Privacy notice

Who this notice is from

This site is run by Eman Ashfaq, an online dietitian practising by video and WhatsApp. There is no clinic and no physical premises.

Outstanding input: the registered legal entity or trading name responsible for this data, and a dedicated contact address for privacy questions, are not yet decided. Until they are, privacy questions can be sent through the contact routes on the contact page. This paragraph must be replaced with the real entity name and contact address before launch.

What is collected

Your email address, and only when you type it into the form on a guide page and submit it. Nothing else is asked for. There is no account, no login, and no profile.

When you submit the form, the server also briefly sees your IP address. It is used to stop the same connection submitting the form over and over, and it is held only in memory for that check. It is not stored in the mailing list and is not linked to your email address.

The form carries a hidden field that people never see and never fill in. If it arrives filled in, the submission is treated as automated and no address is added to the list.

Why it is collected

To send you the guide you asked for, and to send occasional nutrition emails of the same kind. Your address is not used for anything else. It is not sold, rented, or passed to advertisers.

You confirm it yourself first

Subscriptions are double opt-in. When you submit the form, the mailing list provider sends you a confirmation email, and you are only added to the list once you click the link in it. If you never click, you never join — and if someone types your address in by mistake, nothing happens to you beyond a single confirmation email you can ignore.

Who processes it

Two companies handle the data on Eman's behalf, and neither is permitted to use it for their own purposes:

• The mailing list provider stores your address, sends the confirmation email, and sends the newsletters. It can see your email address, whether you confirmed, and whether you opened an email.
• Cloudflare hosts this website and runs the form's endpoint.

Outstanding input — SPEC.md §13 item 10: the mailing list provider is expected to be MailerLite, but that has not been confirmed by the client. The provider must be named explicitly here, with a link to its own privacy policy, before this site collects a single real address.

How to unsubscribe

Every email sent to you carries an unsubscribe link at the bottom. Clicking it removes you from the list immediately, with nothing to explain and no confirmation step. You can also ask for your address to be deleted entirely by replying to any email, or through the contact page.

How long it is kept

Your address stays on the list until you unsubscribe or ask for it to be deleted. Unconfirmed addresses — where the confirmation link was never clicked — are discarded by the provider rather than kept.

Cookies and tracking

This site sets no advertising or analytics cookies, and there are no third-party tracking scripts on the page. Guide downloads are ordinary files — opening one is not tracked back to you.

Your rights

You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Since the only thing held is an email address you supplied yourself, in practice all three come down to one message — and unsubscribing does the last one on its own.

Changes

If this notice changes in a way that affects what happens to your address, the date at the top changes with it.