CV1 1AA, United Kingdom
Email: [email protected] | Tel: 024 7946 1414