Privacy policy

The short version: we do not use cookies, analytics or tracking, and anything you enter into our tools stays on your own device.

1. Who we are

The controller responsible for this website is Zwillinge Ltd, 74 Bishops Road, London SW6 7AR, United Kingdom. Email: info [at] gerd [dot] org.

2. No cookies or tracking

This website does not set cookies, does not use analytics or advertising trackers, and does not load fonts, scripts or other content from third-party servers.

3. Hosting and server logs

The website is hosted by Cloudflare. When you visit, Cloudflare processes technical data such as your IP address, the time of the request, the page requested and your browser type, in order to deliver the website and protect it from attacks. Our lawful basis is legitimate interests (UK GDPR and EU GDPR Article 6(1)(f)) in running a secure website. This data may be processed outside the UK and EU under appropriate safeguards. We do not use it to identify you.

4. Information stored on your device

The symptom diary, lifestyle checklist and meal-timing planner save your entries and settings in your browser's local storage, on your device only. This information is never sent to us or anyone else, and we cannot see it. Health information you enter stays under your control: you can delete it at any time using the "Delete all entries" button or by clearing your browser data. If other people use your device, they may be able to see it.

5. Email

If you email us, we use your email address and message only to reply to you, and delete them when they are no longer needed, normally within 12 months.

If you sign up for our email course, we collect your email address and, if you give it, your first name, with your consent (UK GDPR and EU GDPR Article 6(1)(a)). We send the course and occasional updates from GERD.org, and nothing else. Your address is stored with our email provider, MailerLite (MailerLite Limited, Ireland), which processes it on our behalf. The signup form sends your details from our own website to MailerLite, so no MailerLite scripts or cookies are loaded on our pages. MailerLite may record whether an email was opened or a link in it was clicked; we use this only to see which parts of the course are useful. Every email has an unsubscribe link, and you can ask us to delete your address at any time. We delete addresses when you unsubscribe.

6. Affiliate links

Some pages contain links to Amazon. If you click one, you leave our website and Amazon's privacy policy applies. No data is collected on this website when you do so.

7. Your rights

You have the right to access, correct, delete or restrict the processing of personal data we hold about you, to object to processing, and to data portability. To exercise these rights, email us. You also have the right to complain to a data protection authority, such as the Information Commissioner's Office (ICO) in the UK.

8. Changes

We will update this policy if our practices change, for example if we add advertising. Last updated 26 October 2026.