This notice explains what personal data we collect when you subscribe to the Curbside Consult newsletter, why we collect it, how we use and protect it, and the rights you have over it. We keep it plain and short on purpose.

1Who we are

This newsletter is operated by Dr Sermed Mezher (SISU Media Limited), the "data controller" responsible for your personal data.

If you have any questions about this notice or your data, contact us at hello@sermedmezher.com

2What data we collect

When you sign up to Curbside Consult, we collect:

Data	How we get it
First name	You give it to us in the signup form.
Email address	You give it to us in the signup form.
Subscription activity	Automatically, e.g. whether you opened an email or clicked a link, and the date you subscribed.
Technical data	Automatically, e.g. approximate location and device type, collected by our email and hosting providers to deliver and secure the service.

We only ask for a first name and email. You never have to give us anything else to receive the newsletter.

3Why we use it, and our legal basis

Under UK data protection law we must have a lawful basis for using your data. Ours are:

• Your consent. When you tick or click to subscribe, you consent to us sending you the newsletter and related health updates. You can withdraw that consent at any time by unsubscribing.
• Our legitimate interests. We use basic analytics (like open and click rates) to understand what content is useful and to keep improving the newsletter, in a way that does not override your rights.

We use your data to send you the weekly newsletter and occasional important health updates, to measure and improve what we send, and to keep the service secure and working.

4Who we share it with

We do not sell, rent, or trade your personal data. We share it only with the service providers who help us run the newsletter, and only so they can provide that service to us:

• FunnelKit / our email platform — stores your contact details and sends the newsletter on our behalf.
• Our website host (Siteground) — hosts the signup page and processes the form submission.
• SendinBlue — our mailing provider.

These providers act as our "data processors," handle your data under contract, and may only use it to provide their service to us. We may also disclose data if required to by law.

5Where your data is stored

Your data is stored on our website and email platform. Some of our providers may process data outside the UK. Where that happens, we take steps to make sure it is protected to a standard equivalent to UK law (for example, through approved data-transfer safeguards).

6How long we keep it

We keep your data for as long as you are subscribed. If you unsubscribe, we may keep a minimal record (such as your email on a suppression list) so that we do not accidentally contact you again, and to meet our legal obligations. You can ask us to erase your data entirely at any time (see your rights below).

7Your rights

Under UK data protection law, you have the right to:

• Be told how your data is used (this notice).
• Access a copy of the data we hold about you.
• Have inaccurate data corrected.
• Have your data erased ("right to be forgotten").
• Restrict or object to how we use your data.
• Withdraw your consent at any time, including by using the unsubscribe link in any email.
• Ask for your data in a portable format.

To exercise any of these, email us at hello@sermedmezher.com. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you think we have mishandled your data.

8Cookies and tracking

Our signup page uses only the cookies needed to make it work and keep it secure. Our newsletter emails may include a small tracking pixel and tagged links that tell us whether an email was opened or a link clicked, so we can measure what is useful.

9Children

This newsletter is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 16.

10Changes to this notice

We may update this notice from time to time. When we do, we will change the "last updated" date at the top. Significant changes affecting how we use your data will be communicated to subscribers directly.