Privacy Policy
This Privacy Policy explains, in plain terms, how Delvona Health Ltd of 12 Park Row, Leeds, LS1 5HD, England (Company No. 11384756, VAT GB 402 5519 27) collects, uses, shares, retains and protects personal data gathered through delvona.world, telephone confirmation calls, order requests and customer support. It is written for visitors and customers located in the United Kingdom and reflects our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Scope and purpose of this policy
This policy applies to any individual who visits delvona.world, submits an order request through our online form, telephones our customer service line, or otherwise corresponds with Delvona Health Ltd about Hair Growth Formula. It covers personal data collected through our website, our order confirmation calls, email correspondence and any paperwork exchanged in connection with delivery or returns. It does not extend to third-party websites that our pages may link to, nor to information you may voluntarily share on social media platforms that are not operated by us. We encourage you to read this policy in full before submitting any personal information, and to revisit it periodically, since it may be updated as our processes evolve.
2. Who we are and how to contact us
The data controller responsible for your personal data is Delvona Health Ltd, a company registered in England and Wales under Company No. 11384756, with its registered office at 12 Park Row, Leeds, LS1 5HD. Our VAT registration number is GB 402 5519 27. For any question about this policy, or to exercise any of the rights described below, you can write to us at [email protected], telephone us on +44 113 289 4203 during our working hours of Monday to Friday, 9:00 to 17:30, or write to our postal address above marked for the attention of the Data Protection Contact. We aim to acknowledge every privacy-related enquiry promptly and to treat every request with appropriate care, regardless of the channel used to contact us.
3. Categories of personal data we collect
When you submit an order request we collect your full name, telephone number, delivery address and any notes you add about delivery preferences. When we telephone you to confirm an order, we may record the call for quality and dispute-resolution purposes, and that recording will contain your voice and anything you say during the conversation. If you contact customer support by email we retain the content of that correspondence, including any attachments. Our website automatically records technical information such as your IP address, browser type, device type, referring page and the pages you view, gathered through server logs and privacy-conscious analytics. We do not request or store full payment card numbers through our website, since payment is collected by the courier at the point of delivery using a separate card terminal operated by our courier partner.
4. Legal basis for processing your data
We rely on several legal bases recognised under Article 6 of the UK GDPR, and we apply the one that best fits each activity. Processing your name, address and telephone number to confirm and fulfil an order is necessary for the performance of a contract, or to take steps towards forming one, under Article 6(1)(b). Retaining order and financial records to meet our tax and accounting obligations is necessary for compliance with a legal obligation under Article 6(1)(c). Using aggregated website analytics to understand how our site performs, and taking reasonable steps to prevent fraud or abuse of our order form, is based on our legitimate interests under Article 6(1)(f), balanced against your rights. Where we ask for your consent, for example for optional cookies or marketing communications, we rely on Article 6(1)(a) and you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. How we use the information we collect
We use your contact details primarily to confirm your order by telephone, to arrange dispatch and delivery, and to respond to any queries or complaints you raise with us. We use delivery information to instruct our courier partners and to track the progress of a parcel. We use aggregated, non-identifying analytics data to understand which pages are useful and where visitors experience difficulty, so that we can make gradual improvements to the website. We may use your email address to send you order-related updates, such as confirmation of dispatch, and, only where you have separately opted in, occasional messages about new products or promotions. We do not use your data to make automated decisions that produce legal or similarly significant effects concerning you, and no part of our order process relies on automated profiling.
6. Retention periods
We keep personal data only for as long as necessary for the purposes described in this policy, and no longer. Order, invoice and delivery records are retained for six years from the end of the relevant financial year, in line with standard UK bookkeeping practice and the limitation periods set out in the Limitation Act 1980. Call recordings made during order confirmation are retained for twelve months and then automatically deleted. Customer service correspondence is retained for twenty-four months from the date a query is resolved. Marketing consent records are retained for three years from your last interaction with our communications, after which we will ask you to reconfirm your preference. Cookie consent choices are stored for twelve months, after which the consent banner will reappear. Website security logs are retained for ninety days for the purpose of detecting and investigating misuse.
7. Your rights and how to exercise them
Under the UK GDPR you have the right to request access to the personal data we hold about you, to ask us to correct inaccurate information, and to request that we erase your data where there is no continuing lawful reason for us to keep it. You may also ask us to restrict processing in certain circumstances, to receive a portable copy of data you provided to us, and to object to processing that relies on our legitimate interests. Where processing is based on consent, you may withdraw that consent at any time. To exercise any of these rights, contact us using the details in section 2, including enough information for us to verify your identity. We aim to respond to any such request within one calendar month, and if a request is particularly complex we will explain any extension and the reason for it within that same period.
8. Third-party processors and recipients
We share personal data only where necessary to run our business, and only with parties who are contractually bound to protect it. Our courier partners, including Evri (Hermes Parcelnet Ltd) and DPD UK, receive names, addresses and telephone numbers to deliver parcels and collect payment on delivery. Our website hosting and infrastructure is provided by Vercel Inc., which processes technical logs necessary to serve our pages. Transactional emails, such as dispatch notifications, are sent through Postmark, a service of ActiveCampaign, LLC. Telephone order confirmation is supported by Aircall UK Ltd, which provides our call-handling platform. Website analytics are provided by Plausible Analytics, a privacy-focused provider that does not use tracking cookies. None of these providers are permitted to use your data for their own marketing purposes.
9. Cookies and similar technologies
Our website uses a small number of cookies, described in full in our separate Cookie Policy, which forms part of this notice. In summary, we use a strictly necessary session cookie called delvona_session that expires when you close your browser, and a preference cookie called delvona_consent that remembers your cookie choices for twelve months. Where you consent to analytics, a short-lived identifier may be set by Plausible Analytics for statistical purposes only; this provider does not use persistent cross-site tracking cookies. We do not currently use marketing or advertising cookies. You can manage or withdraw cookie consent at any time using the Cookie Settings link in our website footer.
10. International data transfers
Most of the personal data we process stays within the United Kingdom, particularly information shared with our couriers. However, some of our service providers, including our website hosting provider Vercel Inc. and our transactional email provider ActiveCampaign, LLC, are based in the United States. Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as reliance on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism recognised by the Information Commissioner's Office. We only transfer the minimum data necessary for these providers to deliver their services.
11. Security measures
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Our website is served exclusively over encrypted HTTPS connections, and access to our order management and telephone systems is restricted to authorised staff who require it to perform their role. We review our data-handling practices periodically and take prompt action to address any weakness we identify. No method of transmission or storage is completely secure, but we work to keep risk as low as reasonably possible given the nature of the information we hold.
12. Children's data
Our products and website are intended for adults, and Hair Growth Formula is formulated for adult use. We do not knowingly collect personal data from children, and our order form is not designed to be completed by anyone under eighteen. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take reasonable steps to delete it as soon as practicable. Parents or guardians who believe their child has provided us with personal data are welcome to contact us using the details in section 2.
13. Complaints and the supervisory authority
If you are unhappy with how we have handled your personal data, please contact us first at [email protected] so that we can try to resolve the matter directly. We aim to acknowledge privacy complaints within five working days and to provide a substantive response within thirty calendar days. If you remain dissatisfied, or prefer to raise the matter independently, you have the right to lodge a complaint with the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, or online at ico.org.uk. We would, however, welcome the opportunity to address your concern before you take that step.
14. Changes to this policy
We may update this policy from time to time to reflect changes in our practices, our suppliers, or the law. Where a change is significant we will take reasonable steps to bring it to your attention, for example through a notice on our homepage. The version history below records the most recent changes: 11 August 2026 — initial publication of this policy alongside the launch of delvona.world. We intend to carry out our first scheduled annual review of this policy by 11 August 2027, and will update the effective date above whenever a substantive revision is made.
15. Nutrient function disclaimer
For completeness, we note that this policy governs personal data only and does not constitute health or medical advice. Nutrient function claims referenced elsewhere on this website are made in accordance with Regulation (EC) No 1924/2006 as retained in UK law, and Hair Growth Formula is a food supplement, not a medicine. Nothing in this Privacy Policy should be read as altering your statutory consumer rights, which are addressed separately in our Terms of Use and Returns Policy.