Privacy Policy

Last updated: 4 November 2025

Evaspan Health Ltd (“Evaspan”, “we”, “us”, “our”) respects your privacy. This policy explains what we collect on our website evaspan-health.co.uk, how we use it, and your rights under the UK GDPR.

Who we are

What we collect

When you join the waitlist, we collect only the details you submit:

• Name (required)
• Email (required)
• Optional: age band, sex, primary goal, and how you heard about us

We also receive limited technical information (e.g., browser type, device, referrer) through our hosting provider. We do not collect medical or sensitive data through this website.

How we use your data

• To register your interest and contact you about Evaspan’s services and early access opportunities.
• To understand aggregate interest and improve our messaging.
• To maintain site security and prevent spam using a non-intrusive honeypot field (no CAPTCHAs).

Legal bases

• Consent — when you submit the form to join the waitlist.
• Legitimate interests — for site operation, security, and anonymous analytics.

Where your data is stored

Form submissions are processed by a secure Cloudflare Pages Function and stored in Cloudflare Workers KV, a serverless key-value store managed by Cloudflare. The website itself is hosted and served from Cloudflare Pages data centres.

Sharing & processors

We do not sell or share personal data with third parties for marketing. We use trusted processors to operate our website:

• Cloudflare, Inc. — provides hosting (Pages), data storage (Workers KV), and privacy-first analytics (Cloudflare Web Analytics).

If we later integrate an email delivery or CRM provider, we’ll update this page before collecting or processing data through that system.

International transfers

Cloudflare may process data outside the UK/EEA. Where it does, appropriate safeguards such as Standard Contractual Clauses apply. Cloudflare maintains ISO 27001 certification and strong privacy controls.

Retention

We keep waitlist data until the early-access phase ends or for up to 24 months, whichever is shorter, unless you request deletion sooner. Aggregated, non-identifiable statistics may be kept longer.

Analytics & cookies

This site uses Cloudflare Web Analytics, which is automatically enabled by our hosting provider. It is cookieless and collects only anonymous usage metrics (e.g., page views, referrers, device type). No cookies are set, no personal data is stored, and no consent banner is required. These insights help us understand general site performance without tracking individuals.

Your rights (UK GDPR)

You can:

• Access the personal data we hold about you
• Request correction or deletion
• Object to or restrict processing
• Withdraw consent at any time (this won’t affect prior lawful processing)
• Request data portability (where applicable)

To exercise any of these rights, email info@evaspan-health.co.uk.

You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk.

Security

We use HTTPS, least-privilege access to data, and Cloudflare’s enterprise-grade security protections. No internet service is completely secure, but we aim to protect your data using strong technical and organisational measures.

Children

This site is not intended for children under 16. If you believe a child has submitted personal data, please contact us so we can delete it.

Changes to this policy

We may update this policy as our services evolve. The “Last updated” date above will always reflect the most recent version.