Privacy Policy

Who we are

This website is operated by Highbury Residents, a group of local residents maintaining an evidence repository at health-badge.com. We can be contacted via the contact form.

We are the data controller for personal data processed in connection with this site.

What we collect and why

Analytics (GoatCounter)

We use GoatCounter to count page visits. GoatCounter does not use cookies and does not collect personal data. It records: page URL, referrer, browser type, screen size, and a country derived from an anonymised IP address. Your full IP address is never stored. GoatCounter is operated from the European Union and complies with GDPR. No data is transferred to the USA.

Legal basis: legitimate interests (understanding how the site is used).

Contact form

If you use the contact form, we collect the message you send and, if you provide it, an email address. This information is forwarded by email to our group inbox and is not stored on this server. We use it only to reply to your message.

Legal basis: legitimate interests (responding to correspondence).

Email subscribers

If you subscribe to updates, we store your email address and any optional name or salutation you provide. This information is kept in a file outside the publicly accessible part of this server and is used only to send you update emails. You can unsubscribe at any time by contacting us.

Legal basis: consent (you signed up).

Security logs

We keep a log of login attempts to the site's admin area. This includes the IP address, browser type, timestamp, and whether the attempt succeeded. These records exist to detect and respond to unauthorised access. They are stored outside the publicly accessible part of this server and are not shared.

Legal basis: legitimate interests (protecting the security of the site).

How long we keep data

• Contact form messages: we do not store these on the server. Copies may be retained in our email inbox for as long as necessary to handle the correspondence.
• Subscriber records: kept until you ask to be removed.
• Security logs: kept for up to 12 months.
• Analytics: GoatCounter retains aggregated statistics indefinitely but holds no personal data.

Who we share data with

We do not sell or share personal data with third parties for marketing. Data is shared only as described above (GoatCounter for analytics, our email provider for contact form delivery). Our email is handled by Tuta, a provider operating under German and EU law.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to erase your data (subject to any legal obligation to retain it).
• Withdraw consent at any time (for subscriber data).
• Object to processing based on legitimate interests.

To exercise any of these rights, contact us via the contact form.

You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO).

Cookies

This site does not use cookies. No cookie consent banner is required.

Changes to this policy

If we make significant changes, we will update the date at the top of this page.