1. Introduction & Data Controller
At ProstaLife UK ("we", "us", "our"), protecting the privacy and personal data of our website visitors is of paramount importance. This Privacy Policy outlines how we collect, process, store, and safeguard your personal data when you visit prostalife-uk.org or communicate with our team.
For the purposes of the UK GDPR, the Data Controller is:
ProstaLife Health Publishing Ltd
Registered Office: 20-22 Wenlock Road, London, N1 7GU, United Kingdom.
Data Protection Officer Email: [email protected]
2. Lawful Bases for Processing
Under Article 6 of the UK GDPR, we only process personal information where a recognized lawful basis applies:
- Consent (Art. 6(1)(a)): Where you explicitly consent to non-essential cookies or subscribe voluntarily to email updates.
- Contract / Legitimate Interests (Art. 6(1)(f)): Processing necessary for responding to your direct enquiries, maintaining platform cybersecurity, preventing fraud, and analyzing aggregated website performance to improve content accessibility.
- Legal Obligation (Art. 6(1)(c)): Retaining records where mandated by UK corporate, financial, or regulatory requirements.
3. Categories of Information We Collect
We collect minimal personal data necessary to provide a reliable service:
- Correspondence Data: Your name, email address, and message content when you submit an inquiry through our contact form.
- Technical & Log Data: Anonymized or pseudonymized IP addresses, browser types, device operating systems, referring URLs, and timestamps recorded automatically in standard web server logs for security and threat detection.
- Interactive Tool Data: Responses inputted into our Prostate Self-Check Quiz or Hydration Planner are processed locally within your web browser (client-side) and are not transmitted to or stored in external databases.
4. Cookies & Tracking Technologies
We employ essential cookies necessary for website routing and security, alongside anonymous analytical cookies. For comprehensive details on cookie types, lifetimes, and management options, please review our dedicated Cookie Policy.
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data with third-party data brokers or marketing agencies. We may share limited technical data with trusted infrastructure processors (such as UK/EU cloud hosting providers and spam detection services) who are contractually bound by Data Processing Agreements (DPAs) upholding UK GDPR standards.
6. International Data Transfers
Our primary server infrastructure is situated within the United Kingdom and the European Economic Area (EEA). If data is ever transferred to third countries, we ensure appropriate safeguards are implemented, such as UK International Data Transfer Agreements (IDTAs) or standard contractual clauses approved by the Information Commissioner's Office (ICO).
7. Your Statutory Rights as a Data Subject
Under UK GDPR, you have the following rights regarding your personal information:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your information where retention is no longer justified.
- Right to Restrict or Object to Processing: Object to processing carried out under legitimate interest grounds.
- Right to Data Portability: Obtain your data in a structured, machine-readable format.
To exercise any of these rights, please email [email protected]. We respond to all verified requests within one calendar month, free of charge.
8. Right to Complain to the UK Supervisory Authority
If you believe your personal data has been handled improperly, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 | Website: ico.org.uk