Legal
Back to HealstackPrivacy Policy
Last updated:
Who we are
Healstack Ltd is registered in England and Wales under company number 12153452. Our registered office is 66 Paul Street, London, England, EC2A 4NA. Healstack Ltd is the data controller for the personal data described in this policy.
For questions or requests concerning personal data, contact us by email or write to our registered office.
Personal data we process
Enquiries and correspondence
If you contact us, we receive the contact details, company information and message content you choose to provide, together with subsequent correspondence.
Optional analytics
If you accept analytics, Google Analytics can collect page and session activity, approximate location, and browser or device information. We do not enable advertising storage, advertising signals or advertising personalisation.
Website delivery and security
Our hosting infrastructure necessarily processes technical request information such as IP address, browser information, requested URL and time of access to deliver and protect the website. Security or access logs may be created for troubleshooting, abuse prevention and system integrity.
Consent preference
The site stores your analytics choice locally in your browser for one year. Details are set out in our Cookie Policy.
Why we use personal data
- To respond to enquiries and discuss potential work. We rely on our legitimate interests in communicating with prospective clients and, where relevant, steps taken at your request before entering a contract.
- To measure and improve the website through Google Analytics. We rely on your consent, which can be withdrawn at any time using “Cookies” in the footer.
- To deliver, maintain and secure the website. We rely on our legitimate interests in operating reliable and secure systems.
- To meet legal, regulatory and accounting obligations where applicable.
Who processes the data
We do not sell personal data or share it for third-party advertising. We use service providers only where necessary to operate the website and communicate with you. These include Amazon Web Services for hosting and Google Analytics when you have accepted analytics, as well as email and IT service providers used to manage correspondence. We may disclose data when required by law, a court or a competent regulator.
How long we keep data
Enquiries that do not lead to an engagement are normally deleted within 24 months of the last substantive contact. Information connected with an engagement may be kept longer where needed for the relationship, legal obligations or the establishment or defence of claims. User-level Google Analytics data is retained for no more than 14 months. Technical logs are kept only for the period needed for security and troubleshooting, unless a longer period is required to investigate an incident or comply with law.
International processing
Some service providers may process personal data outside the United Kingdom. Where this occurs, we use an applicable UK adequacy regulation or approved contractual safeguards and require providers to protect the data in accordance with UK data protection law.
Your rights
Depending on the circumstances, you may have rights to access, correct or erase your personal data; restrict or object to its use; receive portable data; and withdraw consent without affecting earlier lawful processing. Contact us by email to exercise a right.
You may also complain to the Information Commissioner’s Office. We would appreciate the opportunity to address your concern first.
Changes to this policy
We will update this policy when our processing or service providers change. The date at the top shows the latest revision.