Privacy notice

Updated 17 September 2026

Who is responsible

Lou Brown, trading as The Sick List, is responsible for the personal information described here (the data controller). For privacy questions or requests, email thesicklistuk@gmail.com.

This address is for privacy matters. The Sick List does not provide medical advice or a patient support service. Please do not send medical records or details of your treatment.

Using the site

You do not need an account. There is no newsletter sign-up, contact form or checkout. Our search and packing checkboxes work in your browser; we do not send their contents to Google Analytics or save them in a patient database.

Lovable hosts the site. Delivering and protecting pages involves technical information such as IP addresses, requested pages, request times and browser details. Google Fonts and external product-image providers also receive browser requests when their content loads. We use these services to display and maintain the site, relying on our legitimate interests in providing a working, secure website.

Providers may keep technical logs for security, troubleshooting and legal requirements. Their retention depends on the purpose and their service policies; we do not set a separate retention period for copies held by them. Read Lovable’s privacy policy and Google’s privacy policy.

To load product images, your browser may connect to Amazon, Marks & Spencer, SpeedSize, Amplience and Cloudinary. These services handle those technical requests under their own privacy policies: Amazon, Marks & Spencer, SpeedSize, Amplience and Cloudinary.

Optional analytics

Google Analytics is currently switched off while the site is being prepared for launch. Once enabled, it will only load if you accept analytics. Its purpose is to help us understand which resources people use, based on your consent.

The planned measurement includes broad site sections, broad referral sources, browser identifiers, basic device information, approximate location, PDF opens and retailer clicks. We group individual guides, needs, situations and printables into broad sections before sending page information. PDF-open events do not name the PDF. We do not use this to diagnose anyone, build health profiles or personalise advertising.

Detailed user and event data retention is set to two months, without resetting on new activity. Aggregated standard reports can remain longer. Analytics cookies and your saved accept or reject choice last up to six months. See Cookies & analytics for details and controls.

Our Google Analytics account allows aggregated modelling and business insights, technical-support access, and business recommendations based on account information. Google products & services sharing is off. These account settings do not switch on collection: analytics remains off until enabled, and then requires your consent. Google explains these uses in its data-sharing settings guidance.

If you email about privacy

We receive your email address, message and anything you choose to include. Google’s Gmail service handles that correspondence. We use it to answer your enquiry and meet our data-protection obligations. We retain it while dealing with the request and for as long as reasonably needed to document the response, resolve a dispute or meet a legal requirement.

Other services and overseas processing

Retailer and affiliate links take you to other services with their own privacy notices. Those services handle any purchases. We do not receive your payment details through this site.

Our providers may process information outside the UK. Google describes its safeguards, including adequacy frameworks and contractual clauses where applicable, in its data transfer information. Lovable states that UK transfers use the UK International Data Transfer Addendum, and that operational and security logs are retained as needed to run and secure its services, including longer investigations. Its privacy policy explains how to request a copy of its transfer safeguards. You can contact us to ask about safeguards relevant to your information.

Your choices and rights

You can withdraw analytics consent through Cookie settings in the footer. Withdrawal stops future collection; it does not undo processing already carried out with consent.

Depending on the circumstances, you can request access, correction, deletion, restriction or transfer of your personal information. You can object to processing based on legitimate interests. Contact the privacy email above to exercise your rights. We may need information to verify your request; we do not collect extra identifying data simply to identify an analytics visitor.

You can also complain to the Information Commissioner’s Office (ICO). You do not have to contact us first.