Privacy Policy

Privacy Policy
Last Updated On 15-Feb-2026
Effective Date 15-Feb-2026

This Privacy Policy describes the policies of Diverticulitis Club, Rightsource Solutions Ltd, 8 King Edward Street, Oxfordshire OX1 4HL, United Kingdom of Great Britain and Northern Ireland (the), email: info@diverticulitis.club, on the collection, use and disclosure of your information that we collect when you use our website (https://diverticulitis.club) (the “Service”). By accessing or using the Service, you consent to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

    1. Information We Collect

    We collect personal data and, where you voluntarily provide it, special category health and demographic data.

    1. Name
    2. Email address
    3. Account information
    4. Age or age range
    5. Country of residence
    6. Sex at birth
    7. Ethnicity (if provided)
    8. Income band, education level, occupation (if provided)
    9. Health-related information including symptom severity, flare data, bowel movement details, stool consistency, stress levels, food intake, dietary patterns
    10. Medical history information including diagnosis age range, surgical history, antibiotic history
    11. Technical data (IP address, browser type, device information, usage analytics)

    Health and demographic information is provided voluntarily by you through diary entries, forms, or profile questions.

    2. Special Category Data

    Certain information you provide (such as health data and demographic characteristics) qualifies as “special category data” under UK GDPR and EU GDPR. We process this information only with your explicit consent. You may withdraw your consent at any time by contacting us at info@diverticulitis.club. Withdrawal of consent does not affect processing already carried out. You can also delete your account via your profile page here: https://diverticulitis.club/forums/users/admin/edit/

    3. How We Collect Your Information

    We collect information in the following ways:

    1. When you register for an account
    2. When you complete diary entries or forms
    3. When you subscribe to newsletters
    4. When you make a purchase
    5. When you contact us for support
    6. Through cookies and analytics technologies

    4. Lawful Basis for Processing

    We process personal data under the following lawful bases:

    1. Your explicit consent (for health and special category data)
    2. Performance of a contract (providing account access and services)
    3. Legitimate interests (improving the Service, analytics, fraud prevention)
    4. Legal obligations where applicable

    5. How We Use Your Information

    We use your information to:

    1. Create and manage your account
    2. Provide personalised insights and dashboards
    3. Analyse diary data to improve platform functionality
    4. Generate anonymised and aggregated community trend reports
    5. Process payments and manage subscriptions
    6. Provide customer support
    7. Send service updates and marketing communications (where consented)
    8. Improve security and prevent misuse

    We do not sell your personal data. We do not share identifiable health data with third parties for marketing purposes.

    Payments and payment processors

    When you make a purchase or start a subscription on Diverticulitis.club we share the personal data required to complete the transaction (for example: name, billing address, email address, transaction amount and basic order information). We use Stripe to process card payments and subscriptions. Stripe acts as a data processor and will process payment data in accordance with its privacy policy and our Data Processing Agreement. We do not store your full card number (PAN) on our servers – card details entered on our checkout form are transmitted directly to Stripe and are tokenised so that we never have access to sensitive card data. For more information about how Stripe processes payment information, please see Stripe’s privacy information at Stripe’s Privacy Center.

    Lawful basis & international transfers

    We process payment information on the lawful basis of performance of a contract (to provide the paid service) and to comply with legal obligations (for example, accounting and tax records). Stripe (and its subprocessors) may transfer or store personal data outside the UK/EU; where transfers occur, they will be subject to appropriate safeguards such as standard contractual clauses or Stripe’s Data Processing Addendum. You can request more detail about these transfers by contacting us at info@diverticulitis.club

    Security and PCI compliance

    Protecting payment information is important to us. We have implemented technical and organisational measures and use Stripe to make payment processing secure. Stripe tokenises and stores card information and helps meet PCI-DSS requirements. However, PCI obligations are shared between us and Stripe depending on how payments are implemented; for example, if we collect card details through our site you may see additional PCI-DSS steps. We encourage users to complete payments using our Stripe-hosted checkout or Stripe Elements so that card data is handled directly by Stripe. More on Stripe’s security and PCI guidance is available from Stripe.

    Billing records and retention

    We retain transaction records and basic billing information for accounting and fraud-prevention purposes. Unless otherwise required by law, we will keep billing and transaction data for a minimum of 6 years for tax and accounting purposes; any card PANs are not retained by us. If you would like to request deletion of your transaction records, contact us at info@diverticulitis.club and we will respond in line with applicable law. (Note: deletion requests may be limited where we are required to retain records for legal or tax reasons.)

    6. Anonymised & Aggregated Data

    We may use anonymised and aggregated data (which does not identify you) for research, statistical analysis, reporting, and to improve understanding of diverticular disease patterns. Such data cannot reasonably be used to identify you.

    7. How We Share Your Information

    We may share your information with trusted third-party service providers who assist in operating the Service, including:

    1. Website hosting providers
    2. Analytics providers
    3. Email newsletter services
    4. Payment processors

    These providers process data only on our instructions and are required to implement appropriate security safeguards. We may disclose information where required by law or to protect our legal rights.

    8. Data Retention

    We retain personal and health-related data only for as long as necessary to provide the Service and fulfil the purposes outlined in this policy. You may request deletion of your data at any time. Upon account deletion, identifiable personal data will be deleted within a reasonable timeframe unless legal obligations require retention. Anonymised aggregate data may be retained indefinitely.

    9. Your Rights

    Under applicable data protection law, you may have the right to:

    1. Access your personal data
    2. Correct inaccurate data
    3. Request deletion (“right to be forgotten”)
    4. Restrict or object to processing
    5. Data portability
    6. Withdraw consent at any time
    7. Lodge a complaint with a supervisory authority (ICO in the UK)

    To exercise your rights, contact us at info@diverticulitis.club.

    10. Cookies

    We use cookies and similar technologies to improve functionality and analyse usage. For more details, please see our Cookie Policy.

    11. Security

    We implement appropriate technical and organisational measures to protect your data. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

    12. Third-Party Links

    Our Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites.

    13. Contact & Data Protection

    If you have questions or concerns about this Privacy Policy or how your data is processed, please contact: Rightsource Solutions Ltd 8 King Edward Street Oxfordshire OX1 4HL Email: info@diverticulitis.club