Last updated 26 August 2026
AllHealth UK operates allhealth.uk and is the data controller for the small amount of personal data described here. We handle it under the UK GDPR and the Data Protection Act 2018.
We have not appointed a Data Protection Officer. We are not required to, and we are not going to name one who does not exist. Write to hello@allhealth.uk and a person will read it.
The site sets no cookies of its own. It does use your browser's local storage, which stays on your device. This is the complete list — nothing here is sent to us or to anyone else, and none of it can identify you.
| Name | Where | What it holds, and why |
|---|---|---|
| theme | localStorage | The word "dark" or "light". Remembers the appearance you chose so the site does not flip back on your next visit. |
| emergency-banner-dismissed | sessionStorage | A single true/false flag. Stops the emergency banner reappearing after you close it. Cleared when you close the tab. |
| allhealth-symptom-diary | localStorage | Your symptom diary entries: date, which symptom, a severity score of 1 to 5, and any notes you typed. Lets the diary still be there when you come back. See the section below — this is health data. |
All three are functional: they exist only to make the site do the thing you asked it to do. You can delete any of them at any time by clearing site data for allhealth.uk in your browser settings. Nothing breaks if you do — the diary simply empties, and the site goes back to your system's light or dark preference.
What you type into the symptom diary is data concerning health. That is a special category of personal data under Article 9 of the UK GDPR and deserves to be said plainly rather than buried.
Those entries are written to local storage in the browser you are using, on your own device. They are not transmitted to AllHealth UK. They are not sent to any third party. There is no server behind this site that could receive them, and no one operating the site can read them or recover them for you.
Two consequences worth knowing. First, the diary is only as private as the device and browser profile you use — anyone who can open your browser can open your diary, so think twice on a shared or public computer. Second, because we hold no copy, clearing your browser data or switching device deletes the entries permanently. Use the print option on the diary page if you want a copy to take to a GP appointment.
You can delete individual entries, or clear the lot through your browser's site data settings, whenever you like. You do not need to ask us.
Google Fonts. The site loads its typeface, Inter, from fonts.googleapis.com and fonts.gstatic.com. Making that request necessarily discloses your IP address, and your browser and operating system details, to Google, which operates outside the UK. We do not receive anything back from it and we cannot see who requested a font. Google's own privacy policy is at policies.google.com/privacy. If you would rather not make that request, a content blocker will stop it and the site will fall back to a font already on your device.
Links to the NHS. Pages across this site link out to nhs.uk and other NHS services such as 111.nhs.uk. Following one of those links takes you to a site we do not run, under its own privacy terms. We are not told that you clicked, and we do not add anything to the link that would identify you.
Hosting. The site is a set of static files served by a hosting provider. As with any website, the server that delivers those files sees your IP address in its own operational logs. We do not build profiles from them, feed them into any analytics product, or use them to identify visitors.
That is the whole list. No advertising networks, no social media embeds, no heatmaps, no session recording, no A/B testing tool.
When you email us, we hold your email address, your name if you give it, and whatever you wrote, in our mailbox. We use it to answer you and for nothing else. We do not add you to a mailing list, we do not profile you, and we do not sell or share your details. The lawful basis is our legitimate interest in replying to people who contact us.
Please do not send us health information about yourself or anyone else. We are not clinicians, we cannot act on it, and we would rather not hold it. If a message describes a medical emergency we will not be able to help in time — call 999, or NHS 111 if it is urgent but not life-threatening.
The contact page tells you whether the form there is currently connected. When it is, submissions pass through a third-party form provider that forwards them to the same mailbox, and that page says so at the point where you type.
We keep correspondence for as long as we need it to deal with the matter and to keep a record of any correction it prompted, then delete it. We have not set an arbitrary retention period, because we would rather not publish one we do not enforce. Ask us to delete your message and we will.
Under the UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct or erase it, ask us to restrict how we use it, object to our using it, and ask us to transfer it to you. In practice the only personal data we hold is email correspondence, so a request will usually be answered quickly.
Email hello@allhealth.uk with what you want. We will respond within one month, as the law requires. We do not charge for this.
Your symptom diary is not covered by any of that, because we never receive it — you already hold the only copy and can delete it yourself.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first, but you do not have to.
This site is written for a general adult audience and is not aimed at children. We do not knowingly collect personal data from anyone under 13. Because there are no accounts and no analytics, there is very little to collect from anyone. If you believe a child has sent us personal data, email us and we will delete it.
If the site starts doing something new with data — analytics, a form provider, a mailing list — this page changes before that goes live, and the date at the top changes with it. A privacy notice that describes things the code does not do is worse than no notice at all, which is how the previous version of this page came to describe analytics that were never installed.
For anything on this page, email hello@allhealth.uk, or use the contact page.