Privacy

Draft — requires legal review before launch.

Who is responsible for your data

The data controller is Dr. Magdi Ishag Ahmed, who is based in the United Kingdom. To contact us about any of the matters set out in this policy, please write to us at info@magdishag.com.

What we collect

• Email address: when you subscribe to the newsletter, together with the date you subscribed and the language of the page you subscribed from.
• Comments: your name, your email address and the text of your comment when you take part in the discussion under articles.
• Hosting requests: the information you enter in the hosting request form (such as your name, your organisation and the subject of the request).
• Technical logs: Cloudflare, as the provider of the website's infrastructure, keeps limited technical logs (such as IP addresses and the time of each visit) for security purposes and to operate the service.

Purposes and lawful bases of processing

• Newsletter: processed on the basis of the explicit consent you give when you subscribe, which you may withdraw at any time.
• Comments and their moderation: processed on the basis of our legitimate interest in managing public discussion of the content and preventing misuse.
• Hosting requests: processed in order to take steps before entering into a contract, or on the basis of our legitimate interest in following up the requests we receive.

The newsletter: your consent and unsubscribing

• We add your email address to the newsletter only with your explicit consent: the subscription form has a box reading "I agree to receive the newsletter by email under the privacy policy", which is not ticked in advance, and the form is not sent until you tick it yourself.
• We keep the date you subscribed, the moment you gave your consent, as a record of it.
• You can withdraw your consent and unsubscribe at any time, free of charge and without giving a reason: through the unsubscribe link at the foot of every message, or by writing to us at info@magdishag.com. We then delete your email address from the list of subscribers and send you no further messages.

How long we keep data

• Newsletter data: kept until you unsubscribe.
• Comment data: remains published for as long as the comment is visible on the website, or until the person who posted it asks for it to be deleted or erased.
• Hosting request data: we review hosting requests and delete anything that is no longer needed within a period of twelve months at most.

Who has access to your data

Your data is not sold, and it is not shared with anyone for marketing purposes. It is accessed only by the service providers that run the website on our behalf, acting as processors:

• Cloudflare: hosts and runs the website and its database.
• Resend: the email provider through which we send the newsletter to subscribers, and notifications of hosting requests to our own inbox; email addresses and the information contained in these messages therefore pass through it.
• YouTube (Google): the video lectures are shown from YouTube. Their thumbnails are loaded from YouTube's servers when lecture pages are displayed, and the video player is loaded only when you click to play a lecture; at that point YouTube receives technical data such as your IP address, and is subject to Google's own privacy policy.

These service providers may process some data outside the United Kingdom.

Your rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

• access your personal data;
• have any inaccurate data corrected;
• ask for your data to be deleted or erased;
• object to the processing of your data;
• lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom.

How to exercise your rights

To exercise any of these rights, please write to us at info@magdishag.com.