Who we are

We are Sustain Health Magazine Ltd, the publisher of Sustain Health Magazine.

Our website address is: https://sustainhealth.fit.

In this policy, “we”, “us” and “our” refer to Sustain Health Magazine Ltd. “You” refers to readers, contributors, visitors, registered users and anyone who interacts with our website.

What personal data we collect and why we collect it

We collect personal data only where it is necessary for running the website, publishing editorial content, responding to enquiries, managing user accounts, moderating comments, improving site performance, maintaining security, complying with legal obligations, or communicating with readers, contributors and commercial contacts.

The type of personal data we may collect depends on how you use the website. It may include:

• your name;
• email address;
• phone number, if you provide one;
• website address, if submitted through a comment or form;
• account username and profile information, if registration is available;
• contact preferences;
• messages, article submissions, enquiries or correspondence you send us;
• IP address, browser type, device information and user agent data;
• cookie and analytics data;
• advertising measurement and campaign performance data;
• information needed for security, spam prevention and site administration.

We do not intentionally collect special category personal data, such as detailed health information, political opinions, religious beliefs, biometric data or similar sensitive information from general website visitors.

As a health, fitness, sport and wellbeing publication, readers, contributors, interviewees or commercial contacts may sometimes voluntarily include health-related information in a comment, story pitch, interview, testimonial, case study or message. If you send us that type of information, we will use it only for the purpose for which it was provided, unless we have another lawful basis to process it.

Our lawful bases for processing personal data may include consent, legitimate interests, contractual necessity, legal obligation and, in rare cases, vital interests.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form. We also collect the visitor’s IP address and browser user agent string to help detect spam and protect the website.

An anonymised string created from your email address, also known as a hash, may be provided to the Gravatar service to check whether you use it. After approval of your comment, your profile picture may be visible to the public in the context of your comment.

Comments and related metadata may be retained indefinitely. This helps us recognise and approve follow-up comments automatically instead of holding them in a moderation queue.

Media

If you upload images to the website, you should avoid uploading images that include embedded location data, such as EXIF GPS data. Visitors to the website may be able to download and extract location data from images published on the site.

Any media uploaded to the website may become publicly accessible if it is used in published content or stored in a public media library.

Contact forms

If you contact us through a form on the website, we may collect your name, email address, message content and any other information you choose to provide.

We use this information to respond to your enquiry, manage editorial submissions, deal with commercial enquiries, provide reader support, handle complaints, and keep appropriate records.

We do not use contact form submissions for marketing unless you have clearly opted in to receive marketing communications.

We may retain contact form submissions for as long as reasonably necessary to respond to the enquiry, maintain business records, resolve disputes, meet legal obligations, or protect our legitimate interests.

Cookies

Cookies are small text files placed on your device when you visit a website. They help websites function properly, remember preferences, improve performance, analyse traffic, support security and measure advertising.

Our website may use the following types of cookies:

• Strictly necessary cookies: required for the website to work properly, including login, security and basic site functionality.
• Preference cookies: used to remember choices such as your name, email address or website when leaving a comment, if you choose this option.
• Analytics cookies: used to understand how visitors use the site and improve the reader experience.
• Advertising cookies: used to measure advertising performance, support campaign reporting, understand audience behaviour and, where enabled, help deliver or measure relevant advertising.
• Embedded content cookies: may be set by third-party content providers when you interact with embedded content, such as videos, social posts, maps, images or articles.

If you leave a comment on our site, you may opt in to saving your name, email address and website in cookies. These are for convenience so you do not have to fill in your details again when leaving another comment. These cookies may last for one year.

If you visit our login page, a temporary cookie may be set to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we may set cookies to save login information and screen display choices. Login cookies usually last for two days, and screen options cookies may last for one year. If you select “Remember Me”, your login may persist for two weeks. If you log out, login cookies will be removed.

If you edit or publish an article, an additional cookie may be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you edited. It usually expires after one day.

Where required, we will request consent before setting non-essential cookies, including analytics and advertising cookies. You can manage or withdraw cookie consent through the cookie controls on our website, where available, or by changing your browser settings.

Analytics and advertising measurement

We use Google Analytics to understand how visitors use our website, measure performance, improve content, and support advertising and campaign reporting.

Google Analytics may collect information such as pages visited, time spent on pages, referral sources, browser type, device type, approximate location, interactions with content, and cookie or device identifiers.

We also use Google Analytics in connection with advertising. This may help us measure advertising performance, understand audience behaviour, report on campaigns, and, where enabled, support advertising features such as audience measurement, remarketing or interest-based reporting.

Where required, we will ask for your consent before setting analytics or advertising cookies. You can manage or withdraw cookie consent through the cookie controls on our website, where available, or by changing your browser settings.

Embedded content from other websites

Articles on this site may include embedded content, such as videos, images, social posts, maps, audio, articles or other media.

Embedded content from another website behaves in the same way as if you visited that website directly. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including if you have an account with that service and are logged in.

We aim to use embedded content only where it is relevant to the article or reader experience. We do not include irrelevant external links or embedded content that directs readers to unrelated websites, competitors, Vimeo pages or other services unless there is a clear editorial or functional reason.

Who we share your data with

We do not sell your personal data.

We may share personal data only where necessary with trusted service providers who help us operate the website and business. These may include:

• website hosting providers;
• email and communication providers;
• spam detection and website security services;
• Google Analytics and related Google advertising services, where used for analytics, advertising measurement, audience reporting or campaign performance;
• professional advisers, such as accountants or legal advisers;
• payment processors, if paid services, advertising, subscriptions or commercial transactions are introduced;
• law enforcement, regulators or public authorities where required by law.

If you request a password reset, your IP address may be included in the reset email.

Visitor comments may be checked through an automated spam detection service.

How long we retain your data

We keep personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

Examples include:

• Comments: comments and related metadata may be retained indefinitely so we can recognise and approve follow-up comments automatically.
• Registered users: if registration is available, we store the personal information users provide in their profile for as long as the account remains active or as otherwise required.
• Contact enquiries: retained for as long as necessary to respond, manage records, resolve issues, or protect our legal and business interests.
• Analytics records: retained according to the settings of Google Analytics, our hosting provider or any analytics tool used on the site.
• Advertising measurement data: retained according to the settings of the advertising or analytics platform used, and only for as long as reasonably necessary for reporting, measurement and compliance.
• Editorial and contributor correspondence: retained where necessary for editorial records, publication history, contractual records, rights management or legal compliance.
• Business and financial records: retained for the period required by tax, accounting and legal obligations.

When personal data is no longer needed, we will delete it, anonymise it, or securely retain it only where deletion is not immediately possible, such as in backups.

What rights you have over your data

Depending on where you are located and the laws that apply, you may have rights over your personal data. These may include the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• object to certain types of processing;
• request restriction of processing;
• request data portability;
• withdraw consent where processing is based on consent;
• complain to a data protection authority.

If you have an account on this site, have left comments, submitted a form, or contacted us directly, you can request an exported file of the personal data we hold about you, including data you have provided to us.

You can also request that we erase personal data we hold about you. This does not include data we are required to keep for administrative, legal, editorial, security or regulatory purposes.

To exercise your rights, contact Andy Devaney, our Data Protection Officer / Privacy Contact, at editor@sustainhealth.fit.

Where your data is sent

Some data may be processed outside the United Kingdom or European Economic Area where our service providers, hosting companies, security tools, email providers, analytics providers, advertising services or other technical suppliers operate internationally.

Where personal data is transferred internationally, we expect appropriate safeguards to be used, such as adequacy regulations, standard contractual clauses, data processing agreements, or other lawful transfer mechanisms where required.

Visitor comments may be checked through an automated spam detection service, which may involve processing data outside your country of residence.

Google Analytics and related advertising measurement tools may also involve international processing. Where required, this processing is handled under appropriate legal safeguards.

How we protect your data

We take reasonable technical and organisational measures to protect personal data. These may include website security tools, access controls, secure passwords, software updates, limited administrator access, spam protection, backups, and secure hosting arrangements.

No method of internet transmission or electronic storage is completely secure. While we work to protect personal data, we cannot guarantee absolute security.

What data breach procedures we have in place

If we become aware of a personal data breach, we will assess the nature and seriousness of the incident and take appropriate steps to contain, investigate and address it.

Where required by law, we will notify the relevant supervisory authority and affected individuals.

What third parties we receive data from

We may receive limited data from third parties where relevant to operating the website or business. This may include analytics information, advertising or campaign reporting, social media engagement data, contributor information, PR or media communications, or information supplied by commercial partners.

We use this information only where we have a lawful basis to do so and where it is relevant to editorial, operational, commercial, security or administrative purposes.

Automated decision making and profiling

We do not use personal data to make decisions that have legal or similarly significant effects on individuals through wholly automated processing.

We may use Google Analytics and advertising-related tools to understand website performance, reader interests, campaign performance and audience behaviour. This may involve limited profiling, such as grouping visitors by broad interests, behaviour, device type, referral source or engagement with website content.

This profiling is used for analytics, advertising measurement, campaign reporting and content improvement. It is not used to make legal or similarly significant decisions about individual visitors.

Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our website, services, legal obligations, technology or data practices.

The “Last updated” date at the top of this page shows when the policy was most recently revised.

Contact information

If you have questions about this privacy policy, want to exercise your rights, or want to raise a privacy concern, please contact our Data Protection Officer and Privacy Contact: