1. Introduction & Data Controller
ProstaBotanica Health Media Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, store, and process your personal data when you visit our website (prostabotanica.co.uk) or contact our team.
The designated Data Controller is: ProstaBotanica Health Media Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: [email protected].
2. What Personal Data We Collect
Depending on how you interact with our website, we may collect:
- Contact Information: Your name, email address, and message contents when you submit an enquiry through our contact form.
- Technical & Analytical Data: IP address (anonymised), browser type, device information, operating system, and pages visited collected via strictly necessary or analytical cookies.
- Interactive Assessment Inputs: Responses to our prostate wellness self-check quiz are processed locally in your web browser. We do not store or transmit individual personal quiz responses to our database servers.
3. Lawful Bases for Processing
Under the UK GDPR, we process your information under the following lawful bases:
- Consent: When you provide clear consent for us to respond to your specific enquiry or accept non-essential analytical cookies.
- Legitimate Interests: To maintain website security, prevent fraudulent activity, and ensure reliable server uptime.
- Legal Compliance: When required to retain records under UK statutory obligations.
4. Data Retention
We retain correspondence from contact form enquiries only as long as necessary to resolve your request and maintain audit logs (ordinarily not exceeding 12 months). Server access logs are rotated and deleted after 30 days.
5. Sharing of Data with Third Parties
We never sell, rent, or trade your personal data to advertisers or commercial brokers. We only share data with trusted data processors who provide website hosting, technical maintenance, or email infrastructure, all bound by strict Data Processing Agreements compliant with UK data protection regulations.
6. Your Statutory Data Subject Rights
Under the UK Data Protection Act 2018 and UK GDPR, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of your personal data ("right to be forgotten").
- Object to or restrict the processing of your data.
- Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
7. Contact for Data Protection Matters
To exercise any of your rights or enquire about our data policies, please write to our Data Privacy Officer at [email protected] or by post to our registered London address.
Last revised: March 2026. Version 2.4.