Privacy Policy

1. Data Controller & Scope

This Privacy Policy explains how Krenova Health Ltd ("Krenova", "we", "us", or "our"), operating the website https://krenova.info, collects and processes personal information from visitors, readers, and correspondents. Krenova Health Ltd is the data controller responsible for your personal data.

Registered Address: 14 Bold Street, Liverpool L1 1AA, United Kingdom
Email: [email protected]
Telephone: +44 (0)151 946 0808

2. Information We Collect

We only collect personal information that is relevant and necessary for our editorial and communication functions:

• Contact Information: When you submit an inquiry through our contact form or write to us by email, we collect your name, email address, message subject, and the contents of your inquiry.
• Newsletter Subscriptions: When you subscribe to our editorial newsletter, we collect your email address and subscription timestamp.
• Technical & Log Information: When you browse our website, our web servers automatically record technical data including your IP address, browser type, operating system, referring URL, pages viewed, and timestamps. This information is processed for network security, diagnostics, and fraud prevention.
• Cookies & Usage Preferences: Where you interact with our cookie consent manager, we record your consent preferences.

Please note: We do not seek or request sensitive personal data or health records through general public forms. Please do not submit confidential medical information through the contact form.

3. Legal Bases for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

• Consent (Article 6(1)(a)): Used when you explicitly opt-in to receive our email newsletter or choose to activate optional measurement/analytics cookies.
• Legitimate Interests (Article 6(1)(f)): Used to respond to editorial inquiries, maintain site stability, investigate technical issues, ensure security, and improve editorial presentation.
• Legal Obligation (Article 6(1)(c)): Used where necessary to comply with statutory accounting, regulatory reporting, or legal obligations in the United Kingdom.

4. Data Retention Periods

We do not keep personal data longer than necessary for the purposes for which it was gathered:

• Contact Correspondence: Retained for 24 months after the last correspondence to facilitate continuity and review editorial correction logs.
• Newsletter Data: Retained until you unsubscribe. Upon unsubscribing, suppression records may be held for up to 36 months to prevent unsolicited communications.
• Server Technical Logs: Retained for 90 days for network security analysis, after which they are automatically purged.
• Cookie Consent Records: Retained locally on your browser for up to 180 days.

5. Your Rights Under UK GDPR

Under UK data protection law, you possess key rights regarding your personal data:

• Right of Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete personal records.
• Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data where there is no overriding legal ground to retain it.
• Right to Restrict Processing: You can request the temporary suspension of processing under certain circumstances.
• Right to Data Portability: You can receive your personal data in a structured, commonly used format.
• Right to Object: You can object to data processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting past lawful processing.

To exercise any of these rights, please write to our Data Privacy team at [email protected]. We will respond within one calendar month in accordance with statutory guidelines.

6. Third-Party Service Processors

We work with trusted technical partners to deliver website infrastructure and services. Processors are bound by strict data processing agreements and data protection standards:

• Web Hosting: Secure cloud infrastructure providers managing server storage and data transmission.
• Email Dispatch: Transactional and newsletter email delivery providers.
• Map Services: Embedded Google Maps on our contact page, which loads external resources subject to Google's privacy policy.

We never sell, rent, or trade personal information to third parties for marketing purposes.

7. Cookies & Tracking Technologies

Our website utilizes cookies to ensure platform reliability and measure readership. We categorise cookies into:

• Strictly Necessary: Essential for site routing and consent persistence.
• Optional Analytics: Anonymised readership measurement (disabled by default until you grant consent).

For complete information on cookie categories, lifespans, and how to manage your preferences, please view our Cookie Policy.

8. International Data Transfers

Where third-party service providers process technical data outside the United Kingdom, we ensure appropriate safeguards are established, such as UK Adequacy Regulations, the UK International Data Transfer Agreement (IDTA), or standard contractual clauses ensuring an equivalent level of protection.

9. Information Security & Breach Protocol

We employ administrative, physical, and technical safeguards, including TLS 1.3 encryption for data in transit, strict role-based access controls, and periodic server audits. In the unlikely event of a personal data breach posing a risk to individuals, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals where legally required.

10. Children's Privacy

Our publication is intended exclusively for an adult audience (adults over 40). We do not knowingly solicit or collect personal information from individuals under the age of 18. If you believe a minor has provided information through our website, please contact us immediately so we can remove it.

11. Questions & Supervisory Authority

If you have any questions or concerns regarding this policy, please contact us at [email protected] or call 0151 946 0808.

If you are dissatisfied with our response, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk | Helpline: 0303 123 1113

12. Policy Changes

We may update this policy periodically to reflect changes in our editorial practices or statutory regulations. Any revisions will be published on this page with an updated revision date.