Privacy Policy

Last updated: 24 August 2026

1. Who we are

This website, mediforte.co.uk, is operated by Mediwell North West Ltd (trading as Medi-Forte) ("we", "us", "our"), a company registered in England and Wales with company number 15753666, whose registered office is at 48-52 Penny Lane, Mossley Hill, Liverpool, Merseyside, United Kingdom, L18 1DG. Our site address is Part First Floor, Regents Court, Regents Place, Regents Road, Manchester M5 4BT.

We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:

• Email: Rosieaslan@medi-forte.com
• Post: 48-52 Penny Lane, Mossley Hill, Liverpool, Merseyside, United Kingdom, L18 1DG

2. What personal data we collect

We only collect personal data that you actively provide to us, or that is generated automatically through your use of the website. Specifically:

2.1 Contact form

When you submit our contact form, we collect:

• Name
• Email address
• Phone number (if provided)
• Any message content or additional information you choose to include

2.2 Website usage data (Google Analytics)

We use Google Analytics 4 (GA4) to understand how visitors use our website. This may collect:

• Pages visited and time spent on the site
• Approximate location (derived from IP address)
• Device, browser and operating system information
• Referral source (how you arrived at our site)

IP addresses are not stored by Google Analytics 4; they are used momentarily to derive approximate location and are not retained.

This data is collected via cookies — see our Cookie Policy for details and how to manage your preferences.

2.3 Server logs

Our web server automatically logs certain technical information for security, diagnostic and website performance purposes, including:

• IP address
• Date and time of access
• Pages requested
• Browser/user agent string

Server logs are not actively linked to individual identities and are retained only for as long as necessary for security and troubleshooting purposes (see Section 5).

We do not operate user accounts, logins, or membership areas on this website, and we do not sell any products or process payments through the site.

3. How we use your personal data and our legal basis

Purpose	Data used	Legal basis (UK GDPR Art. 6)
Responding to your enquiry submitted via the contact form	Name, email, phone, message	Legitimate interests (to respond to enquiries) / Consent
Understanding and improving website performance	Analytics data (via Google Analytics)	Consent (via cookie banner)
Maintaining website security and diagnosing technical issues	Server logs, IP address	Legitimate interests
Complying with legal obligations	As required	Legal obligation

We will never use your data for automated decision-making or profiling that produces legal effects concerning you.

4. Who we share your data with

We do not sell or rent your personal data to third parties. We may share limited data with:

• Google LLC — as the provider of Google Analytics, in accordance with Google's own privacy policy. Where applicable, IP addresses processed by Google Analytics may be anonymised/truncated.
• Our website hosting provider — for the purpose of hosting the site and maintaining server logs.
• Regulators or law enforcement — where we are legally required to do so.

We do not transfer your personal data outside the UK except where a third-party provider (such as Google) processes data outside the UK, in which case this is done under appropriate safeguards (e.g. Standard Contractual Clauses / UK International Data Transfer Addendum).

5. How long we keep your data

• Contact form submissions: We do not store contact form submissions in a database. When you submit the form, its contents are sent directly to our team by email. The submitted information will therefore be retained for as long as it remains in our email inbox, in line with our general email retention practices, after which it may be deleted at our discretion.
• Analytics data: retained according to Google Analytics 4's default retention settings (configurable in our Google Analytics account, typically 14 months).
• Server logs: retained indefinitely (server logs are not automatically deleted) for security and diagnostic purposes.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), in certain circumstances
• Restrict or object to our processing of your data
• Data portability — receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent (e.g. analytics cookies)

To exercise any of these rights, contact us at Rosieaslan@medi-forte.com. We will respond within one month as required by law.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

7. Cookies

This website uses cookies to operate correctly and to understand how visitors use the site. For full details, please see our Cookie Policy.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure hosting infrastructure and access controls.

9. Children's privacy

This website is not directed at children, and we do not knowingly collect personal data from anyone under the age of 16.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

11. Contact us

If you have any questions about this Privacy Policy, please contact us at:

Mediwell North West Ltd (trading as Medi-Forte) 48-52 Penny Lane, Mossley Hill, Liverpool, Merseyside, United Kingdom, L18 1DG Company number: 15753666 Rosieaslan@medi-forte.com