Privacy Policy
This Privacy Policy describes how Keltova Health (Pty) Ltd ("Keltova", "we", "us") collects, uses, stores and discloses information gathered through keltova.info and any related correspondence. It is written for readers in South Africa and is intended to be read alongside our Terms of Use and Cookie Policy. Keltova operates as an independent editorial resource about eye health nutrition and does not sell products through this website, which materially limits the categories of personal information we have any reason to collect.
1. Scope of this document
This policy applies to every page under the keltova.info domain, to email correspondence sent to [email protected], and to any telephone contact initiated through the number published in our footer. It does not apply to third-party websites that we may link to from an article, including manufacturer information pages, government portals or academic sources, and readers should consult the privacy notice of any external site before submitting information there. Where a printed or PDF version of an article is distributed outside this domain, this policy governs only the version hosted on our own servers. If a future edition of the site introduces a subscription form, comment system or account area, we will update this document before that feature becomes active and will note the change in the revision log at the end of this page.
2. Categories of information we collect
We collect information you volunteer, such as a name, email address, telephone number and the content of a message, when you use the contact form or write to us directly. We also collect limited technical information automatically when you browse the site, including your browser type and version, device category, approximate region derived from your IP address, referring page, pages viewed and the date and time of the visit. We do not operate a checkout, so we do not collect payment card numbers, billing addresses tied to a purchase, or delivery addresses. We do not knowingly collect health information about a specific reader, and we ask that correspondence sent to us avoid including sensitive health details, since ordinary email is not an encrypted channel suited to that category of information.
3. Legal basis for processing
Under the Protection of Personal Information Act 4 of 2013 (POPIA), we rely on different lawful grounds depending on the activity. Responding to a message you send us relies on your consent to that specific exchange and, where relevant, on a legitimate interest in providing the response you requested. Maintaining basic security logs and preventing abuse of the contact form relies on our legitimate interest in keeping the website available and safe for all readers. Where we ask for explicit agreement, such as through the cookie banner described in our Cookie Policy, we rely on that consent and allow it to be withdrawn at any time through the same mechanism. We do not use automated decision-making or profiling that produces a legal or similarly significant effect on any visitor.
4. Retention periods
We keep concrete, limited retention periods rather than holding information indefinitely. Correspondence sent through the contact form or by email, together with any reply we send, is retained for 24 months from the date of the last meaningful exchange, after which it is deleted or anonymised unless a longer period is required by law. Server access logs, which record technical details such as IP address and requested page, are retained for 12 months for security and troubleshooting purposes and are then purged automatically. Records evidencing a consent choice, such as the timestamp and category selected in the cookie banner, are retained for 13 months, matching the maximum lifespan of the analytics cookie described in our Cookie Policy, so that we can demonstrate compliance if a regulator asks us to. If you ask us to delete your information sooner, we will do so unless a specific legal obligation requires continued retention, in which case we will explain that obligation to you in our response.
5. Your rights and how to exercise them
Under POPIA you have the right to be told what personal information we hold about you, to obtain a copy of it, to ask us to correct information that is inaccurate or incomplete, to ask us to delete or restrict information we no longer have a lawful basis to keep, and to object to processing based on legitimate interest. You may exercise any of these rights by writing to [email protected] with a clear description of your request and enough detail for us to locate your correspondence, such as the approximate date you last wrote to us. We aim to acknowledge every request within 5 business days of receipt and to provide a substantive response within 30 calendar days, which is the general timeframe contemplated by POPIA; if a request is unusually complex we will tell you within that window and give a revised date. There is ordinarily no fee for a first request in a twelve-month period, though POPIA permits a reasonable fee for repeated or clearly excessive requests, which we would disclose in advance.
6. Third-party processors we use
We rely on a small number of external providers to operate the website, each acting on our instructions and receiving only the information necessary for its function. Our hosting provider stores the website files and server logs on infrastructure located within data centres operated for that purpose. Our email delivery provider transmits messages sent through the contact form and any reply from our editorial team. Where analytics cookies are accepted through the banner, an analytics provider processes aggregated, largely non-identifying browsing statistics such as page views and session duration. We do not sell, rent or trade personal information to advertisers, data brokers or any unrelated third party, and we do not permit our processors to use information collected on our behalf for their own independent marketing purposes.
7. Cookies used on this website
Full detail is set out in our separate Cookie Policy, and this section summarises the categories for completeness. A session identifier cookie is set to support basic navigation and expires automatically when the browser is closed. A preference cookie, typically named for the consent choice it stores, persists for up to 180 days so that returning readers are not shown the cookie banner repeatedly. Where analytics cookies are accepted, they may persist for up to 13 months and record aggregated information about page visits, approximate device type and general geographic region, without identifying an individual reader by name. No cookie on this site is used to build an advertising profile for retargeting on other websites, and no cookie category requires health-related information to function.
8. International transfers of information
Some of the providers described in section 6 may process information on servers located outside South Africa. Before any such transfer takes place, we assess whether the destination country has adequate data protection safeguards recognised under POPIA, or whether the recipient has agreed to contractual terms that impose equivalent protection obligations, such as restrictions on further disclosure, defined retention limits and security commitments consistent with our own practices. We do not transfer personal information to a processor unless one of these safeguards is in place, and we review this assessment whenever we change a provider or a provider changes the location of its infrastructure.
9. Complaints and contact procedure
If you believe we have not handled your information in accordance with this policy, please write first to [email protected] so that our editorial team can review the matter directly; we aim to acknowledge a complaint within 5 business days and provide a substantive response within 30 calendar days. You may also write to us by post at 45 Bree Street, Cape Town City Bowl, 8001 Cape Town, or telephone +27 21 123 4502 during our published hours of Monday to Friday, 8:00 AM to 5:00 PM SAST. If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Regulator (South Africa), which is the statutory body responsible for POPIA oversight, independently of any internal review we conduct.
10. Revisions and change log
We review this policy at least once a year and whenever we introduce a feature that changes how information is collected or used. The dated entries below record substantive changes; minor wording or formatting corrections are not separately logged. 1 June 2026: initial publication of this Privacy Policy alongside the launch of keltova.info. 12 August 2026: clarified cookie lifespan figures to align with the Cookie Policy and added the named retention period for consent records. 2 September 2026: expanded the description of third-party processors and added the concrete response-time commitments set out in sections 5 and 9. Where a future change affects your rights materially, we will note that update here and, where practical, highlight it on the homepage for a reasonable period.