01 — Introduction

Who We Are and What This Policy Covers

Ulderan Review is an independent editorial publication focused on everyday wellness practices. The publication is not affiliated with any commercial, governmental, or institutional body. Our registered office is at 83 Myddelton Street, London London EC1R 4QR, United Kingdom, London, United Kingdom.

This Privacy Policy explains what personal data we collect when you use the website at ulderan.info, how we use that data, the legal basis on which we rely, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using this website, you acknowledge that you have read this Privacy Policy. If you have questions about how we handle personal data, please contact us at [email protected].

02 — Data Collection

What Personal Data We Collect

We collect personal data in the following circumstances:

Contact Form Submissions

When you submit the contact form on our Contact page, we collect your name, email address, and the content of your message. If you provide a subject category, this is also recorded. This data is used solely to respond to your enquiry.

Server Log Data

Our web server automatically records standard access log data including IP address, browser type, operating system, referring URL, and pages visited. This data is retained for 30 days for security and performance monitoring and is not linked to identifiable individuals under normal circumstances.

Cookies and Analytics

If you accept analytical cookies via the cookie consent banner, we collect aggregated, anonymised data about how visitors use the site — pages viewed, time on page, and navigation paths. No personally identifiable information is collected through analytical cookies. See our Cookie Policy for full details.

We do not collect sensitive personal data. We do not ask for health information, dietary details, financial information, or any other category of data classified as sensitive under UK GDPR.

03 — Legal Basis

How We Justify Processing Your Data

We rely on the following legal bases for handling personal data:

Legitimate interests — for server log data used to maintain site security and performance. Our legitimate interest in operating a secure website is balanced against the minimal privacy impact of standard access logging.
Performance of a contract / pre-contractual steps — for contact form data, where we handle your data in order to respond to your request or enquiry.
Consent — for analytical cookies, which are only set after you have given explicit consent via the cookie banner. You can withdraw consent at any time by clicking Cookie Settings in the footer.

04 — Data Sharing

Who We Share Data With

We do not sell personal data. We do not share personal data with third parties for their own marketing purposes. Personal data may be shared in the following limited circumstances:

Hosting and infrastructure providers — our web hosting provider handles server log data as part of normal hosting. We use providers based in the United Kingdom or European Economic Area under appropriate data handling agreements.
Analytics providers — if analytical cookies are accepted, aggregated and anonymised usage data is shared with our analytics provider. No personally identifiable information is included.
Legal obligations — we may disclose data where required by law, court order, or regulatory authority in the United Kingdom.

05 — Data Retention

How Long We Keep Your Data

We retain personal data only for as long as necessary for the purpose for which it was collected:

Contact form data — retained for 12 months after the correspondence is resolved, then securely deleted.
Server log data — retained for 30 days, then automatically deleted.
Analytical cookie data — retained in aggregated, anonymised form for up to 24 months from collection.

06 — Your Rights

Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may request correction of inaccurate or incomplete personal data.
Right to erasure — you may request deletion of your personal data where there is no longer a lawful basis for its retention.
Right to restrict handling — you may request that we restrict how we use your data in certain circumstances.
Right to object — you may object to handling based on legitimate interests.
Right to withdraw consent — where we rely on consent (analytical cookies), you may withdraw it at any time without affecting the lawfulness of prior handling.

To exercise any of these rights, contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

07 — Policy Updates

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last revised. Material changes will be noted on the website. Continued use of the website following a policy update constitutes acceptance of the revised policy.

Questions about this policy should be directed to [email protected] or in writing to 83 Myddelton Street, London London EC1R 4QR, United Kingdom, London, United Kingdom.