Data Controller & Privacy Desk

Grenova Health Ltd is the data controller for personal data collected through grenovaay.info and related editorial correspondence. We are committed to protecting your personal information and handling it in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy enquiries, requests to exercise your rights, or questions about data handling, you can contact our privacy desk at [email protected] or write to 15 Clerkenwell Road, London EC1A 1BB.

1. Scope of this Policy

This Privacy Policy explains how Grenova Health Ltd collects, processes, stores and protects personal information when you browse grenovaay.info, submit enquiries through our contact forms, or correspond with our editorial team. It does not apply to external websites linked from our articles.

2. Information We Collect

We only collect the minimal personal data necessary to operate our website and communicate with you:

  • Correspondence data: Name, email address, and message contents when you contact us via our contact form or editorial email.
  • Technical data: IP addresses, browser types, and standard server log timestamps collected automatically for technical maintenance and security protection.
  • Preference data: Your cookie consent selection recorded via our cookie notice.

3. Lawful Bases for Processing

Under UK GDPR, we process personal data under the following lawful bases:

  • Legitimate Interests (Article 6(1)(f)): To respond to your enquiries, maintain website security, prevent fraud, and manage editorial correspondence.
  • Consent (Article 6(1)(a)): For optional communication or preference storage where you have provided explicit consent.
  • Legal Obligation (Article 6(1)(c)): To comply with statutory requirements, accounting regulations, or lawful regulatory notices.

4. How We Use Your Information

We use personal data strictly for legitimate operational and editorial purposes: to reply to reader enquiries and correction requests, to monitor server health, and to safeguard against abusive or malicious traffic. Grenova never sells, rents, or monetises personal data.

5. Data Retention Periods

  • General Enquiries & Corrections: Retained for 12 months after the matter is resolved to allow for consistent follow-up.
  • Technical & Security Server Logs: Retained for up to 90 days before automated deletion, unless required for a specific security investigation.
  • Cookie Preferences: Retained locally on your device for up to 365 days.

6. Service Providers and Sub-Processors

We work with vetted technical service providers for website hosting, email transmission and infrastructure security. All providers operate under strict data protection agreements ensuring that personal data is handled securely and only in accordance with our instructions.

7. International Data Transfers

Where technical service providers process data outside the United Kingdom, transfers are made in reliance on UK Adequacy Regulations, standard contractual clauses approved by the Information Commissioner’s Office (ICO), or equivalent lawful transfer mechanisms.

8. Your Rights Under UK GDPR

You have statutory rights regarding your personal information, including:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete information.
  • Right to Erasure: Request deletion of your personal data where no lawful override exists.
  • Right to Restrict Processing: Request a pause on processing in certain circumstances.
  • Right to Object: Object to processing based on our legitimate interests.
  • Right to Data Portability: Request transmission of your data in a structured, commonly used format.

To exercise any of these rights, email [email protected] with "Data Protection Request" in the subject line. We will acknowledge your request within 5 working days and respond substantively within one calendar month.

9. Security Measures

We implement technical and organisational measures—including transport layer security (HTTPS), strict access controls, and regular review of infrastructure—to protect personal data against unauthorised access, alteration, disclosure or loss.

10. Children’s Privacy

Grenova is an editorial health resource intended for adults aged 18 and over. We do not knowingly solicit or collect data from children under 16. If you believe a minor has submitted personal information, please contact us for prompt removal.

11. Complaints to the Regulator

If you have any concerns regarding how we handle your personal data, please contact us first so we can address your issue promptly. You also have the right to lodge a complaint with the UK data protection supervisory authority: the Information Commissioner’s Office (ICO) at ico.org.uk.

12. Changes to this Privacy Policy

We review this policy regularly to reflect updates in operational practices or legal requirements. Any revisions will be published on this page with an updated review date. Review log: 9 September 2026 — full compliance review and contact details verified.