HerStackTake the quiz →

Last updated: 6 May 2026

Privacy Policy

This policy explains how HerStack handles personal data. We are an editorial site about perimenopause, menopause and women's longevity. We do not sell anything directly, we do not run accounts, and we do not ask you to sign up for anything.

We have written this in plain English. If anything is unclear, please contact us — details below.

1. Who we are (the data controller)

HerStack is owned and operated by Suggestic Inc, a company incorporated in the United States.

For UK readers, we operate under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The UK supervisory authority is the Information Commissioner's Office (ICO).

2. What data we collect

HerStack does not collect personal data from you directly. The site is a read-only collection of editorial articles. We do not run signup forms, comment fields, contact forms, accounts, or newsletters.

The only data that touches us is:

We may also receive standard server-level information from our hosting provider (such as IP address and request timestamps) for the purpose of operating the site, preventing abuse and diagnosing technical faults. This information is held by our host, not by us, and we do not link it to identifiable individuals.

We do not introduce advertising trackers, profiling cookies, or marketing pixels. If we ever did, we would update this policy and give you a clear way to refuse them in advance.

3. Legal basis (UK GDPR Article 6)

Under UK GDPR, we must rely on a lawful basis to process personal data. The bases relevant to HerStack are:

We do not process special category data (such as health data about identified individuals). Articles on HerStack discuss women's health topics in a general, editorial context — they are not records about you.

4. How long we keep data

Because we do not collect personal data, we do not retain personal records.

5. Third-party processors

We currently use the following processors:

We do not sell data, share data with advertisers, or pass data to data brokers.

6. Affiliate links

HerStack recommends specific Solgar UK supplements within our editorial content. Where you see a link to a product, that link will usually point to Amazon.co.uk and may include an Amazon Associates affiliate tag.

If you click an affiliate link and go on to buy something, Amazon may pay us a small commission. This does not change the price you pay. We disclose this in our Terms of Use and reflect it in editorial practice — we recommend products on the strength of the evidence and the Solgar UK product list, not on commission.

When you click out to Amazon.co.uk, you leave HerStack and Amazon's own privacy policy applies to anything you do on their site.

7. Your rights

Under UK GDPR you have rights over your personal data. Because HerStack only processes aggregate, non-identifying analytics and does not hold a record about you as an individual, most rights have little to act on in practice — but they still apply, and you are entitled to exercise them.

You have the right to:

To exercise any of these, email privacy@herstack.co.uk. We will respond within one calendar month, in line with UK GDPR.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office:

We would prefer the chance to put it right first, but you are not required to come to us before going to the ICO.

8. International transfers

Suggestic Inc is based in the United States. Vercel, our hosting provider, is also a US-headquartered company that operates global infrastructure. As a result, personal data covered by UK GDPR may be transferred to or accessed from the United States.

Where transfers happen, we rely on lawful UK transfer mechanisms, which currently include:

We keep this position under review as the regulatory framework evolves and will update this section if our transfer arrangements change.

9. Children

HerStack is written for adults — typically women in their forties, fifties and sixties navigating perimenopause, menopause and longevity. The site is not directed at children under 18, and we do not knowingly collect data from children.

10. Security

We rely on Vercel's platform security for hosting. We do not run our own login or account system, so there is no password or user record to compromise. Any cookies set by us or by Google Analytics are flagged Secure, so they are only transmitted over HTTPS.

No internet system is perfectly secure. If you become aware of a security issue with HerStack, please contact us at privacy@herstack.co.uk so we can investigate.

11. Changes to this policy

We will update this policy when our data practices change — for example, when we add new processors, or when the law changes. The "Last updated" date at the top of this page will reflect the most recent change. For substantive changes, we will note what changed and when.

12. Contact

For any privacy question, including data subject requests, write to privacy@herstack.co.uk.