Privacy policy
How Glanced handles personal data. Effective date: 5 October 2026.
Medstack Ltd ("we") runs this website. We are committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the UK Electronic Commerce (EC Directive) Regulations 2002. This policy explains what we collect, why, and your rights.
1. Personal data we collect
This website has no accounts, no forms and no comment system. Viewing a page does not send personal data to us. If you contact us through the contact form on monj.co.uk or by post, we hold the details you give us, such as your name and email address, in order to reply.
We do not collect payment details, medical information or personal data for marketing, profiling or advertising.
2. Lawful basis
We process the personal data you send us under Article 6 UK GDPR on the basis of legitimate interests, to respond to enquiries you start, and consent, where you choose to give us your details.
3. How we use it
Contact details are used only to answer your enquiry and to act on corrections you report. We do not send marketing and we do not share personal data with advertisers or affiliate networks.
4. Email hosting
Email sent to us is hosted and processed by Microsoft Exchange Online (Microsoft 365). Microsoft acts as a data processor for email infrastructure, security and availability under its contractual commitments. See the Microsoft Privacy Statement and the Microsoft Data Protection Addendum.
5. Analytics and cookies
This website does not use analytics and does not set tracking cookies. Your reading preferences (text size, colour theme, spacing and layout) are stored in your own browser's local storage and never sent to us. You can clear them with the reset button in the Reading settings or through your browser.
6. Hosting
The website is served by Vercel Inc. As with any web host, Vercel's servers process your IP address and browser details to deliver the page and to protect the service from abuse. See the Vercel privacy policy.
7. External links
Pages link to NHS, hospital, charity and government sites. Those sites have their own privacy policies, and we are not responsible for them.
8. Data retention
Enquiries are kept only for as long as needed to deal with them or to meet a legal obligation, then securely deleted.
9. Data security
We apply appropriate technical and organisational measures, including access controls and encryption in transit. No system can be guaranteed completely secure.
10. Abusive communications
We may keep a record of communications which are abusive, threatening or malicious where needed for security, legal compliance or evidence, under legitimate interest, for as long as reasonably necessary.
11. Your rights
Under UK GDPR you can ask to see, correct or delete your personal data, object to or restrict processing, and withdraw consent. Make a request through the contact form or by post. We aim to respond within one month. Where a request is complex, this can be extended by up to two further months under Article 12 UK GDPR, and we will tell you if so.
12. Complaints
If you believe your personal data has been handled improperly, you can complain to the UK supervisory authority, the Information Commissioner's Office (ICO). We would welcome the chance to address your concern first.
13. Children
This website is not directed at children and we do not knowingly collect personal data from anyone under 13. Any such data we find is deleted promptly.
14. Changes
We may update this policy for legal, technical or operational reasons. Changes are published on this page with a new effective date.
15. Controller and contact
Medstack Ltd, company number 16439872.
Unit 2, Eden Court, Eden Way, Leighton Buzzard, Bedfordshire, LU7 4FY, United Kingdom.
Privacy enquiries: website contact form or by post to the address above.