Privacy Policy

At Stornev Health Ltd ("Stornev", "we", "us", "our"), we respect your privacy and are committed to protecting the personal data of everyone who interacts with stornev.info. This Privacy Policy details how we collect, handle, store, and protect your information in full accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Details

Stornev Health Ltd is the Data Controller responsible for personal data processed via this website.

Company Name: Stornev Health Ltd
Company Registration No.: 14892341 (England & Wales)
Registered Office: 66 Corn Street, Bristol BS1 1AA, United Kingdom
Data Privacy Inquiries: [email protected]
Telephone: 0117 946 1010

2. Information We Collect

We believe in strict data minimisation. We only collect personal information that you voluntarily provide or that is strictly necessary for website operation:

• Contact Information: When you send a message through our contact form, we collect your name, email address, and message contents.
• Newsletter Subscription Data: When you subscribe to editorial updates, we collect your email address.
• Technical Log Data: When you visit our website, our web servers may log standard technical data (IP address in truncated format, browser user-agent, operating system, referrer URL, and timestamp) for security monitoring and error prevention.

3. Lawful Bases for Processing

Under Article 6 of the UK GDPR, we rely on the following lawful bases:

• Consent (Art. 6(1)(a)): For sending our periodic editorial newsletter and for placing non-essential cookies. You may withdraw your consent at any time.
• Legitimate Interests (Art. 6(1)(f)): For responding to editorial enquiries, investigating reported inaccuracies, ensuring website stability, preventing fraud, and defending legal rights.
• Legal Obligation (Art. 6(1)(c)): Where data retention is required by applicable UK tax, corporate, or regulatory legislation.

4. How We Use Your Data

Your personal data is used solely for the following explicit purposes:

• To respond directly to questions, feedback, or accessibility requests sent to our editorial desk.
• To deliver requested health editorial articles and research updates via email.
• To ensure server security, prevent cyber attacks, and maintain continuous site availability.
• We do not sell, rent, or trade reader personal data to any third party for commercial marketing or advertising profiling.

5. Data Retention Schedules

We keep personal data only for as long as necessary to fulfil the purposes for which it was gathered:

• Editorial Enquiries: Retained for 24 months from the conclusion of correspondence to maintain a consistent record of editorial queries.
• Newsletter Subscriptions: Retained until you click "unsubscribe" or request removal, after which email addresses are purged within 30 days.
• Server Logs: Technical security logs are automatically deleted after 90 days unless required for an ongoing security investigation.

6. Data Processors & Third-Party Services

We may share data with vetted service providers who act as data processors under strict data processing agreements:

• Web Hosting & Infrastructure: Cloud hosting providers that maintain our secure servers in the UK/EEA.
• Email Delivery: Transactional email infrastructure for sending requested newsletters.
• Mapping: Google Maps for displaying our Bristol office location on the contact page.

7. International Data Transfers

Where any technical supplier processes data outside the UK, we ensure appropriate safeguards are in place in compliance with Chapter V of the UK GDPR, such as an official UK Adequacy Decision, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses.

8. Your Legal Rights Under UK GDPR

Under UK data protection laws, you possess the following statutory rights:

• Right of Access (Subject Access Request): The right to request copies of your personal data.
• Right to Rectification: The right to request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data under certain conditions.
• Right to Restrict Processing: The right to request that we restrict processing of your data.
• Right to Object to Processing: The right to object to processing based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Withdraw Consent: You can withdraw consent for newsletters or optional cookies at any time with immediate effect.

9. How to Exercise Your Rights

To exercise any of your data protection rights, please contact our Data Protection Officer at [email protected] or write to Stornev Health Ltd, 66 Corn Street, Bristol BS1 1AA. We will respond within one calendar month without charge.

10. Data Security Protocols

We maintain appropriate physical, electronic, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or accidental loss. All communications between your browser and stornev.info are encrypted using Transport Layer Security (TLS/HTTPS).

11. Incident & Breach Reporting

In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the incident, and notify affected individuals without undue delay where required by law.

12. Children's Privacy

Our website is aimed at adults over the age of 40 and is not intended for children under 18 years of age. We do not knowingly collect personal data from children.

13. Right to Complain to the Regulator

If you believe that our processing of your personal information infringes UK data protection regulations, you have the right to lodge a complaint with the UK supervisory authority:

14. Changes to This Policy

We review this Privacy Policy periodically. The latest version was published on 16 September 2026. Future amendments will be posted directly to this page.