1. Data Controller Identification

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), the data controller responsible for personal information processed through keltron.info is:

Keltron Health Ltd
Editorial & Governance Desk: 33 Albion Street, Leeds LS1 1AA, West Yorkshire, United Kingdom
Privacy Contact: Rowan Ellis, Editorial & Governance Lead
Email: [email protected]
Telephone: 0113 946 0404

2. Categories of Information We Collect

We believe in data minimization and collect only information strictly necessary to operate an independent editorial website and respond to reader communications:

  • Direct Inquiries & Editorial Correspondence: When you submit a message through our contact form or email our editorial desk, we collect your full name, email address, message subject, and correspondence details.
  • Technical & Server Log Data: When accessing our web servers, standard log records are automatically generated. These include IP addresses, browser types, operating systems, referring URLs, request timestamps, and HTTP status codes.
  • Cookie Consent State: When you select cookie preferences, a localized preference cookie records your decision.

We do not solicit, collect, or process special category personal data (such as confidential medical records, genetic information, or biometric data) through ordinary web forms.

3. Lawful Bases for Processing

Under Article 6 of the UK GDPR, we process personal data under the following legal bases:

  • Legitimate Interests (Article 6(1)(f)): To maintain web server resilience, detect security vulnerabilities, prevent malicious traffic, and respond accurately to reader inquiries.
  • Consent (Article 6(1)(a)): For non-essential analytics cookies and optional newsletter subscriptions, where explicit consent has been provided and can be withdrawn at any time.
  • Legal Obligation (Article 6(1)(c)): To maintain governance records and comply with applicable statutory or regulatory requirements in the United Kingdom.

4. Data Retention Schedules

We retain personal information only for as long as necessary to fulfil the stated purpose:

  • Editorial & Contact Inquiries: Retained for up to 24 months from the date of final resolution, after which correspondence is securely deleted.
  • Web Server & Security Logs: Retained for a maximum of 90 days for diagnostic and security audits before automated purging.
  • Cookie Consent Choices: Maintained on your local browser for up to 180 days unless cleared manually.

5. Data Subject Rights under UK GDPR

As a resident of the United Kingdom, you are entitled to exercise your statutory rights regarding your personal data:

  • Right of Access (Article 15): Request a copy of the personal data held about you.
  • Right to Rectification (Article 16): Request correction of inaccurate or incomplete records.
  • Right to Erasure (Article 17): Request deletion of your personal data where retention is no longer necessary.
  • Right to Restriction of Processing (Article 18): Request limits on how we process your personal data.
  • Right to Object (Article 21): Object to processing based on legitimate interests.
  • Right to Data Portability (Article 20): Request transfer of your data to another controller in a structured format.

To exercise any of these rights, email your request to [email protected]. We respond to all verified requests without undue delay and within one calendar month in accordance with statutory guidelines.

6. Third-Party Processors & Infrastructure

We partner with reputable infrastructure providers who operate under strict Data Processing Agreements:

  • Hosting & Edge Delivery: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, United States.
  • Email Routing & Communications: Secure transactional mail services operating under encrypted transport standards.

Third parties process data strictly on our instructions and are prohibited from using personal information for independent commercial marketing.

7. International Data Transfers

Where third-party service infrastructure involves data transfers outside the United Kingdom, transfers are conducted under lawful UK transfer mechanisms, such as UK adequacy regulations or the UK International Data Transfer Addendum (IDTA) to approved Standard Contractual Clauses (SCCs), ensuring equivalent data protection safeguards.

8. Children's Privacy Notice

keltron.info is an educational publication intended for an adult audience aged 18 and older. We do not intentionally solicit or collect personal information from children under 13. If you believe a child has submitted personal information, please notify us immediately at [email protected] so we can investigate and remove the data promptly.

9. Data Security & Breach Response

We enforce technical and organisational security measures including HTTPS/TLS 1.3 encryption, least-privilege administrative access, and regular vulnerability scanning. In the unlikely event of a personal data breach posing a risk to individuals, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected data subjects without undue delay.

10. Supervisory Authority & Complaints

You have the right to lodge a complaint with the UK supervisory authority for data protection:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: https://ico.org.uk · Telephone: 0303 123 1113

We encourage you to contact our editorial desk first so we can address and resolve any concerns directly.

11. Revision History

This Privacy Policy was published on 1 January 2026 and last reviewed on 9 September 2026. Material updates will be published on this page with an updated effective date.