Privacy Policy

George's Stroke Recovery Hub

Last updated: 19 October 2026

1. Introduction

Welcome to George's Stroke Recovery Hub, an independently operated UK website providing accessible entertainment, practical information, useful resources and recommendations for stroke survivors, their families, carers and the wider community.

We respect your privacy and are committed to handling personal information fairly, securely and transparently in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK privacy legislation.

This Privacy Policy explains what personal information we collect, why we process it, who may receive it and the rights available to you.

2. Who operates this website?

Website: George's Stroke Recovery Hub

Website Operator and Data Controller: Andrew Wilson

Chief Operating Officer: George

Country: United Kingdom

Privacy contact: georgesstrokerecovery@gmail.com

Andrew Wilson is responsible for the website's administration, content, technical operations and decisions concerning the processing of personal information.

George contributes to the project as Chief Operating Officer, offering guidance and insight informed by his experience of stroke recovery.

George's public-facing title does not, by itself, make him legally responsible for the website's data processing.

The website operates independently and is not presented as a registered charity, medical provider or incorporated company.

3. Information we collect

Depending on how you use our website, we may process:

  • Contact information: Your name, email address and information voluntarily included in an enquiry.

  • Technical information: IP addresses, browser details, device information, access records and security logs generated by our hosting or technical services.

  • Website usage information: Page visits, visitor numbers, referral sources, device categories and website performance information where analytics are enabled.

  • Cookie preferences: Records of your choices concerning optional cookies and tracking technologies, where consent management is implemented.

We do not request medical records or detailed personal health information through ordinary website communications.

Please avoid including confidential medical information in general enquiries.

If sensitive information is provided unexpectedly, we will handle it appropriately and avoid retaining it unnecessarily.

4. How we use your information and our lawful bases

We process personal information for the following purposes:

Responding to enquiries

We use information supplied by visitors to read and respond to their messages.

Our lawful basis is generally our legitimate interests in communicating with people who contact us, unless another lawful basis applies.

Operating and securing the website

Technical information may be processed to maintain website functionality, detect misuse, investigate errors and protect our services.

Our lawful basis is generally our legitimate interests in operating a secure and reliable website.

Meeting legal obligations

Where necessary, information may be processed to comply with applicable legal requirements.

Our lawful basis is compliance with a legal obligation.

Website analytics

We intend to introduce website analytics to understand visitor numbers, page popularity, navigation patterns and technical performance.

Where analytics involve non-essential cookies or similar tracking technologies requiring consent, they will not be activated for visitors until the required consent has been obtained.

Our lawful basis for processing personal data through consent-based analytics will be consent. Any alternative approach will be assessed and explained before implementation.

Email marketing

If we introduce optional newsletters or marketing communications, we will explain their purpose and obtain any consent required under applicable law.

Visitors will be able to unsubscribe from marketing communications.

5. Contact enquiries and subscriptions

Visitors can contact us directly by email:

georgesstrokerecovery@gmail.com

We use the information in an email to understand the enquiry, provide a response and maintain relevant correspondence where necessary.

We do not automatically add people who contact us to marketing mailing lists.

Newsletter subscriptions and additional contact forms may be introduced in the future. Before activation, this policy will be updated to explain the information collected, the service providers involved and applicable retention arrangements.

6. Cookies and similar technologies

Our website uses Hostinger for website hosting and may rely on essential technologies necessary for website functionality, security and administration.

Third-party embedded videos and other external services may use cookies or similar technologies.

We also intend to introduce website analytics.

Where cookies or similar technologies are not strictly necessary and UK law requires consent, we will request that consent before those technologies are used.

Visitors will be offered appropriate choices, including the ability to reject non-essential cookies and withdraw consent.

Further details will be provided in our separate Cookie Policy, including the technologies actually used once confirmed.

7. Third-party videos and embedded content

George's Stroke Recovery Hub features external video content, including nature cameras, scenic journeys, wildlife footage and other entertainment experiences.

These videos may be supplied through services such as YouTube, Explore.org or other third-party video providers.

Depending on the provider and how the content is embedded, those services may receive information such as your IP address, device information and viewing activity.

Some embedded services may use cookies or tracking technologies.

Where legally required, we will use appropriate consent controls before non-essential tracking is activated.

Visitors should also review the privacy policies of external video providers.

8. Affiliate links and commercial recommendations

Some pages contain links to external retailers, holiday providers and other commercial services.

We may earn a commission when visitors make qualifying purchases through certain links. This does not normally increase the price charged to the visitor by the retailer.

Affiliate partners may use their own cookies or tracking technologies when visitors interact with their services.

Where affiliate tracking takes place on our website, we will assess and apply any required consent controls.

When visitors leave our website, the external provider's own privacy policy applies to its processing of personal information.

We do not sell visitor contact information to advertisers.

Commercial relationships and affiliate recommendations will be identified through appropriate disclosures.

9. Service providers and sharing information

We may share limited personal information with service providers where necessary to operate and maintain the website.

These may include:

  • Hostinger: Website hosting, infrastructure and related technical services.

  • Email service providers: Handling and delivery of website correspondence.

  • Video platforms: Delivery of embedded video content.

  • Analytics providers: Website statistics and performance measurement when enabled.

  • Security and technical providers: Protection and maintenance of website services.

We do not share personal information with third parties for their independent marketing purposes without an appropriate legal basis.

Where a provider processes personal information on our behalf, we will assess the relevant contractual and security arrangements.

Some external providers act as independent data controllers and are responsible for their own processing activities.

10. International data transfers

Some website service providers and external platforms may process personal information outside the United Kingdom.

Where we are responsible for transferring personal information internationally, we will ensure that an appropriate legal transfer mechanism applies, such as UK adequacy regulations or approved contractual safeguards where required.

Further information about relevant transfer arrangements can be requested using our privacy contact address.

11. Data security

We take reasonable technical and organisational measures to protect personal information.

These include appropriate account security, restricted administrative access, secure website connections and suitable hosting arrangements.

We also aim to limit access to personal information to those who need it for legitimate website purposes.

Although we take security seriously, no internet service can guarantee absolute protection against every security risk.

12. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations.

Our retention approach includes:

  • General email enquiries: Retained while an enquiry is being handled and for a reasonable period afterwards where follow-up, record-keeping or legal purposes justify this.

  • Technical and security logs: Retained according to the relevant hosting provider's applicable settings and retention arrangements.

  • Cookie consent records: Retained for a period appropriate to demonstrating and managing visitors' consent choices.

  • Analytics information: Retained according to the settings selected when an analytics service is introduced.

  • Marketing subscriptions: If introduced, subscription details will be retained while a visitor remains subscribed, subject to necessary suppression or compliance records after unsubscribing.

We will periodically review information held and delete or anonymise it when no longer needed.

13. Your data protection rights

Under UK data protection law, you may have the right to:

  • Request access to personal information held about you.

  • Request correction of inaccurate information.

  • Request deletion of personal information in certain circumstances.

  • Request restriction of processing.

  • Object to certain processing activities.

  • Request data portability where applicable.

  • Withdraw consent at any time where processing relies on consent.

These rights are subject to applicable legal conditions and exceptions.

To make a request, contact:

georgesstrokerecovery@gmail.com

We will normally respond within one calendar month, subject to applicable extensions and legal requirements.

14. Children and accessibility

George's Stroke Recovery Hub aims to provide an accessible and welcoming experience for visitors with different communication needs and abilities.

Our website is not specifically designed to collect personal information from children.

We aim to minimise unnecessary personal information collection and encourage parents or guardians to supervise younger visitors when appropriate.

We also recognise that some visitors may require assistance when communicating with us or exercising their privacy rights.

We will make reasonable efforts to support accessible communication.

15. Complaints

If you have concerns about how we handle personal information, please contact:

georgesstrokerecovery@gmail.com

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

ICO website: https://ico.org.uk/

We encourage visitors to contact us first where possible so we have an opportunity to address their concerns.

16. Changes to this Privacy Policy

We may update this Privacy Policy when our website features, service providers, information-processing practices or relevant legal requirements change.

The latest version will be available on this website and will display its most recent update date.

George's Stroke Recovery Hub

Website Operator and Data Controller: Andrew Wilson

Chief Operating Officer: George

Privacy enquiries: georgesstrokerecovery@gmail.com