Bralven Health Ltd

Privacy policy

Published 9 September 2026 · Review cycle: annual

1. Scope and controller

This policy explains how Bralven Health Ltd handles information when you visit bralven.info, contact the editorial desk or subscribe to updates. The controller is Bralven Health Ltd, 78 Colmore Row, Birmingham B1 1AA. Questions can be sent to [email protected].

2. Information received

We may receive an email address supplied for the newsletter, contact details supplied in a message, and technical information such as browser type, approximate region and page requests. We do not ask readers to submit private personal histories through ordinary forms.

3. Lawful basis

Newsletter processing is based on consent. Contact correspondence is handled on the basis of responding to a request and our legitimate interest in maintaining accurate records. You may withdraw consent at any time.

4. Retention

Newsletter records are retained until you unsubscribe, then removed within 30 days. Contact correspondence is normally retained for 24 months after closure. Security logs may remain for up to 90 days.

5. Your rights

UK GDPR rights can include access, correction, erasure, restriction, objection and portability where applicable. Send a written request to [email protected]; we aim to respond within one calendar month.

6. Processors

We may use hosting, email delivery and security providers acting under written instructions. Providers receive only the information needed for their stated service and are expected to protect it.

7. International transfers

If a provider processes information outside the UK, we seek an adequacy decision or suitable safeguards such as approved contractual protections. Details are available on written request.

8. Security

We use access controls, encrypted connections and limited retention. No internet transmission can be promised entirely secure, so please avoid placing sensitive personal details in a general enquiry.

9. Children

The service is written for adults and is not knowingly directed to children. If a child’s information has been supplied inadvertently, contact us so it can be reviewed.

10. Complaints

Contact us first so we can investigate. You may also contact the Information Commissioner’s Office in the United Kingdom.

11. Changes

We may revise this page when practices change. The current revision date appears above; the previous annual review was recorded on 1 September 2025.

12. Contact procedure

Include your name, the request you are making and a reliable reply address. We may need to verify identity before releasing information.

8. Data minimisation and form use

We collect information needed to answer a message, send an opted-in update or maintain the security of the website. Contact forms should not be used to send sensitive personal histories, account credentials or information about another person. If such information is sent, we will limit access, assess whether it is needed and remove it when there is no continuing reason to retain it.

a. Newsletter sign-up requires an email address and consent record.
b. Contact messages may include the details you choose to provide.
c. Security records may include an IP address, timestamp and requested path.

9. Named service providers

Website hosting, email delivery, spam protection, map embedding and security monitoring may be supplied by separate processors. The contact page uses a Google Maps embed, which may request information under Google's own terms when loaded or used. Newsletter delivery, if enabled, will be provided by a contracted email service acting on written instructions. We review supplier access, confidentiality terms and retention settings before introducing a new processor.

10. Breach handling

If Bralven becomes aware of a personal data incident, we will record the facts, contain the issue and assess the likely effect on individuals. Where the law requires notification to the Information Commissioner's Office, we aim to make that notification within 72 hours of becoming aware of a reportable breach. People affected will be contacted without undue delay where a high risk to their rights and freedoms is identified. Routine security events that do not involve personal data are recorded and reviewed proportionately.

11. Minors and automated decisions

This publication is intended for a general adult audience and does not knowingly invite children to provide personal information. If a parent or guardian believes a child has submitted information, they can contact [email protected] so we can assess and remove it where appropriate. Bralven does not use personal data to make decisions with legal or similarly significant effects. No automated scoring is used to determine access to editorial pages.

12. Complaints and changes

Privacy questions should first be sent to [email protected], and we aim to acknowledge them within five working days and respond within one calendar month. You may also complain to the UK's Information Commissioner's Office if you remain concerned. This policy was published on 9 September 2026 after a review on 1 September 2025. Material revisions will be dated and described on this page.

13. Data minimisation in practice

Bralven limits collection to information needed to operate the publication, answer correspondence, maintain consent records and protect the site. Readers should not place confidential personal histories, account passwords or information about another person into a general contact form. If unnecessary information is received, access will be restricted and it will be removed when there is no continuing reason to retain it. This approach also applies to attachments and copied text sent by email.

a. Newsletter records normally contain an email address and consent date.
b. Contact records may contain a name, email address, message and reply history.
c. Security records may contain an IP address, timestamp and requested path.

14. Breach response and notification

If Bralven becomes aware of a personal data incident, we will record the known facts, limit access and assess the likely effect on individuals. Where the law requires notification to the Information Commissioner's Office, we aim to notify it within 72 hours of becoming aware of a reportable incident. People affected will be contacted without undue delay where the circumstances create a high risk to their rights and freedoms. We will keep a record of the decision, even where notification is not required.

15. Children, automated decisions and review

The publication is intended for adults and does not knowingly invite children to submit personal information. A parent or guardian may contact [email protected] if they believe information was submitted by a child, and we will assess the request promptly. Bralven does not use personal data for automated decisions with legal or similarly significant effects, and no automated score controls access to editorial pages. This policy was published on 9 September 2026, following a review on 1 September 2025; material changes will be dated on this page.