Privacy policy
Last updated 24 August 2026. This policy explains what Wicks Digital Health Ltd collects through proofstack.health, why, and what you can ask us to do about it.
Who we are
Wicks Digital Health Ltd (registered in England and Wales, company number 11874717), trading as ProofStack Health, of Lombard House, Cross Keys, Lichfield WS13 6DN, United Kingdom. We are the data controller for the personal data described here. Registered with the Information Commissioner’s Office under ZA907502. For anything in this policy, email hello@proofstack.health.
What we collect
When you subscribe to Proof Points
Your email address and first name, which you type into the sign-up form. We also record which page you subscribed from, so we know which part of the site is useful. Nothing else is required to subscribe.
When you simply visit
Our hosting provider processes your IP address and basic request information — the page requested, timestamp, browser type — in order to serve the site and protect it from attack. We do not use this to build a profile of you, and it is not combined with anything else.
What we do not collect
This site carries no analytics, no advertising, and no tracking technology of any kind. There is no Google Analytics, no advertising pixel, and no third-party marketing script. We do not track you across other websites, and we have nothing to share with anyone who would.
Cookies and local storage
We set no advertising or analytics cookies. Two items are stored in your browser’s local storage, both first-party and both a direct result of something you did:
- a note that you dismissed the newsletter pop-up, so it does not ask again for 60 days;
- a note that you subscribed, so it never asks again.
Clearing your browser storage removes both. Cloudflare Turnstile, which protects the sign-up form from bots, may set a short-lived token for that purpose; it is a security measure, not a tracker.
Why we are allowed to use it
Under UK GDPR we rely on your consent for the newsletter — you asked for it, and you can withdraw at any time — and on our legitimate interests for keeping the site available and secure. Where we rely on legitimate interests, we have considered whether it is fair to you, and we think a site that stays up and free of bots is.
Who else sees it
We use a small number of service providers, who process data on our instructions and may not use it for their own purposes:
- beehiiv — runs the Proof Points newsletter and holds the subscriber list (United States).
- Cloudflare — hosts and serves this site, and provides the anti-bot check on the sign-up form.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. Where data reaches the United States, that transfer is made under the safeguards UK law requires, such as the UK Addendum to the standard contractual clauses.
How long we keep it
Newsletter details stay until you unsubscribe, plus a short period to honour the unsubscribe. Server logs are kept only as long as they are useful for security and troubleshooting. When something is no longer needed, it is deleted.
Your rights in the UK
You can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict or stop using it, and ask for it in a portable form. Where we rely on consent, you can withdraw it at any time — every newsletter has an unsubscribe link, and it works. Email hello@proofstack.health and we will respond within one month.
If we get it wrong, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first.
Your rights in the United States
Depending on your state — California, Colorado, Connecticut, Virginia, Texas, Oregon and others have comparable laws — you may have the right to know what we hold, to have it corrected or deleted, to receive a copy, and to opt out of its sale or of targeted advertising. Exercising any of these will never count against you.
Two of those are simple here: we do not sell personal data, and we do not use it for targeted advertising, so there is nothing to opt out of. We honour Global Privacy Control signals. Use the same address above for any request.
Children
This site is aimed at people working in healthcare and technology. It is not directed at children, and we do not knowingly collect their data.
Changes
If we change how we handle personal data — adding analytics, for instance — we will update this page and change the date at the top before the change takes effect.