Last updated: October 2026
In short: Share Rehab Stories is owned and published by Welcome Group Ltd, as part of the Croeso network of websites. We collect very little personal data. The main data processing on this site relates to analytics cookies, which only run where you have given consent, and to comments you choose to leave on our stories.
1. Who we are
This policy applies to sharerehabstories.com. The site is owned and operated by:
Welcome Group Ltd (registered in England and Wales, company number 10352124)
Registered office: 16 Trinity Square, Llandudno, Conwy, LL30 2RB, United Kingdom
Email: info@croeso.com
Welcome Group Ltd is the data controller for personal data processed through this site. Technical services, including hosting management, security and website development, are provided by Livetech Ltd of Llandudno, acting as a data processor on our behalf.
This page follows the master privacy policy for the Croeso network, which covers all of our websites.
2. What data we collect
Data you give us
- Comments: if you comment on a story, we collect the name, email address and any website you enter, together with your comment, your IP address and browser details. Your name, website and comment are shown publicly; your email address is never published.
- Emails to us: if you contact us, we use your name, email address and message solely to reply to you.
Please think carefully before sharing personal details about your own or anyone else’s health, addiction or recovery in a comment. Comments are public. If you would like a comment removed, email us and we will take it down.
Data collected automatically
- Server logs: IP address, browser type, pages requested and timestamps, kept for security and diagnostic purposes.
- Analytics: usage statistics through Google Analytics, such as pages viewed and device type, only where you have given consent.
- Spam protection: comments are checked by Akismet, a spam filtering service run by Automattic, which receives the comment and basic technical details.
Reading the stories on this site does not require you to give us any personal data. We do not knowingly collect data from children, and this site is not directed at children.
3. How we use your data
| Purpose | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Publishing and moderating comments | Comment details | Legitimate interests |
| Replying to your emails | Your message and contact details | Legitimate interests |
| Site security and diagnostics | Server logs | Legitimate interests |
| Preventing spam | Comment and technical details | Legitimate interests |
| Audience measurement | Analytics cookies | Consent |
We do not sell personal data, and we do not send marketing emails from this site.
4. Cookies
- Necessary: cookies needed for the site to work, including remembering your comment details if you ask us to and recording your cookie choices.
- Analytics: Google Analytics, through Google Site Kit, which helps us understand how visitors use the site. These cookies are only set with your consent, and you can change your choice at any time.
- Embedded content: some stories embed videos or posts from services such as YouTube, Facebook and X (Twitter). These providers may set their own cookies when the content loads.
This site does not currently carry advertising, sponsored listings or affiliate links. If that changes, they will be clearly labelled and this policy will be updated.
5. Who we share data with
- Google LLC: analytics (Google Analytics and Site Kit).
- Automattic Inc: comment spam filtering (Akismet).
- Livetech Ltd: hosting management, security and website development (data processor).
- Hosting providers: the site is hosted with a UK-based provider.
Some of these providers may process data outside the UK. Where this happens, transfers rely on UK adequacy regulations or standard contractual clauses.
6. How long we keep data
- Published comments: for as long as the story is online, unless you ask us to remove them.
- Spam and unapproved comments: deleted periodically.
- Emails to us: up to 24 months from last contact, then deleted.
- Server logs: up to 12 months.
- Google Analytics data: 14 months.
7. Your rights
Under UK data protection law you have the right to access, correct, delete or restrict the personal data we hold about you, to object to processing based on legitimate interests, and to data portability where applicable. To exercise any of these rights, email info@croeso.com. We will respond within one month.
If you have a complaint about how we use your personal data, please email us first. We will acknowledge your complaint within 30 days, keep you informed while we look into it, and tell you the outcome. If you are still unhappy, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
8. Security
This site is served over HTTPS. Access to site administration is restricted and protected by security tooling, and we review our security measures on an ongoing basis.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised.
Recent Comments