Policy register / 2026

Cookie policy

How Yarrow handles information in the United Kingdom.

1. Scope and responsibility

This policy applies to the Yarrow website and editorial contact service operated from 14 Elmwood Drive, Birmingham, B29 4AA, United Kingdom. It explains what information may be collected, why it is used and how readers can exercise their rights. Yarrow is an information publisher and does not provide clinical care. Questions about this policy may be sent to the postal address or raised through the contact page.

2. Information collected

Browsing normally creates technical records such as an IP address, browser type, approximate region and pages requested. If a reader contacts Yarrow, we may receive their name, email address, telephone number and the contents of their message. We do not ask readers to submit health records, diagnoses or medication details. Please avoid including sensitive information in a general enquiry.

3. Lawful basis

We use information needed to respond to an enquiry under legitimate interests or steps requested by the person contacting us. Where optional analytics cookies are enabled, processing is based on consent. We may retain records where necessary to comply with a legal obligation or establish, exercise or defend a legal claim. We do not sell personal information.

4. Retention

General contact correspondence is normally retained for 24 months after the last meaningful exchange, then securely deleted or anonymised. Technical security logs may be retained for up to 90 days. Consent records for cookies may be retained for 12 months so that a preference is respected. Longer retention is limited to accounting, legal or dispute records where a defined obligation requires it.

5. Service providers

Yarrow may use hosting, security, email delivery and analytics providers acting under written instructions. Providers receive only the information needed for their service and are expected to apply confidentiality and security controls. We may disclose information where required by UK law, a court or a competent regulator. We do not use personal data to make decisions with legal or similarly significant effects.

6. Cookies

Essential session cookies support basic site operation and normally expire when the browser session ends. The cookie-choice record named cookieChoice may remain for 12 months. If analytics are enabled, an analytics identifier may be retained for up to 13 months and is used in aggregated reporting. The cookies page explains categories, purposes and how browser settings can be used to manage them.

7. International transfers

Some technology providers may process limited information outside the UK. Where this occurs, Yarrow relies on an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses or another lawful safeguard. Readers may ask for more information about the relevant safeguard by writing to the address above. We assess providers before use and review material changes.

8. Security

Access to enquiry information is limited to people who need it for editorial administration. We use access controls, current software, encrypted connections and routine deletion. No online transmission can be guaranteed to be completely secure, so readers should not include unnecessary confidential details. Suspected incidents are assessed and reported where UK law requires notification.

9. Your rights

Subject to legal exceptions, UK residents may request access, correction, deletion, restriction, portability or objection to particular processing. Consent may be withdrawn at any time without affecting earlier lawful processing. To exercise a right, write to Yarrow at 14 Elmwood Drive, Birmingham, B29 4AA, United Kingdom, describing the request and the contact details used. We may ask for proportionate identity confirmation.

10. Complaints

We aim to resolve privacy concerns directly within 30 days where possible. If a reader remains dissatisfied, they may contact the Information Commissioner’s Office through its official UK channels. A complaint can be made without losing any other legal rights. We ask that the individual first gives Yarrow a fair opportunity to investigate the issue and explain the outcome.

11. Children and sensitive information

The site is intended for adults and general readers. We do not knowingly seek information from children and will delete information collected inadvertently when identified. Health information is special category data under UK law, so readers should not send it through general contact forms. If such information is received, it is restricted, assessed and deleted when no longer needed.

12. Changes and contact

This policy was reviewed on 5 October 2026 and applies from that date. Earlier versions may be requested for a reasonable period where required for accountability. Material changes will be reflected on this page with a new review date. For questions, contact Yarrow at 14 Elmwood Drive, Birmingham, B29 4AA, United Kingdom or call 020 7946 0876.

Cookies are small text files or similar browser technologies placed on a device when a page is loaded. Yarrow uses them sparingly so that pages work, preferences can be remembered and, where consent is given, broad usage patterns can be understood. A cookie does not by itself reveal a reader's name or message content.

  • yarrow_consent: records the selected cookie preference for up to 12 months.
  • yarrow_session: supports a temporary browsing session and expires when the session ends or after 24 hours.
  • _ga and related analytics identifiers: used only after consent, with a lifespan of up to 13 months where configured by the analytics provider.

Essential cookies are used under the legitimate interest of providing a functioning website. Optional analytics or preference cookies are used only after consent, and a reader can withdraw that consent through the available cookie controls or browser settings. Blocking essential cookies may affect navigation, but the editorial pages remain intended to be readable without optional tracking.

Third-party tools may set cookies only when their service is enabled. These may include a hosting service, a consent-management tool and a privacy-focused analytics provider in the UK or European Economic Area. Yarrow does not use cookies to infer sensitive health information or to build a profile for unrelated advertising.

Most browsers allow cookies to be reviewed, blocked or deleted. Browser controls differ, so the relevant help page should be consulted for the device being used. A deletion request does not necessarily remove aggregated, non-identifying statistics already created before withdrawal.

For questions, contact Yarrow at 14 Elmwood Drive, Birmingham, B29 4AA, United Kingdom, or call 020 7946 0876. We aim to respond within five working days. This cookie notice was reviewed on 5 October 2026 and may be updated when cookie names, providers or retention periods change.

Cookie categories are assessed by purpose rather than by the name chosen by a supplier. A strictly necessary item supports a requested page or security function; a preference item remembers a choice such as the cookie banner state; an analytics item helps understand broad page use; and an advertising item would support measurement or delivery only where the relevant consent has been provided.

The consent record may include the choice made, the date, a policy version and a limited technical identifier needed to prevent the banner appearing repeatedly. It is not intended to contain the text of a private message or a sensitive profile. Consent is reviewed after 12 months, or sooner if the purpose, provider or technology changes materially.

Yarrow may use a UK or EEA hosting provider, a consent-management service and a privacy-focused analytics provider. A provider may receive an abbreviated IP address, referral page, browser type, event time and a random identifier. Data is configured to be aggregated where possible, and analytics records are normally retained for up to 14 months before deletion or aggregation.

Some browser storage may behave like a cookie even when it is stored locally. The same principles apply: it should have a clear purpose, a limited lifetime and a lawful basis. A browser reset can remove preferences but may cause the notice to appear again; it does not create a new consent decision on behalf of the reader.

Requests about cookie use can be sent to 14 Elmwood Drive, Birmingham, B29 4AA, United Kingdom, or by calling 020 7946 0876. Yarrow aims to acknowledge a request within five working days and investigate a provider or cookie-name question within 20 working days. The notice was reviewed on 5 October 2026 and the next scheduled review is October 2027.