Effective 5 October 2026
Privacy Policy
This policy explains how Lorena, based at 70 King's Road, Brighton, East Sussex, BN1 4PH, United Kingdom, handles information when you browse our editorial website, contact the desk or exercise a privacy right. It applies to pages, forms, cookies and correspondence operated under the Lorena name during the 2026 editorial year. The document should be read alongside the cookie information notice and any short notice displayed at the point where information is requested. It describes the ordinary website context, rather than an employment, clinical or subscription relationship. If a linked service has its own controller, that service’s notice governs the information it collects. We aim to use plain language so that a reader can understand the practical effect of each processing activity.
1. Scope and responsibility
Lorena is responsible for deciding why and how contact and technical information is used. We publish general nutrition information and do not invite readers to submit medical records. This policy covers visitors in the United Kingdom and other readers who access the site. It does not replace a notice supplied by a separate website reached through an external link.
2. Information collected
We may receive a name, email address and message when you use the contact form. Server logs may contain an IP address, browser type, approximate location, requested page and time of access. We do not intentionally collect special category health data through the form. Please avoid including diagnoses, prescriptions or urgent symptoms in a message. If such information is sent accidentally, we will limit access to it, avoid using it for editorial profiling and delete it when it is no longer needed for the enquiry. Contact submissions are normally retained for 12 months after the last exchange, unless a longer period is needed to resolve a complaint or comply with a legal obligation. Technical security logs may be retained for up to 90 days for incident review. We do not sell contact details or use them to build advertising audiences.
3. Legal basis
We use contact details to respond to a request because that processing is necessary to take steps requested by you. We use essential cookies because they help deliver the service. Optional analytics are used only after consent where required. We may retain limited records to meet legal obligations or establish, exercise and defend legal claims.
4. Retention periods
Contact correspondence is normally retained for 24 months after the last meaningful exchange, then securely deleted unless a longer period is required for a dispute. Server security logs are retained for up to 90 days. Consent records may be retained for 24 months so that we can demonstrate a preference. Aggregated statistics that no longer identify a person may be kept for editorial planning.
5. Your rights
Subject to legal limits, you may request access, correction, deletion, restriction, objection or a portable copy of personal information. You may withdraw optional cookie consent at any time; withdrawal does not affect earlier lawful use. Requests should identify the information concerned without sending unnecessary sensitive details. We may ask for proportionate identity confirmation to protect against disclosure to the wrong person.
6. Processors
Service providers may host the website, deliver email, protect it from abuse or provide privacy-conscious analytics. They receive only the information needed for their service and operate under contractual instructions. We do not sell contact details or use them to build advertising profiles. Current providers can change as infrastructure is reviewed, while the same safeguards continue to apply.
7. Cookies
The cookieChoice item records whether a visitor selected accept or reject and is kept for up to 12 months. Session cookies may support basic delivery and expire when the browser session ends. Optional analytics cookies, if enabled, may have lifespans of up to 13 months. Browser controls can delete or block cookies, although some site functions may then be less convenient.
8. International transfers
Some hosting or support infrastructure may process information outside the United Kingdom. Where a transfer occurs, we use an adequacy decision, appropriate contractual safeguards or another lawful mechanism recognised by applicable data-protection law. Readers may ask for general information about the safeguard used. We review suppliers when material changes occur.
9. Security
We use access controls, encrypted connections, limited staff access and routine maintenance to reduce avoidable risk. No internet transmission can be promised completely secure. If you believe you have sent sensitive information by mistake, contact the editorial desk promptly at the address on this site. We will assess the report and take reasonable containment steps.
10. Children and complaints
The site is intended for a general audience and is not designed to collect information from children. If a parent or guardian believes a child has submitted information, contact us so it can be reviewed. You may complain to the Information Commissioner’s Office in the UK, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or through its current website.
11. Contact procedure
Privacy requests can be sent through contact.html, by post to 70 King's Road, Brighton, East Sussex, BN1 4PH, United Kingdom, or by telephone on +44 1793 847253. We aim to acknowledge a request within five working days and respond within one calendar month, subject to lawful extensions. We keep a brief case note about the request and outcome.
12. Changes
This policy was reviewed on 5 October 2026. The next scheduled review is 5 October 2027, or sooner if services or law change. Material changes will be signposted on the site with a new effective date. Previous versions may be requested where a reader needs to understand the policy that applied to an earlier interaction.
For transparency, contact enquiries are normally retained for 12 months after the last exchange, security records for up to 90 days, and privacy-rights correspondence for up to 24 months where needed to document compliance. We may use hosting, email delivery, security monitoring and form-processing providers acting on Lorena’s instructions, with access limited to the service they provide. Some providers may process information outside the United Kingdom; where that occurs, appropriate contractual safeguards and transfer assessments are considered. You may ask for access, correction, deletion, restriction or objection by writing to 70 King's Road, Brighton, East Sussex, BN1 4PH, United Kingdom, or calling +44 1793 847253. We aim to acknowledge a request within five working days and respond within one month, subject to lawful extensions for complex requests. If you remain dissatisfied, you may contact the Information Commissioner’s Office.
This policy was reviewed on 5 October 2026. A material change will be identified by a new review date, while minor wording or accessibility corrections may be recorded without changing the effective date. We will not ask for unnecessary health details to verify an ordinary request. If identity verification is needed, we will request proportionate information and securely delete it when the request is closed.