Privacy Policy
The Rehab45 Lab
Effective date: 16 March 2026
1. Introduction
This Privacy Policy explains how The Rehab45 Lab at the University of Leeds (“we”, “our”, “us”) collects, uses, and protects information when you visit our website at www.rehab45.com (the "Site"). We are committed to safeguarding your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our Site is primarily an informational resource showcasing our research activities, publications, and team members. We do not require you to create an account or provide personal information to browse our content.
2. Data Controller
The data controller responsible for this Site is the Rehab45 Lab. For questions about data protection, you may contact us at hello@rehab45.com.
3. Information We Collect
3.1 Cookies and Analytics Data
When you visit our Site, we may collect certain information automatically through cookies and similar technologies. This may include:
- Your IP address (anonymised where possible)
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring website or search terms
- Date and time of your visit
We use this information solely to understand how visitors use our Site, improve its content and functionality, and produce aggregated, non-identifying statistical reports about website traffic.
3.2 Information You Voluntarily Provide
If you contact us by email or through a contact form, we will receive the information you choose to provide, such as your name and email address. This information is used only to respond to your enquiry.
4. Cookies
Cookies are small text files placed on your device when you visit a website. We use the following types of cookies:
| Cookie Type | Purpose | Details |
|---|---|---|
| Strictly Necessary | Essential operation | Required for the Site to function. These cannot be disabled. |
| Analytics | Usage statistics | Help us understand visitor behaviour using tools such as Google Analytics. Data is anonymised. |
You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of the Site. For more information about cookies, visit www.allaboutcookies.org.
5. Legal Basis for Processing
Under the UK GDPR, we rely on the following legal bases for processing your data:
- Legitimate interests (Article 6(1)(f)): We have a legitimate interest in analysing website traffic to improve our Site and communicate our research effectively. We have assessed that this processing does not override your rights and freedoms, particularly as the data collected is limited and largely anonymised.
- Consent (Article 6(1)(a)): Where required, we will ask for your consent before placing non-essential cookies on your device. You may withdraw consent at any time.
6. Data Sharing and Third Parties
We do not sell, trade, or rent your personal information to third parties. Analytics data may be processed by third-party services (such as Google Analytics) that operate under their own privacy policies. We ensure that any third-party processors provide sufficient guarantees regarding data protection. Where analytics data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office (ICO).
7. Data Retention
Analytics data is retained for a maximum of 26 months, after which it is automatically deleted. Any personal data provided through direct enquiries will be retained only for as long as necessary to respond to and resolve your enquiry, and will then be securely deleted.
8. Your Rights Under the UK GDPR
Under the UK GDPR, you have the following rights in relation to your personal data:
- The right to access your personal data
- The right to rectification of inaccurate data
- The right to erasure (“right to be forgotten”)
- The right to restrict processing
- The right to data portability
- The right to object to processing
- The right to withdraw consent at any time
To exercise any of these rights, please contact us at hello@rehab45.com. We will respond to your request within one month.
9. Data Security
We take appropriate technical and organisational measures to protect the information collected through our Site against unauthorised access, alteration, disclosure, or destruction. These measures include the use of HTTPS encryption and secure server infrastructure managed by the Rehab45 Lab.
10. Children's Privacy
Our Site is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact hello@rehab45.com.