Privacy Policy
Last updated: [date]
As with the Terms of Service — this is a thorough starting draft grounded in current UK GDPR requirements, but get it checked by a solicitor or the BDA’s legal advice line before publishing. You’re handling special category health data, which carries specific legal obligations.
1. Who we are
The Precision Nutrition Clinic ([Your full legal name], sole trader) is the data controller for the personal information described in this policy.
Contact: support@theprecisionnutritionclinic.com. Address: [Business address].
Action item: register as a data controller with the Information Commissioner’s Office (ICO) if you haven’t already — this is a legal requirement. Check the current fee and application details at ico.org.uk before publishing.
2. What information we collect
Information you give us directly includes your name, email address, phone number, and, if provided, postal address; health information relevant to your nutrition care, such as medical history, diagnoses, medications, allergies, dietary habits, weight, and other measurements you choose to share; and anything else you tell us during consultations that’s relevant to your care.
Information collected automatically includes basic technical data needed for the website to function, for example via Framer’s hosting. We do not currently use third-party analytics or advertising tracking, such as Google Analytics or Meta Pixel. If this changes, this policy will be updated first.
Information from third parties may include booking details from Calendly when you schedule an appointment and payment confirmation from Stripe. We do not receive or store your full card details — Stripe handles this directly.
3. Why we use your information, and our legal basis
Providing nutrition consultations and care — performance of a contract with you under Article 6(1)(b). Processing your health information specifically — your explicit consent under Article 9(2)(a), given when you complete our intake and consent form. Sending appointment reminders and service communications — performance of a contract. Keeping financial records — legal obligation under Article 6(1)(c), including HMRC record-keeping requirements. Improving our service — legitimate interests under Article 6(1)(f), where this does not override your rights.
Health information is special category data under UK GDPR and is handled with extra care. We will always ask for your explicit consent before collecting or using it, and you can withdraw that consent at any time, though this may affect our ability to continue providing care to you.
4. Who we share your information with
Calendly — processes your booking details to manage scheduling
Stripe — processes your payment; we don’t see or store your card number
Your email provider, such as Zoho Mail — used to communicate with you
Your GP or other healthcare professionals — only with your explicit, specific consent, and only when it’s genuinely useful to your care
Authorities, where required by law, such as in a serious safeguarding concern
We do not sell your information to anyone, ever.
Some third parties above may process data outside the UK or EEA. Where this happens, we rely on their compliance with UK-recognised safeguards, such as Standard Contractual Clauses. Check each provider’s own privacy policy for specifics.
5. How long we keep your information
We keep clinical records in line with British Dietetic Association guidance and the Welsh NHS record retention schedule, which set out minimum retention periods for health records. Confirm the current exact period with BDA or HCPC guidance before publishing, as this varies by record type and is reviewed periodically.
Financial records are kept for as long as required by HMRC, currently at least 6 years. If you only book the free discovery call and don’t go on to become a client, we’ll delete your contact details within a reasonable period, such as 12 months, unless you ask us to keep in touch.
6. Keeping your information secure
We take reasonable technical and organisational measures to protect your information, including secure storage, access limited to those who need it — in a one-person practice, that’s just Sal — and reputable third-party providers such as Calendly and Stripe who maintain their own security standards.
7. Your rights
Access the personal information we hold about you
Ask us to correct inaccurate information
Ask us to delete your information in some circumstances
Restrict or object to how we use your information
Receive your information in a portable format
Withdraw consent at any time, where consent is our legal basis
To exercise any of these rights, contact support@theprecisionnutritionclinic.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk if you’re unhappy with how we’ve handled your information.
8. Cookies
This site uses only the technical cookies necessary for it to function, set via Framer hosting. These don’t require your consent under UK law. We don’t currently use analytics or advertising cookies. If that changes, we’ll update this policy and add a cookie consent option where required.
9. Children
Our services are intended for adults aged 18 and over. We don’t knowingly collect information from anyone under 18.
10. Changes to this policy
We may update this policy from time to time. The version published on this website is the one currently in effect.