Privacy policy
Version 1.0, effective 29 October 2026.
1. Who is responsible
Original Media BV, Achtzalighedenlaan 9, 2920 Kalmthout, België, company number BE 0471.421.879 ("we", "us"), is the controller for the processing described in this policy. Telephone: +32 3 667 17 61. Kelsey is the name of the service and of this site, kelsey.legal, which we operate.
Questions about this policy: hello@kelsey.legal. We have not appointed a data protection officer; this processing does not require one under Article 37 GDPR.
2. What this policy covers
This policy covers the public website kelsey.legal. It does not cover the Kelsey product when you use it under an access agreement. The terms for that access, and for any data you enter into the product, will be set out in that agreement. No accounts or sign-in exist on this site.
3. What the site collects
Nothing from you, automatically, except what a web server needs to deliver a page. The site is static. It has no forms, no accounts, no analytics, no advertising and no cookies of its own (see the cookies page). Fonts are served from our own domain, so your browser does not contact a font provider.
Server logs at our host. The site is delivered through Cloudflare, Inc.[1] Cloudflare receives each request your browser makes. To deliver the page and protect the site against attacks it processes technical data such as your IP address, the time, the page requested and your browser's identification string. We do not use that data to identify you.
Email you send us. If you write to hello@kelsey.legal, we receive your email address, your name if you give it, and whatever you write. This is the only personal data we collect from you. We use it to answer you, to send you a test link if you asked for one, and to keep a record of the correspondence. Do not send confidential case details, privileged material or health information. If you do, tell us and we will delete it.
Links to other sites. Pages cite original documents at FDA, DailyMed, PubMed and other sources. A link to such a site leaves ours. Those sites have their own privacy policies.
4. Why we use it, and on what basis
| Purpose | Basis |
|---|---|
| Delivering the site and keeping it secure (host logs) | Legitimate interest in running a secure website |
| Answering your email, sending a test link | Your request; our legitimate interest in replying to professional enquiries |
| Keeping correspondence | Legitimate interest in having a record, and legal obligations where they apply |
| Establishing or defending a legal claim | Legitimate interest |
We do not sell your personal information and we do not share it for advertising. We make no decisions about you by automated means.
5. Who receives it
- Cloudflare, Inc., which delivers the site.[1]
- Our email provider, which stores the messages we send and receive.
- Advisers, under confidentiality, and an authority or court where the law requires it. If the business is transferred, the data may transfer with it. We will tell you beforehand.
6. Transfers across borders
Cloudflare and the email provider may process data in the United States and other countries. If you are in the EU, the UK or Switzerland and your data leaves that area, the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework, where the recipient is certified for it) or on the European Commission's standard contractual clauses together with a documented transfer impact assessment. You may ask us for a copy of the safeguards.
7. How long we keep it
| Data | Retention |
|---|---|
| Email correspondence | For as long as handling it requires |
| Host request logs | Set by Cloudflare under its own terms |
Both go when you ask us to erase your data, unless we must keep them by law or to defend a claim.
8. Your rights
Depending on where you live, you may have the right to a copy of your personal data, to have it corrected or erased, to restrict or object to its use, to take it elsewhere, and to withdraw consent you have given. Residents of California and some other US states have similar rights to know, delete and correct, and not to be treated worse for using them. We do not sell personal information or share it for advertising.
To use any of these rights, write to hello@kelsey.legal. We respond within one month; for a complex request we may extend that by two months and will tell you within the first month. Residents of US states: within the time the law of your state allows. We may ask for proof of identity where there is reasonable doubt.
If you are not satisfied, you may lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels, +32 2 274 48 00, contact@apd-gba.be, or with the authority where you live or work. We would appreciate the chance to resolve the matter first.
9. Security
The site is served over an encrypted connection (HTTPS). It is static, so no database or user account sits behind it. Email is held by our provider under its own security measures. If you find a vulnerability, write to hello@kelsey.legal. We will not take legal action against anyone who researches in good faith, causes no damage, and gives us time to fix the issue before disclosing it.
10. Children
The site is written for professionals and is not intended for anyone under sixteen. We do not knowingly collect data from children.
11. Changes
We may change this policy. The version and date at the top show the current version. If we start to use cookies, analytics or a form, we will update this policy and the cookies page before we do.
Sources
- Cloudflare, Inc., Privacy Policy. https://www.cloudflare.com/privacypolicy/