Privacy Policy

Last updated: 5 June 2026

1. Data controller

Cartilageherbal operates this website and acts as the data controller for personal information collected through it. Our registered correspondence address is Nuneham Estate, Oxford OX44 9PG, United Kingdom. For privacy enquiries, email help@cartilageherbal.world or call +44 1865 630150.

2. Categories of data we collect

Depending on how you interact with the site, we may process:

  • Identity and contact data: name and email address submitted via the contact form
  • Communication content: the text of messages you send us
  • Technical data: IP address, browser type, device information, and pages visited when analytics cookies are accepted
  • Preference data: cookie consent choices stored in your browser localStorage

3. Purposes and legal bases

We process personal data only where a lawful basis under UK GDPR and the Data Protection Act 2018 applies:

  • Responding to enquiries — legitimate interest in operating our communication channels, or consent where you tick the UK GDPR checkbox
  • Website security and error logging — legitimate interest in maintaining a reliable service
  • Analytics — consent, obtained through the cookie banner
  • Marketing cookies — consent, obtained through the cookie banner

4. Data Protection Act 2018

Alongside UK GDPR, the Data Protection Act 2018 supplements and clarifies data protection law in the United Kingdom. It sets out additional provisions on processing for law enforcement, intelligence services, and certain special categories of data. For the purposes of this website, the Act reinforces your rights to access, rectify, and erase personal data, and establishes the Information Commissioner's Office (ICO) as the supervisory authority for complaints. We handle personal data in accordance with both UK GDPR and the Data Protection Act 2018.

5. Automated decision-making and profiling

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you. All responses to enquiries are reviewed by a member of our team. Analytics data, where collected with your consent, is used only in aggregated form to understand general site usage patterns.

6. UK representative

Where UK GDPR requires a representative in the United Kingdom for organisations established outside the UK, that obligation does not apply to us. Cartilageherbal is established and operates from Oxfordshire, United Kingdom, and acts as the data controller for all processing described in this policy. You may contact us directly using the details in section 1.

7. Retention periods

Contact form submissions are retained for up to twenty-four months unless a longer period is required for an ongoing correspondence. Server logs are kept for ninety days. Analytics data derived from cookies is aggregated and stored for thirteen months. Cookie preference records remain in localStorage until you clear them or change your settings.

8. Sharing and international transfers

We do not sell personal data. Information may be shared with hosting providers and email delivery services bound by data processing agreements. Where data leaves the UK, we rely on appropriate safeguards such as standard contractual clauses.

9. Security measures

We apply access controls, encrypted connections (HTTPS), and regular review of data handling procedures. No transmission method is fully secure; we encourage you to avoid sending sensitive identifiers unnecessarily.

10. Your rights

Under UK GDPR and the Data Protection Act 2018 you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Children

This site is intended for adults managing their own workspaces. We do not knowingly collect data from individuals under sixteen.

12. Changes

We may revise this policy to reflect legal or operational updates. Material changes will be noted by updating the date above.