This policy explains how Health Shelf handles personal data in accordance with UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Health Shelf (“we”, “us”, “our”) is operated by H5Health Ltd, a company registered in England & Wales (company no. 10706231). For any question or request about your privacy or personal data, contact us at healthshelforg@gmail.com.
The personal data we collect
- The contact form: the form asks only for a free-text message and does not request your name, email, or any other identifying details. It is intended for anonymous suggestions and comments, and we are not able to reply to it. We ask that you do not include personal details in your message.
- Recipe feedback: the feedback form on each recipe asks for a star rating, whether you have made the recipe, any tips or suggestions, and, if you choose, your first name only. It also sends us the name of the recipe and a link to it. It does not ask for your email or other contact details, and we cannot reply to it. We ask that you do not include your full name or any other personal details. Before sending, you agree that your feedback, and your first name if you gave one, may be shown on that recipe on Health Shelf.
- Technical data: when you visit the site, our hosting provider automatically processes limited technical information (such as your IP address and browser type) to deliver and secure the website.
- Cookies and similar technologies: see our Cookie Policy. Embedded videos from YouTube and Vimeo load only when you press play, and then in each provider’s privacy-enhanced mode.
We do not intentionally collect special category (health) data or other identifying information through this website, and we ask that you do not send sensitive personal or clinical details through the contact or feedback forms.
The 28 Day Plan tracker
Everything you enter in the 28 Day Plan tracker, such as your name if you give one, your daily ticks and notes, your reviews and your why, is kept only on your own device, in your browser’s local storage. We never receive it. If you choose to share a message or picture, or save your data from My data, it goes only where you send it. You can delete it at any time with Reset tracker under the tracker’s Options, or by clearing your browser’s data for this site.
The IR Health Check
The IR Health Check works out your result on your own device as you type, and nothing you enter is sent to us. If you press Save on this device, the date, the numbers you entered, your answers (sex, fasting, medicines and diabetes) and your score are kept only on your own device, in your browser’s local storage, so you can compare a later check. We never receive them. You can delete them with Delete saved checks on that page, from My data, or by clearing your browser’s data for this site.
Meal plans and favourite recipes
Your meal plans, favourite recipes, shopping list ticks and whether you chose UK or US measures on recipes are also kept only on your own device, in your browser’s local storage. We never receive them. If you send someone a plan, or save them from My data, it goes only where you send it. You can delete a plan on the Meal plans page, or delete everything by clearing your browser’s data for this site.
Interval timer, favourite exercises and routines, and your own routines
The interval timer’s sound settings and recent workout dates, the exercises you mark as favourites on the Exercise A to Z, the ready-made routines you mark as favourites, and the routines and exercises you make with Exercise routines or the Exercise A to Z, are kept only on your own device, in your browser’s local storage. We never receive them. You can delete them by clearing your browser’s data for this site.
If you share a routine, the routine is written into the link itself, after the #. Browsers do not send that part of a link to our website, so we do not receive it, but anyone you send the link to can see the routine.
Saving and restoring your data
My data puts everything above that is kept on your device into a link or a file, so you can keep a copy and get it back on any phone or computer. It is made on your device. The link carries your data in the part after the #, which browsers do not send to our website, so we do not receive it. The link or file goes only where you send it, such as an email or message to yourself, and anyone who has it can see what it holds, so keep it private. Before a restore, your device keeps a copy of what it had, so the restore can be undone; this copy also stays only on your device. Delete my data on that page deletes everything Health Shelf has saved on your device.
How and why we use your data (lawful basis)
- To read and consider suggestions and comments sent via the form — lawful basis: our legitimate interests in improving the website. The form is anonymous, so we cannot and do not use it to contact you.
- To improve our recipes, and to show your feedback on the recipe if you send it through a recipe’s feedback form — lawful basis: your consent, which you give by ticking the box before sending. You can ask us to remove your feedback from the site at any time by emailing us with the recipe and what you wrote.
- To operate, secure, and maintain the website — lawful basis: our legitimate interests in running a safe, functioning site.
- Cookies — we do not use advertising or analytics cookies. Embedded video loads from YouTube or Vimeo only when you choose to press play. If we were ever to use non-essential cookies, we would ask for your consent first, which you could withdraw at any time.
Who we share it with
We do not sell your personal data. We use trusted service providers (“processors”) who act on our instructions, including:
- Netlify — website hosting and form processing. Messages and recipe feedback sent through the forms are stored on Netlify’s platform and emailed to us so we can read them. That email is held by Google (Gmail).
When you press play on an embedded video, your browser connects directly to the video provider, YouTube (Google) or Vimeo. They receive technical information such as your IP address and browser details, and use it under their own privacy policies (Google, Vimeo) rather than on our instructions. Nothing is sent to them unless you press play.
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK-approved transfer mechanisms) as required by law. We may also disclose data if required by law or to protect our legal rights.
How long we keep it
We keep form submissions only as long as needed to consider the suggestion or comment, then delete them. If recipe feedback is shown on a recipe, it stays there until the recipe is removed or you ask us to take it down. Technical logs are kept for a short period by our hosting provider.
Your rights
Under UK data protection law you have the right to access your data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and, where we rely on consent, to withdraw it at any time. To exercise any of these rights, contact us at healthshelforg@gmail.com.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would welcome the chance to resolve any concern first.
Security
We take reasonable technical and organisational measures to protect personal data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children
This website is intended for adults (18+) and is not directed at children. We do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. The “last updated” date below shows when it was last changed.
Related
Last updated: 23 October 2026.