Privacy

What this site collects, what it does not, and who handles the little that it does.

Last updated 31 August 2026.

The short version

This site runs no analytics, no advertising, no tracking pixels and no third-party embeds. It sets no cookies of its own. Nothing you read here is logged against you, and there is no profile of you to build. The only personal information that exists is what you choose to type into the contact form.

The contact form

If you send a message, the form collects your name, your email address and whatever you write. It is delivered by FormSubmit, which passes the message to my email inbox. FormSubmit processes the submission in transit; the message then lives in my mailbox in the ordinary way.

I use what you send to reply to you and, if we end up working together, to carry on that conversation. I do not add you to a mailing list, sell your details, or pass them to anyone else. If you would like a message and my reply deleted, ask and I will delete them.

The form carries a hidden field that only automated spam bots fill in. If it is filled, the message is discarded. Nothing about a genuine visitor is inspected.

Hosting and server logs

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical request data — IP address, browser type, the page requested, timing — to serve pages and protect against attacks. That processing is Cloudflare’s, under its own privacy terms, and I do not receive per-visitor reports from it or use it to identify anyone.

Fonts, scripts and embeds

The two typefaces are downloaded at build time and served from this site’s own domain, so loading a page here sends no request to Google or any other font host. There are no advertising scripts, social widgets, session recorders or heat maps anywhere on the site.

What is stored in your browser

One item, and only if you use it: your choice of light or dark theme, saved in your browser’s local storage so the site does not forget it between visits. It never leaves your device and I cannot read it. Clearing your browser data removes it.

Links out

Pages here link to other sites — LinkedIn, Substack, news publications, documents. Once you follow a link you are on someone else’s site under their privacy terms, not mine.

Medical content

Writing on this site is general commentary and analysis. It is not medical advice, it does not create a doctor–patient relationship, and it should not be used to make a decision about your own care or anybody else’s. Please do not send patient information or clinical details about an identifiable person through the contact form.

Your rights

Under the Nigeria Data Protection Act 2023, and under the UK GDPR and EU GDPR where they apply to you, you can ask what personal data I hold about you, ask for it to be corrected or deleted, and object to how it is used. Because the only data I hold is correspondence you sent me, these requests are usually settled in one email.

Children

This site is written for working adults and is not directed at children. I do not knowingly collect information from anyone under eighteen.

Changes

If the site starts doing something new — analytics, a newsletter, a gated download — this page changes at the same time, and the date at the top changes with it.

Getting in touch

Questions about any of this, or a request to delete something, go to contact@drtolu.com. You can also use the contact page, though for a deletion request email is simpler.