Privacy Policy

Last updated: 10 October 2026

Who operates this site

MediterraneanDiet.co.uk is owned by Jonathan. Use the contact page for privacy questions.

Visiting the site

The new website is delivered through Cloudflare. Technical information such as IP addresses and request details may be processed to deliver pages, maintain security and investigate faults. Fonts are hosted with the site. This version adds no advertising pixels or analytics trackers.

Cloudflare may use essential security technologies. See Cloudflare’s privacy policy for its processing information.

Ebook signup

The planned email provider is Kit. No Kit account or form is connected yet. The signup section does not currently submit, store or collect email addresses.

Before signup opens, this notice will describe the actual account, ebook delivery, consent choices, retention, lawful bases and relevant international transfers. Marketing emails will need a clear separate choice and an unsubscribe option.

Contact messages

The contact form asks for your first name, last name, email address and message. We use this information to answer your enquiry. It is stored in Cloudflare D1 and an email notification is sent through Cloudflare to our Hostinger mailbox at info@mediterraneandiet.co.uk. Contacting us does not subscribe you to marketing.

We process enquiries and protect the form from abuse on the basis of our legitimate interests in responding to visitors and running a secure website. Please do not send medical records or other sensitive health information.

Enquiries stored by the website are removed after 180 days when the form next processes a request. Enquiry emails in the mailbox are kept only as long as needed to handle the enquiry and any related correspondence. Cloudflare and Hostinger process information to provide storage, hosting and email services; their services may involve processing outside the UK under their applicable data-protection arrangements.

Form security

The maths check, a hidden spam field and request limits help protect the form. The form stores a secret-keyed hash of the connection IP address rather than a copy of the raw address in its enquiry database. Request-limit records expire within one hour. Expired security questions are removed once they are no longer needed for saved enquiries. Cloudflare may separately process connection details for its hosting and security services.

External resources

External websites use their own privacy arrangements. This site does not embed third-party social feeds or videos.

Your rights

Depending on the circumstances, UK data protection law provides rights including access, correction, deletion, restriction and objection. Contact us about a request. You can raise concerns with the Information Commissioner’s Office.

Updates

This notice will be updated when email signup or other data-handling features are introduced.