Privacy Policy

1. Data Controller Information

The data controller responsible for personal information processed through this website is:

2. Scope & Principles of Data Processing

This privacy notice applies to visitors of drentov.site. We adhere strictly to the principles of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We practice data minimisation and do not collect sensitive personal health records through our website.

3. Personal Information We Collect

Depending on your interaction with the website, we may collect:

• Contact Inquiries: Your name, email address, message topic, and the contents of your message when you complete our contact form or email our desk.
• Newsletter Subscriptions: Your email address and timestamp of consent when you voluntarily subscribe to editorial updates.
• Technical Data & Server Logs: IP address, browser type, operating system, referring URL, and timestamp of requests for site security and DDoS prevention.

4. Lawful Bases for Processing

Under Article 6 of the UK GDPR, we rely on the following lawful grounds:

• Consent (Art. 6(1)(a)): For sending our email newsletter and for optional third-party cookie features (such as interactive maps). You can withdraw consent at any time.
• Contract / Pre-contract Steps (Art. 6(1)(b)): To respond to direct inquiries, correction requests, or business communication initiated by you.
• Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraud, monitor server reliability, and manage editorial correspondence.

5. How We Use Your Information

Personal data is used solely to:

• Answer your editorial questions and process correction requests.
• Deliver occasional requested health editorial notes.
• Ensure site security, monitor uptime, and protect against cyber threats.

6. Data Retention Schedule

We retain personal information only as long as necessary for the purpose collected:

• Editorial Correspondence: Retained for up to 24 months following the last communication, then securely deleted.
• Newsletter Records: Retained until you unsubscribe. An anonymous suppression record is kept to ensure no further emails are sent.
• Server & Security Logs: Retained for up to 90 days for firewall and security analysis, then purged automatically.

7. Data Security Measures

We implement appropriate technical and organisational safeguards to protect your personal data, including TLS 1.3 encryption in transit (HTTPS), strict access controls, secure hosting infrastructure, and periodic administrative reviews.

8. Third-Party Service Processors

We engage trusted service providers who process data strictly under written data processing agreements conforming to UK GDPR requirements:

• Cloud Hosting & Infrastructure: Secure web servers and content delivery networks.
• Email Delivery Services: Secure dispatch systems for requested newsletters.
• Interactive Maps: Google Maps (loaded only on affirmative user consent).

9. International Data Transfers

Where any service processor operates outside the United Kingdom, we ensure that transfers are protected by UK adequacy regulations, standard contractual clauses (SCCs / IDTA), or equivalent lawful transfer safeguards.

10. Your UK GDPR Statutory Rights

Under UK data protection law, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure (‘Right to be Forgotten’): Request deletion of your personal data where no legal ground requires retention.
• Right to Restrict Processing: Request temporary restriction of data processing during disputes.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time without affecting past lawful processing.

To exercise any of these rights, email us at [email protected]. We respond to verified requests within one calendar month free of charge.

11. Children's Privacy

This website is intended for adults over 18 (with editorial focus on adults over 40) and is not directed at children. We do not knowingly collect personal data from minors.

12. Cookies and Storage

For detailed information on how we manage session storage, consent banners, and optional tools, please review our comprehensive Cookie Policy.

13. Right to Complain to the Regulator

If you have any concerns regarding how we handle your personal data, please contact our editorial desk first so we can resolve the issue promptly. You also have the right to lodge a complaint with the UK supervisory authority:

14. Policy Updates & Revision Log

This Privacy Policy was reviewed and updated on 22 September 2026. Material updates will be published on this page with an amended review date.

• 1 January 2026: Initial publication.
• 9 September 2026: Reviewed retention schedule and processor safeguards.
• 22 September 2026: Updated domain to drentov.site and contact channels.