What we collect
When you contact us, we may receive your name, email address, telephone number and the contents of your message. We only ask for information needed to respond or maintain an editorial record.
How we use information
We use contact details to reply, handle corrections, protect the service and meet legal obligations. We do not sell personal information or use health information for advertising.
Retention and security
Messages are kept only as long as reasonably necessary for the purpose collected. We use access controls and appropriate organisational measures, although no online service can guarantee absolute security.
Your rights
Under UK data protection law, you may request access, correction, deletion or restriction of your personal information. Contact the editorial desk at 27 Elmwood Lane, Stratford-upon-Avon, Warwickshire, CV37 6BB, United Kingdom.
Updates
This policy was last reviewed on 5 October 2026. Material changes will be reflected on this page.
This document applies to novalus.co.uk pages, contact requests and editorial correspondence handled from the United Kingdom. It does not govern websites operated by third parties that may be linked from an article. Those services publish their own notices, and readers should review them before submitting information.
We may receive technical information such as an IP address, browser type, device category, referring page and approximate access time through ordinary server logs. This information is used for security, troubleshooting and aggregate service measurement rather than to build advertising profiles. Server logs are normally retained for 30 days, unless a security investigation requires a longer, documented period.
Our lawful bases may include legitimate interests for operating and securing the publication, consent where an optional communication has been requested, and legal obligation where records must be retained. Where consent is used, it can be withdrawn by contacting us, without affecting processing that took place before withdrawal.
Novalus does not request special-category health information to provide the website. If a message contains sensitive details, please share only what is needed to explain the editorial question. We may redact or securely delete unnecessary details when a response has been completed.
Contact messages are generally retained for 12 months after the last meaningful exchange. A correction record may be kept for up to six years where needed to demonstrate the history of a published change, while routine marketing preferences are removed within 30 days of an unsubscribe request.
Service providers may process limited information on our behalf, including website hosting, email delivery, security monitoring and form handling. They are required to act on documented instructions, apply suitable safeguards and use information only for the service provided. We do not permit those providers to sell contact details.
Some providers may process data outside the UK. Where that occurs, we use an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard recognised by UK data protection law. Details of the relevant safeguard can be requested from the editorial desk.
You may also object to processing based on legitimate interests, request portability where applicable, and complain to the Information Commissioner’s Office. We aim to acknowledge a rights request within five working days and respond within one calendar month, subject to lawful extensions for complex requests.
To verify a request, we may ask for information already held in the relevant correspondence. We do not normally charge for a reasonable request, but may charge a proportionate administrative fee or decline a manifestly unfounded or excessive request where the law permits.
Change record: 5 October 2026 — policy reviewed and expanded to explain lawful bases, retention, cookies, processors, transfers and rights handling. Earlier versions may be requested where a legitimate record-keeping reason exists.
For clarity, the site may also use essential cookies or similar storage required to remember a basic preference, maintain a secure session or understand whether a page is functioning. Cookie names and lifespans can vary with the hosting configuration; an essential session cookie normally expires when the browser closes, while a consent preference may remain for up to 12 months. Optional analytics will only be used where configured lawfully and can be declined without losing access to editorial pages.
Our hosting, email, form and security suppliers may include Vercel, a managed email provider and a security monitoring service, depending on the feature in use. Each provider receives only the information necessary for its defined function and is bound by contractual confidentiality and security obligations. We review supplier arrangements when a service changes and remove providers that are no longer needed.
Requests concerning access, correction, deletion, restriction or objection can be sent by post to 27 Elmwood Lane, Stratford-upon-Avon, Warwickshire, CV37 6BB, United Kingdom, or by telephone on +44 161 893 7201. We may need to confirm identity before disclosing information, particularly where a request could affect another person. We aim to acknowledge correspondence within five working days and provide a substantive response within one calendar month.
Where a complaint cannot be resolved directly, individuals may contact the Information Commissioner’s Office through its UK website or helpline. A complaint will not affect access to Novalus, and we will retain a concise record of the issue and response for up to six years where needed for accountability.