Privacy policy

1. Scope and controller

Loreon is responsible for the site and editorial contact channel. This policy applies to visitors, correspondents and people who report a correction. It does not apply to external services linked from our pages. We process information fairly, transparently and only for stated purposes. The controller can be contacted at 7 The Crescent, Brighton, BN1 1EE, United Kingdom, or by telephone on +44 161 743 9182. This scope includes ordinary browsing, accessibility requests and messages sent about an article, but it does not make Loreon responsible for the privacy practices of a linked publisher. We review the purposes described here when the site structure or processing arrangements change. The policy is written for UK readers and is intended to explain the relevant UK GDPR and Data Protection Act 2018 principles in plain language.

2. Information collected

We may receive your name, email address and message when you contact us. Server logs may include an IP address, browser type, requested page and time. We do not ask for medical histories and ask correspondents not to include unnecessary sensitive health details.

3. Legal bases

We rely on legitimate interests to operate, secure and improve the publication, and on consent where optional analytics cookies are enabled. We rely on contractual necessity only when needed to respond to a service request. You may withdraw consent at any time without affecting earlier processing.

4. Retention

Contact correspondence is normally retained for 24 months after the last meaningful exchange. Security logs are retained for 90 days. Records of consent choices may remain for 24 months so that we can respect your preference. We delete or anonymise information sooner when it is no longer needed.

5. Service providers

Hosting, security, email delivery and limited analytics may be provided by carefully selected processors. They receive only information needed for their task and must follow written instructions. We do not sell personal information or use it to make health decisions about visitors.

6. Cookies

The site uses an essential cookie named cookieChoice for up to 24 months to remember your banner selection. Optional analytics cookies, if enabled, have a maximum lifespan of 13 months. Preference data may last 12 months. Details and controls appear in our cookies policy.

7. International transfers

Some processors may handle data in countries outside the UK. Where this occurs, Loreon uses a UK adequacy decision, approved contractual safeguards or another lawful transfer mechanism. You may ask the editorial desk for general information about the safeguards in use.

8. Your rights

Subject to legal limits, you may request access, correction, deletion, restriction, portability or objection. Where processing is based on consent, you may withdraw it. Send a clear request to the address below; we may ask for proportionate identity confirmation before responding.

9. Complaints

Contact Loreon first at the published address or phone number. We aim to acknowledge requests within five working days and respond within one calendar month. You may also complain to the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

10. Changes

We review this policy annually. The current version was issued on 5 October 2026; earlier material changes are recorded in our internal editorial register. Continued use after a published revision means you have seen the updated notice, but we will seek consent again where law requires it.

11. Contact

Write to Loreon, 7 The Crescent, Brighton, BN1 1EE, United Kingdom, or call +44 161 743 9182. Please describe the request, the relevant page and a safe way to reply. We will not require more information than is reasonably necessary.

For ordinary website operation, the lawful basis is generally legitimate interests in providing a secure, readable publication, balanced against the visitor’s rights and expectations. For a voluntary contact message, processing is usually necessary to respond to the request; if a person asks for a correction or accessibility adjustment, the information is used only for that purpose. Optional measurement is used only where the relevant consent choice has been recorded. Loreon does not sell contact details or create advertising audiences from article interests. A hosting provider may process server data under written instructions, and an email service may store correspondence to deliver replies. Where a supplier is outside the UK, contractual safeguards and a documented transfer assessment are used. Contact records are normally deleted within 24 months after the matter is closed, while security logs are generally retained for up to 90 days unless a longer period is needed to investigate an incident. Requests to access, correct, erase or restrict information can be made to the address above; Loreon aims to acknowledge within five working days and respond within one calendar month, subject to lawful extensions for complex requests.