Privacy Policy

1. Data we collect

• Information you provide: email address (newsletter), name and message (contact form), account details if you register.
• Automatic data: IP address, browser type, device type, pages visited, time on page, referrer URL, approximate location (country/region), and interaction events. Collected via cookies and privacy-respecting analytics.
• We do NOT collect: health records, medical history, biometric data, or any special-category health information about you. Do not send us protected health information (PHI).

2. Legal basis (GDPR)

We process personal data on the following bases:

• Consent — cookies (non-essential), newsletter subscriptions.
• Legitimate interest — securing the site, aggregate analytics, preventing abuse.
• Legal obligation — retaining records where required by law.

3. How we use your data

• Deliver and improve the website and its content.
• Send newsletters you subscribed to (unsubscribe any time).
• Respond to messages you send us.
• Detect abuse, fraud, and security incidents.
• Comply with legal obligations.

We do not sell your personal information. We do not share your data with data brokers.

4. Cookies & tracking

See our Cookie Policy for details. You can accept, reject, or customise cookies via the banner shown on your first visit.

5. Third-party processors

We use vetted service providers to run the site (hosting, analytics, email delivery, database). Each processor is bound by a Data Processing Agreement. We do not transfer data outside its region of collection without appropriate safeguards (Standard Contractual Clauses, adequacy decisions).

6. Data retention

We keep personal data only as long as needed for the purpose it was collected, then delete or anonymise it. Newsletter emails are retained until you unsubscribe. Contact-form messages are deleted after 24 months. Analytics logs are retained for a maximum of 26 months.

7. Your rights

Depending on your jurisdiction, you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your data-protection authority

To exercise any of these rights, email us at privacy@healthhubpro.com. We respond within 30 days.

8. Children

This website is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

9. Security

We use industry-standard encryption (HTTPS/TLS), access controls, and secure hosting. No system is 100% secure — we cannot guarantee absolute security, but we work hard to protect your data.

10. Changes to this policy

We may update this policy. Material changes will be announced on this page with an updated "last updated" date. Continued use of the site constitutes acceptance.

11. Contact

Data controller: Health Hub Pro. Contact: privacy@healthhubpro.com.