Privacy Policy
Effective date: 5 October 2026
This Privacy Policy explains how personal information is handled when you use The Endometriosis Awareness & Education Blog.
The website is operated through Sapphire MedWeb Solutions. For this website, Sapphire MedWeb Solutions is responsible for deciding how the personal information described in this notice is handled.
For privacy-related enquiries, please contact:
1. What Information We Collect
The website has been configured to minimise the amount of personal information collected from visitors.
At the time of this notice:
- public comments are disabled;
- newsletter sign-up forms are disabled;
- advertising enquiry forms are disabled; and
- there are no public account-registration or community-submission forms.
We may still process limited technical information automatically when somebody visits the website.
This may include:
- IP address;
- browser and device information;
- date and time of access;
- pages or resources requested;
- referring website information;
- security and error-log information;
- cookie or similar technical identifiers where these are used; and
- search terms entered into the website’s own search function.
This technical information is used to operate, secure and maintain the website.
2. Health Information
This is a health-information website, but we do not ask visitors to submit medical records, diagnoses or other detailed health information through public website forms.
Please do not send sensitive medical information through ordinary email.
If somebody voluntarily sends health information to us, access will be limited and the information will only be handled where reasonably necessary to deal with the communication or another legitimate requirement.
We do not use website activity to create individual medical profiles or make healthcare decisions about visitors.
3. Why We Use Personal Information
We may process personal information for the following purposes:
- operating and maintaining the website;
- protecting the website against spam, misuse, fraud or security threats;
- investigating technical problems;
- understanding and resolving privacy enquiries;
- maintaining appropriate records where required; and
- complying with legal obligations.
4. Our Lawful Bases
Under UK data-protection law, we need a lawful basis whenever we process personal information.
Depending on the circumstances, we may rely on:
Legitimate interests — where processing is reasonably necessary to operate, maintain and secure the website, troubleshoot problems and protect the service from abuse.
Legal obligation — where information must be retained or disclosed because the law requires it.
Consent — where consent is required for a particular optional technology, such as certain non-essential cookies. Consent can be withdrawn where processing is based on consent.
We do not use personal information collected through this website for unrelated direct marketing.
5. Cookies and Similar Technologies
The current configuration does not enable visitor analytics, personalised advertising, embedded third-party media players or Google reCAPTCHA. The former generic cookie banner is disabled. WordPress uses login and interface-preference cookies for authorised administrators. Reading articles does not require an account or a login.
Our Cookie Policy names these technologies, explains when they apply and gives their durations, including how to remove a cookie left by the retired banner.
6. Website Hosting and Service Providers
We use third-party providers to host, operate and protect the website.
The website is hosted using Hostinger infrastructure. Hosting providers may process technical information such as IP addresses, server requests, security logs and backup data as part of providing their services.
The website is built using WordPress and associated website software.
Google reCAPTCHA is not enabled in the current configuration. Contact Form 7 and Newsletter are inactive, and their public collection pages remain unpublished. WordPress, Blocksy and Elementor provide the website software; its page resources are served from the website through Hostinger.
We may also use other technical providers where reasonably necessary to maintain, secure or support the website.
We require service providers handling personal information on our behalf to do so for appropriate purposes and subject to applicable data-protection requirements.
7. Sharing Personal Information
We do not sell personal information.
Personal information may be shared only where reasonably necessary with:
- website hosting and technical-service providers;
- professional advisers where necessary;
- regulators, courts or public authorities where required by law; or
- another party where disclosure is necessary to establish, exercise or defend legal rights.
We do not provide visitor information to advertisers for their own marketing purposes.
8. International Data Transfers
Some website or technical-service providers may operate or process information outside the United Kingdom.
Where personal information is transferred internationally, we rely on the safeguards or transfer mechanisms used by the relevant provider and required by applicable UK data-protection law.
9. How Long We Keep Information
We do not keep personal information for longer than reasonably necessary for the purpose for which it was processed.
Technical and security logs are retained according to operational, security and hosting requirements and are removed or overwritten when they are no longer reasonably required.
Privacy correspondence is retained only for as long as reasonably necessary to deal with the enquiry, maintain an appropriate record and meet any legal obligations.
Backups may contain information for a limited period after the live copy has been removed, until those backups are overwritten or expire under the relevant backup schedule.
10. Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, loss or misuse.
No internet service can guarantee absolute security, but access to administrative systems and personal information is restricted to those who reasonably need it.
11. Your Data-Protection Rights
Depending on the circumstances and the lawful basis being used, you may have rights including:
- the right to ask whether we hold personal information about you;
- the right to receive a copy of your personal information;
- the right to have inaccurate information corrected;
- the right to request deletion of information in certain circumstances;
- the right to request restriction of processing in certain circumstances;
- the right to object to certain processing;
- the right to data portability where applicable; and
- the right to withdraw consent where processing is based on consent.
These rights are not absolute in every situation.
To make a privacy request, contact:
We may need to confirm your identity before responding to a request.
12. Your Right to Object
Where we rely on legitimate interests to process personal information, you have the right to object to that processing in appropriate circumstances.
If you object, please contact info@sapphiremedweb.com and explain the processing you are concerned about.
13. Complaints
If you have concerns about how your personal information has been handled, please contact us first so that we can investigate.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.
14. External Websites
The website contains links to third-party websites and resources.
When you follow an external link, the other organisation may collect and use information according to its own privacy notice. We are not responsible for the privacy practices of external websites.
15. Changes to Website Features
If we later introduce features that collect additional personal information — such as newsletter subscriptions, comments, advertising enquiries, community contributions or other forms — this Privacy Policy and any relevant collection notice will be updated before those features are made publicly available.
16. Updates to This Policy
We will review this Privacy Policy when the website’s features, providers or data-handling practices change.
Last updated: 5 October 2026
