Privacy Policy

This policy explains how Medorius Ltd (“Medorius”, “we”, “us”) handles personal data when you visit medorius.com or contact us. We are the data controller for that data.

Each of our apps has its own privacy policy, which explains what that app collects and why. For Gymwise, see gymwise.net/privacy.html. For Hadi, see the privacy policy linked from its App Store and Google Play listings.

What this website collects

Very little. This site has no accounts, no advertising, no analytics and no tracking cookies.

• Server logs. Like any website, our hosting provider automatically records technical information when a page is requested: your IP address, browser type, the page requested and the time. These logs are used to keep the site secure and working, and are kept for a limited period.
• Messages you send us. If you use the contact form or email us, we receive your name, email address, company if you give it, and whatever you choose to write. The contact form passes your message to Brevo, our email delivery provider, which emails it to our inbox. The website itself doesn’t store it, and Brevo keeps only a delivery log for a limited time. We use it only to reply to you and, if we end up working together, to run that project.
• Spam check on the contact form. The form uses Cloudflare Turnstile to tell people from bots. When you open the contact page, Turnstile looks at technical signals from your browser, such as your IP address and browser details, and doesn’t set advertising cookies or track you across sites. See Cloudflare’s Turnstile privacy notice.

Lawful basis

We process server logs and enquiries on the basis of our legitimate interests in running a secure website and responding to people who contact us. Where we go on to work with you, we process the data needed for that work to perform our contract with you.

Who we share it with

We don’t sell personal data. We share it only with the providers who help us run the business, such as our web hosting provider, our email provider (Google Workspace), Brevo, which delivers contact form messages, and Cloudflare, which runs the spam check on the form, and only as far as they need to provide that service. Brevo is based in France and processes data under the GDPR. We would also disclose data where the law requires it.

How long we keep it

We keep enquiries for as long as needed to deal with your enquiry and any work that follows, and for as long as we’re legally required to keep business records afterwards.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, object to or restrict how we use it, and ask for a copy in a portable format. Email contact@medorius.com and we’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.

Changes

If we change this policy, we’ll update it here and change the date at the top.

Contact

Medorius Ltd, London, England. contact@medorius.com