Privacy policy
Last updated: 3 October 2026
Who we are
This privacy notice explains how JabsAndTabs (jabsandtabs.com) uses personal data, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The data controller is:
- Name: [OWNER LEGAL NAME / TRADING NAME]
- Address: [REGISTERED ADDRESS]
- Company number: [IF INCORPORATED]
- ICO registration number: [ICO REGISTRATION NUMBER]
- Contact: editorial@jabsandtabs.com
JabsAndTabs is not a pharmacy or healthcare provider. If you use a provider's service after visiting our site, that provider is the controller of any data you give it, and its own privacy notice applies.
We do not collect health data
Our BMI calculator and eligibility checker run entirely in your web browser. The height, weight and other answers you enter are processed on your own device and are not sent to us, stored by us or shared with anyone. When you close or refresh the page, they are gone. We do not ask for, and do not want, information about your health. Please do not include health details if you email us.
The personal data we collect
Server logs
When you visit the site, our hosting provider automatically processes technical information needed to deliver and secure the website, such as your IP address, browser type, the page requested and the date and time. These logs are held by the hosting provider and are used for security, fault-finding and preventing abuse.
Your cookie choice
When you accept or reject optional cookies, we store your choice in a strictly necessary cookie on your device so we do not ask you again on every page. See our cookie policy.
Anonymous link click counts
If you follow a link from our site to a provider, we may record that the link was clicked. We record only which link was used, the page path it was on and a timestamp. We do not record your IP address, any cookie or device identifier, or anything else that could identify you, so this information is not personal data.
Emails you send us
If you email us, we receive your email address, your name if you include it, and the content of your message. We use this only to respond to you and to act on your message, for example to correct an error.
We do not currently use analytics, advertising or tracking cookies, and we do not sell or share personal data for marketing.
Our lawful bases
- Server logs: legitimate interests, in running a secure and reliable website.
- Cookie choice: legitimate interests and compliance with a legal obligation (the Privacy and Electronic Communications Regulations require us to remember your choice). The cookie is strictly necessary, so consent is not required for it.
- Emails: legitimate interests, in responding to enquiries and keeping our content accurate. If you are a provider contacting us about a listing, the same basis applies.
If we ever introduce optional analytics or marketing cookies, we will only set them with your consent.
Who we share data with
We use the following service providers (processors), who process data only on our instructions:
- Website hosting: [PLACEHOLDER: hosting provider, e.g. Vercel Inc.], which hosts the site and holds server logs.
- Database: [PLACEHOLDER: database provider], which stores site content and anonymous link click counts.
- Email: [PLACEHOLDER: email provider], which handles our editorial mailbox.
We may also disclose information if required by law or to protect the rights and safety of others. We do not sell personal data.
International transfers
Some of our service providers may process data outside the UK, for example in the United States or the European Economic Area. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. [PLACEHOLDER: confirm the transfer mechanism used by each processor.]
How long we keep data
- Server logs: kept by our hosting provider for a limited period in line with its retention settings. [PLACEHOLDER: confirm retention period.]
- Cookie choice: stored on your device for six months, after which we will ask again.
- Emails: kept for up to two years after our last contact, or longer if needed to record a correction or deal with a dispute. [PLACEHOLDER: confirm.]
- Anonymous click counts: not personal data; kept for as long as needed for reporting.
Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data deleted (erasure) in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to our use of your data where we rely on legitimate interests; and
- receive your data in a portable format (portability) where this applies.
To exercise any of these rights, email editorial@jabsandtabs.com. We will respond within one month. There is normally no charge. We may need to confirm your identity before acting on a request.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint.
Changes to this notice
We will update this notice if we change how we use personal data, for example if we introduce analytics. The date at the top shows when it was last changed. Significant changes will be highlighted on the site.