Privacy policy

The short version

• Our self-checks never send your answers to us. They work entirely on your phone or computer.
• We do not use advertising or tracking cookies.
• We use cookie-free visitor statistics that cannot identify you, and you can switch them off.
• If you email us, we use your details only to reply to you.
• We never sell or share your information for marketing.

The rest of this policy explains the detail, as the law requires.

Who we are

Juniper Health (juniperhealth.info) is run by Neil Hyde, a sole trader trading as Juniper Health. Neil Hyde is the data controller for the personal information described in this policy. This means he decides how and why it is used and is responsible for protecting it.

We have not appointed a data protection officer, because we are not required to. Any questions about privacy go to the email address above.

The laws that apply

We follow:

• the UK General Data Protection Regulation (UK GDPR)
• the Data Protection Act 2018
• the Data (Use and Access) Act 2025
• the Privacy and Electronic Communications Regulations 2003 (PECR), which cover cookies and similar technology

Our website is aimed at people in England and Wales. If you visit from the European Union or European Economic Area, we will also respect your rights under the EU General Data Protection Regulation (EU GDPR).

Our self-checks: your answers stay with you

Our PIP, Attendance Allowance and DLA self-checks ask about your health and daily life. This is sensitive information, so we built the checks so that we never receive it.

• All the questions and the scoring run inside your web browser.
• Your answers are not sent to our website, our hosting company or anyone else.
• We cannot see your answers or your result.
• If you press "Save my answers on this device", your answers are stored in your browser's local storage on that device only, so you can come back to them. They stay there until you press "Start again" or clear your browser data. Anyone else using the same device and browser could see them.

Because we do not collect your answers, we do not use them to make any decision about you. The result is an estimate for you to use as you choose.

Information we collect and why

1. When you visit our website

Our website is hosted by Cloudflare. Like all websites, when your browser asks for a page, it shares technical information such as your IP address, browser type and the page requested. Cloudflare uses this to deliver the page and to protect the site from attacks and abuse.

• Lawful basis: our legitimate interests in running a secure, working website (UK GDPR Article 6(1)(f)).
• How long: security logs are kept by Cloudflare for a short time in line with its own policies. We do not use them to identify visitors.

2. Visitor statistics

We use Cloudflare Web Analytics to count visits and see which pages are popular and how fast they load. It does not use cookies, does not track you across other websites and does not build a profile of you. We only see totals, such as "300 people viewed this page".

• Lawful basis: our legitimate interests in understanding how our site is used so we can improve it (Article 6(1)(f)).
• Your choice: you can switch statistics off at any time. We also do not load statistics if your browser sends a "Global Privacy Control" or "Do Not Track" signal.

3. When you email us

If you email us, we receive your email address, your name if you give it, and whatever you write. We use this only to reply and to deal with your message, including any complaint.

• Lawful basis: our legitimate interests in responding to you (Article 6(1)(f)).
• Health information: if you choose to tell us about your health, we treat it as special category data. We rely on your explicit consent, given by choosing to send it (Article 9(2)(a)), and we use it only to reply to you. Please only share what you need to. You can ask us to delete it at any time.
• How long: we keep emails for up to 12 months after our last reply, then delete them. Complaints are kept for up to 2 years, in case they are needed to deal with a later issue.

Emails to hello@juniperhealth.info are forwarded by Cloudflare Email Routing to a Google Gmail inbox.

4. Donations

If you choose to support us, the payment is handled by the payment provider shown on our support page (such as Ko-fi or Stripe). We never see your card details. The provider tells us your name, email address and the amount, and we keep this for our accounts.

• Lawful basis: to meet our legal obligations for tax and business records (Article 6(1)(c)).
• How long: as long as HMRC requires, normally up to 6 years.

5. Affiliate links

Some pages contain clearly labelled affiliate links to shops. Clicking one does not send any information to us. Once you are on the shop's website, that shop may use cookies to know you came from us. Its own privacy and cookie policies apply there. The shop may tell us that a sale happened, but not who made it.

Our Facebook group

We run a free community group on Facebook. If you join or post in it, Meta (Facebook) collects and uses your information under its own privacy policy. As the group's admins, we can see your Facebook name, profile picture, any answers to joining questions, and what you post in the group. We use this only to run and moderate the group. We do not copy it into any other records. You can leave the group, or delete your posts, at any time.

Who we share information with

We do not sell, rent or trade your information. We only share it with companies that help us run the site (called processors), under contracts that protect it:

We may also share information if the law requires us to, for example with the police or a court.

Sending information outside the UK

Some of the companies above may store or process information in the USA or other countries. When this happens, we make sure it is protected by approved safeguards, such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement or Addendum approved by the Information Commissioner.

How we keep information safe

• Our website only works over a secure, encrypted connection (HTTPS).
• The self-checks do not send data, so there is nothing to intercept or leak.
• Our accounts are protected with strong passwords and two-step sign in.
• We keep as little information as possible, for as short a time as possible.

Your rights

You have the right to:

• be informed about how we use your information (this policy)
• get a copy of the information we hold about you
• have it corrected if it is wrong
• have it deleted
• restrict how we use it
• object to us using it
• move it to another organisation, where this applies
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email us. We will reply within one month. We may need to check who you are before we act. Using your rights is free.

Complaints about how we use your information

We want to put things right. Under the Data (Use and Access) Act 2025, you can complain to us first, and we will:

1. acknowledge your complaint within 30 days (we aim for 5 working days)
2. look into it without unnecessary delay
3. tell you what we found and what we have done

See our complaints page for how to complain.

If you are not happy with our response, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator:

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

If you live in the EU or EEA, you can also complain to the data protection authority in your country.

Children

Our website is written for adults. Parents and carers may use our DLA check on behalf of a child. That check runs on your device like our other checks, so we do not receive any information about your child.

Changes to this policy

We will update this policy if the way we use information changes. The date at the top shows when it was last updated. If we make a big change, we will make it clear on our website.