Policy · Updated 9 September 2026

Privacy Policy

How Keltron Health Ltd handles information on keltron.info. Data protection queries are handled by Rowan Ellis, Privacy Contact, at [email protected].

1. Scope

This policy covers information collected when you visit keltron.info, contact the editorial desk or subscribe to updates. It applies to Keltron Health Ltd, 33 Albion Street, Leeds LS1 1AA.

2. Information collected

We may receive an email address, name and message when you submit a form. Server logs can include an IP address, browser type, requested page and time. We do not request special category information through ordinary forms.

3. Legal basis

We use consent for optional newsletter messages and necessary interests for site security and response handling. You may withdraw consent by contacting [email protected].

4. Retention

Contact correspondence is normally retained for 24 months after closure. Subscription records are retained until withdrawal, then removed within 30 days. Security logs are normally retained for 90 days.

5. Rights

UK GDPR rights can include access, correction, deletion, restriction, objection and portability where applicable. Send a request to [email protected] with enough detail for us to identify the record. We respond without undue delay and normally within one month.

6. Processors

Vercel Inc. provides hosting and delivery, the site’s email service provider handles contact messages, and any separately enabled analytics or security provider may process limited information under written terms. Suppliers receive only what is required for their function.

7. Cookies

Session cookies may last until the browser closes. Preference cookies may last up to 180 days. Optional analytics cookies are used only where selected and may last up to 13 months. See the Cookie Policy for detail.

8. International transfers

Some suppliers may process data outside the UK. Where this occurs, Keltron relies on an adequacy decision or appropriate safeguards such as approved contractual clauses.

9. Children

The site is intended for adults and does not knowingly collect information from children. If you believe a child has submitted information, contact us so it can be reviewed.

10. Complaints

You may contact the Information Commissioner’s Office if you remain concerned after contacting us. Keltron welcomes the opportunity to resolve a question first.

11. Changes

Revision history: 1 January 2026, policy published; 9 September 2026, contact retention wording reviewed. Future changes will appear on this page with a new date.

9. International transfers

Some suppliers may process limited information outside the United Kingdom. Where that occurs, Keltron Health Ltd will use a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, and will assess the circumstances before the transfer is made.

a) Access is limited to the supplier’s stated service purpose.
b) Transfers are reviewed when a supplier or service changes.
c) You may ask for general information about the safeguard used.

10. Breach response

Keltron Health Ltd maintains a proportionate process for identifying, containing and reviewing personal-data incidents. Where a reportable breach presents a risk to individuals, the relevant supervisory authority will be considered within the applicable 72-hour period, and affected people will be contacted where the law requires or where communication is appropriate.

Reports about possible loss, unauthorised access or accidental disclosure should be sent to [email protected] with the subject “Data protection concern”. We aim to acknowledge such a report within two working days and will provide an update when the initial review is complete.

11. Children and young people

Keltron is intended for a general adult audience and does not knowingly invite children to submit personal information. We do not use ordinary forms to request age, school or family information. If a parent or guardian believes that a young person has sent personal data, they can contact 33 Albion Street, Leeds LS1 1AA or [email protected] so the record can be reviewed and, where appropriate, removed.

Any request involving a child’s information will be considered carefully, including the child’s age, the nature of the data and the legal basis for keeping it. Verification may be requested before a record is changed.

12. Automated decisions, profiling and complaints

Keltron does not use personal information to make solely automated decisions with legal or similarly significant effects. Optional analytics, where selected, are used for broad measurement rather than individual profiling. We do not sell personal information or use newsletter data for unrelated targeting.

You can raise a concern with the Information Commissioner’s Office after contacting us, using the details published at ico.org.uk. We aim to respond to rights requests within one month, with an extension explained where a request is complex or numerous. This policy was reviewed on 9 September 2026, and future material changes will be dated in a revision note. The revision note will identify changes to collection, retention, suppliers or user rights in plain language. Minor formatting changes may not be listed individually.

13. Data protection impact reviews

Keltron Health Ltd will consider whether a proposed processing activity requires a Data Protection Impact Assessment before it is introduced. This consideration may cover a new analytics service, a substantial change to a contact workflow or processing that could create a higher risk to individuals. The assessment would describe the purpose, necessity, risks and safeguards in proportion to the activity. It would not be used to collect additional information simply because a review was completed.

Where a supplier is changed, the review will consider access controls, retention, security arrangements and the location of processing. Relevant records may be retained for the period needed to demonstrate responsible governance. Readers can ask general questions about this process by writing to [email protected].

14. Sub-processors and service changes

Hosting, email delivery, security and optional measurement providers may use carefully controlled sub-processors to provide their services. Keltron Health Ltd expects those providers to give notice of material changes and to apply written confidentiality and security obligations. A supplier will receive only the information needed for its stated function. We do not permit unrelated use of contact or subscription information.

Supplier lists may change as services are reviewed, so this policy describes categories rather than claiming that a particular provider will remain in place indefinitely. Material changes that affect people’s rights will be reflected in a dated policy update. Questions about a current supplier category can be sent to 33 Albion Street, Leeds LS1 1AA.