Your information, in plain English.

This Privacy Policy explains how Nouri Zad Enterprises Inc ("we," "our," "us"), operating Glucose Decoded at https://glucosedecoded.com, collects, uses, and protects information from visitors. By using this site you agree to the practices described below.

1. Information we collect

1.1 Information you give us

• Email address when you subscribe to our newsletter.
• Name, email, and message contents when you contact us through the contact form or by email.
• Comment contents if you post in the comments section on an article (the comment widget is operated by a third party provider; see Section 6).
• Any other information you voluntarily share in a message to us.

1.2 Information collected automatically

• Anonymized usage data via a privacy-respecting analytics service. This typically includes the pages you visit, your approximate region (country or city level), referring URL, device type, and browser. IP addresses are anonymized or not retained.
• Cookies and similar technologies. We use a small number of cookies for essential site functionality (such as remembering your light or dark theme preference) and aggregate analytics. We do not use third party advertising cookies or cross-site tracking.

2. How we use information

• To deliver the newsletter you subscribed to.
• To reply to messages you send us.
• To moderate comments and reply to questions.
• To understand which articles are useful so we can improve them.
• To detect, prevent, and respond to abuse or fraud.
• To comply with legal obligations.

We do not sell your personal information. We do not share your email with third parties for marketing.

3. Legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we process your information on the following legal bases:

• Consent. When you subscribe to our newsletter or submit a contact form or comment.
• Legitimate interests. For aggregate analytics, site security, and improvement of our content.
• Legal obligation. When we must process data to comply with applicable law.

4. Cookies and analytics

We use a privacy-respecting analytics provider (for example, Plausible, Fathom, or Google Analytics configured with IP anonymization). The provider acts as a data processor on our behalf and is bound by their own privacy policy and data-processing agreement.

You can control cookies through your browser settings. Disabling cookies will not break this site, because we do not rely on cookies for core functionality.

5. Affiliate links and commercial relationships

As of the date above, Glucose Decoded has no affiliate links, advertisements, sponsorships, or paid placements of any kind. This is intentional during the site's first 6 to 9 months while we build content and trust.

If affiliate or advertising relationships are ever introduced in the future, this Privacy Policy will be updated, a dedicated disclosure page will be linked from the footer, and we will note the change in the "Last updated" date at the top of this document.

6. Third-party processors

We use a small number of third party services to run this website. Each acts as a data processor bound by their own privacy practices:

• Hosting provider (for example, Hostinger): stores the website files and serves the pages.
• Email service provider (for example, ConvertKit, Beehiiv, MailerLite, or Buttondown): stores newsletter subscriber emails and delivers our messages.
• Contact form provider (for example, Formspree): processes contact form submissions and forwards them to us by email.
• Comment widget provider (for example, Cusdis, Disqus, or giscus): hosts the comments on each article. Your comments are subject to that provider's privacy policy.
• Analytics provider as described above.

7. Data retention

• Newsletter subscribers: until you unsubscribe or request deletion.
• Contact form submissions: typically retained for up to 24 months for customer-service continuity, then deleted.
• Comments: retained by the comment-widget provider per their policy. We can remove specific comments on request.
• Aggregate analytics: retained indefinitely in aggregate, non-personal form.

8. Your rights

8.1 Rights under GDPR (EEA / UK)

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate personal information.
• Request deletion of your personal information.
• Restrict or object to processing.
• Data portability (receive your information in a portable format).
• Withdraw consent at any time.
• Lodge a complaint with your local supervisory authority.

8.2 Rights under CCPA / CPRA (California)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell.
• Delete personal information we have collected about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• Be free from discrimination for exercising any of these rights.

8.3 How to exercise your rights

Send a request to hello@glucosedecoded.com with the subject line "Privacy Request." We will verify your identity (typically by confirming the email address on file) and respond within the timelines required by the applicable law (generally 30 days under GDPR; 45 days under CCPA).

9. Children's privacy

This website is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.

10. International transfers

We are based in California, USA. Some of our third party processors may store or process data outside your country of residence. Where required, transfers are protected by appropriate safeguards (such as Standard Contractual Clauses).

11. Security

We use commercially reasonable measures to protect your information, including TLS encryption in transit, restricted access to systems holding personal data, and reputable third party processors. No method of internet transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date at the top, and where appropriate we will notify newsletter subscribers by email.

13. Contact

Questions about this policy or your information? Contact us at hello@glucosedecoded.com, or write to:

Nouri Zad Enterprises Inc
Palo Alto, California, USA