Who we are
This website (aryash.health, aryashhealth.com, aryash.co.uk) is operated by Aryash Health Limited, a company registered in England and Wales.
Company number: 17001109
Registered office: C/O Charles Rippin & Turner, 130 College Road, Harrow, England, HA1 1BQ, United Kingdom
ICO registration: ZC086802
For UK GDPR purposes, Aryash Health Limited is the data controller for any personal data processed in connection with this website.
What we collect on this website
This page is a static, read-only website. It has no forms, no login, no accounts, and no third-party tracking. The only data Aryash itself collects from your visit is a small set of aggregate, cookieless page counts via Vercel Analytics, described below.
- We do not set any cookies.
- We do not use Google Analytics, PostHog, Facebook Pixel, Hotjar, Microsoft Clarity, Sentry, or any other cross-site or behavioural analytics tool.
- We do not record your session, replay your scrolls and clicks, or capture form input.
- We do not fingerprint your device, infer demographics, or build any profile of you across days or across sites.
- Web fonts are served from our own site — your browser does not contact Google Fonts or any other third party while you are on this page.
If you ever see a cookie banner, a sign-in box, or a request for personal information on this domain — something has changed. Please tell us.
Vercel Analytics — what it is, what it captures
We use Vercel Analytics, a first-party, cookieless analytics product operated by our hosting provider, Vercel Inc. It loads as a small script from this same domain (/_vercel/insights/script.js) — not from a third-party advertising network.
What it captures
- The page URL you opened (e.g.
/privacy.html) — used to count page views per page. - The referrer (the previous page you came from, if your browser sent one).
- Your country, derived from your IP address at the edge — your IP itself is not stored against the analytics record.
- Your device class (mobile / tablet / desktop) and a browser-family bucket (e.g. "Chrome on iOS").
- A pseudonymous daily visitor hash, derived from a salted combination of IP and user-agent and rotated every 24 hours, so we can estimate unique visitors per day.
What it does NOT capture
- It does not set cookies on your device.
- It does not store your IP address against the analytics record.
- It does not follow you across days — the daily hash is rotated, so we cannot link visits made on different days to the same person.
- It does not follow you across other websites — there is no cross-site identifier and Aryash does not share, sell, or combine analytics data with any other dataset.
- It does not capture anything you type, click, or scroll past — it is a page-load count, not a session recording.
- It does not capture any information from our health tools — no blood-test values, symptoms, names, NHS numbers, or anything you might enter into one of our other modules.
Why we use it
We rely on aggregate page-level counts to know which conditions, blood tests, and patient-information topics are most read, so we can prioritise content updates and demonstrate impact to NHS partners (for example, the Wye Valley pilot for the Pharmacy First Explainer). We do not use analytics for advertising, marketing, or any individual decision about a visitor.
Lawful basis (UK GDPR Article 6(1)(f))
We process the analytics data on the basis of legitimate interests: improving educational content for UK patients. The interest is balanced against the very limited and pseudonymous nature of the data captured (no cookies, no IP storage, no cross-site tracking, no clinical content). Our legitimate-interest assessment is recorded in our DPIA Screening Record, available on request.
Sub-processor and international transfer
Vercel Inc. processes the analytics beacon as our data processor under UK GDPR Article 28. Vercel is a US company; transfers are protected under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (UK Addendum). Vercel is SOC 2 Type II accredited and ISO 27001 certified. Vercel's privacy policy is at vercel.com/legal/privacy-policy.
How to opt out
If you do not want your visit to be counted, enable Do Not Track (DNT) in your browser. Vercel Analytics respects DNT and skips the count when DNT is set. Some mobile browsers do not expose DNT directly; in that case, a privacy-focused browser or a tracking-blocker that blocks /_vercel/insights/ achieves the same outcome.
This section was added on 1 May 2026 alongside our DPIA v1.1, and reflects the actual processing already in place across our heart, men's, intended-use, and (from this date) pharmacy surfaces. Earlier versions of this page described Aryash sites as having no analytics; that wording was inaccurate for some module sites and has been corrected.
What our host sees
This website is hosted by Vercel Inc. (a US company that operates servers in multiple regions). For Vercel to deliver the page to your browser at all, it needs to receive your request — so Vercel automatically logs standard web-server information for each visit:
- Your IP address
- The URL you requested (e.g.
/privacy.html) - Your browser's user-agent string
- The HTTP referrer (the page you came from, if your browser sent one)
- The date and time
This is the same information any web server in the world receives. Vercel keeps these logs for a short period for security, abuse prevention, and operational troubleshooting (typically up to 30 days, depending on the log type). We do not download, read, or analyse these logs.
Vercel acts as our data processor under UK GDPR. Their privacy policy is available at vercel.com/legal/privacy-policy.
Email contact
If you email us at feedback@aryash.health — for example to report a problem, ask a question, or send feedback — we will receive your email address, your name (if you include one), and the contents of your message.
We use this only to reply to you and to look into whatever you've raised. We don't add your email to any marketing list.
Email is delivered via our email provider, who acts as a data processor on our behalf. We keep correspondence for as long as it remains useful (typically up to 2 years), then delete it. If your message reports a safety issue with one of our health tools, we are required to keep a record of it as part of our medical-device post-market surveillance obligations — see Safety reports below.
Safety reports about our health tools
Our health tools (e.g. heart, blood-test explainer, men's health) are operated by Aryash Health Limited as the manufacturer. UK medical-device regulations (UK MDR 2002, as amended) require us to maintain a record of any safety-related feedback users send us, and to report serious incidents to the Medicines and Healthcare products Regulatory Agency (MHRA).
If you contact us about a problem with one of our tools, we will keep a record of your report (your email, the message, our response, and any action taken) for the period required by those regulations — typically a minimum of 10 years from the last date the device was placed on the market.
You can report a problem at any time: feedback@aryash.health.
Lawful basis under UK GDPR
- Hosting logs: legitimate interests (Article 6(1)(f)) — we and our host need basic request logs to keep the site secure and operational. The interest is balanced against the very limited and short-lived nature of the data.
- Vercel Analytics: legitimate interests (Article 6(1)(f)) — aggregate, cookieless page counts to improve educational content and demonstrate impact to NHS partners. See the Vercel Analytics section for the full data categories and an opt-out.
- Replying to your emails: legitimate interests (Article 6(1)(f)) — to respond to enquiries you have chosen to send us.
- Safety reports about our tools: legal obligation (Article 6(1)(c)) — required by UK MDR 2002 / EU MDR 2017/745 (retained).
Sharing your information
We do not sell your information. We do not share it with anyone for marketing.
The only third parties who might process information related to your visit are:
- Vercel Inc. — our website host. Vercel acts as our data processor for both the request logs (described above) and the cookieless Vercel Analytics page counts (described in the Vercel Analytics section).
- Our email provider — to deliver and store any email you send us.
- The MHRA — only if we are legally required to report a serious safety incident involving one of our tools.
International transfers
Vercel is a US company, and your request may be served from one of its servers outside the UK or EEA. Where personal data leaves the UK — whether in the request logs or in the cookieless Vercel Analytics beacon — it is protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, in line with UK GDPR Article 46.
Cookies
This website does not set any cookies of its own. We do not use any third-party tags or pixels that would set a cookie. The Vercel Analytics page counts (described above) are explicitly cookieless.
Because we set no cookies, we do not show a cookie banner.
Other Aryash sites
This privacy page covers aryash.health (this landing page) only. We operate other sites — heart.aryash.health, heartcheck.aryash.health, mens.aryash.health, tools.aryash.health, pharmacy.aryash.health — each of which has (or will have) its own privacy notice. Please read those before using those tools. The same Vercel Analytics processor model described above applies across all UK Aryash sites; details and opt-out routes are reproduced on each site's privacy page.
Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you (right of access).
- Ask us to correct inaccurate data (right to rectification).
- Ask us to delete your data, where we are not required to keep it (right to erasure).
- Ask us to restrict or object to our processing.
- Ask for a copy of data you have given us in a portable format.
- Withdraw consent (where processing is based on consent — though, on this site, we don't rely on consent).
To exercise any of these rights, email feedback@aryash.health. We will respond within one calendar month.
Complaints
If you think we have mishandled your information, please tell us first so we can put it right. You also have the right to complain to the UK regulator:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Web: ico.org.uk/make-a-complaint
Security
The site is served over HTTPS only. We do not collect or store passwords, payment details, or health data on this page.
Children
Aryash Health publishes plain-English patient information for adults. We do not knowingly collect any information from children. If you believe a child has sent us personal information, please email us and we will delete it.
Changes to this page
If we change how this site handles data, we will update this page and change the "last updated" date below. Material changes will be flagged at the top of the page for at least 30 days.