This policy explains how Health Shelf handles personal data in accordance with UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Health Shelf (“we”, “us”, “our”) is operated by H5Health Ltd, a company registered in England & Wales (company no. 10706231). For any question or request about your privacy or personal data, contact us at healthshelforg@gmail.com.
The personal data we collect
- The contact form: the form asks only for a free-text message and does not request your name, email, or any other identifying details. It is intended for anonymous suggestions and comments, and we are not able to reply to it. We ask that you do not include personal details in your message.
- Technical data: when you visit the site, our hosting provider automatically processes limited technical information (such as your IP address and browser type) to deliver and secure the website.
- Cookies and similar technologies: see our Cookie Policy. Embedded videos are loaded in Vimeo’s “do not track” mode, which is designed to avoid tracking and analytics cookies.
We do not intentionally collect special category (health) data or other identifying information through this website, and we ask that you do not send sensitive personal or clinical details through the contact form.
How and why we use your data (lawful basis)
- To read and consider suggestions and comments sent via the form — lawful basis: our legitimate interests in improving the website. The form is anonymous, so we cannot and do not use it to contact you.
- To operate, secure, and maintain the website — lawful basis: our legitimate interests in running a safe, functioning site.
- Cookies — we do not use advertising or analytics cookies, and embedded video is loaded in “do not track” mode. If we were ever to use non-essential cookies, we would ask for your consent first, which you could withdraw at any time.
Who we share it with
We do not sell your personal data. We use trusted service providers (“processors”) who act on our instructions, including:
- Netlify — website hosting and contact-form processing. Messages submitted through the form are stored on Netlify’s platform so we can read them.
- Vimeo — video hosting for embedded videos you choose to play.
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK-approved transfer mechanisms) as required by law. We may also disclose data if required by law or to protect our legal rights.
How long we keep it
We keep form submissions only as long as needed to consider the suggestion or comment, then delete them. Technical logs are kept for a short period by our hosting provider.
Your rights
Under UK data protection law you have the right to access your data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and, where we rely on consent, to withdraw it at any time. To exercise any of these rights, contact us at healthshelforg@gmail.com.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would welcome the chance to resolve any concern first.
Security
We take reasonable technical and organisational measures to protect personal data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children
This website is intended for adults (18+) and is not directed at children. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. The “last updated” date below shows when it was last changed.
Related
Last updated: 22 July 2026.