Natural Food Therapy holds some information about you. This document outlines how that information is collected, processed, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Natural Food Therapy is committed to ensuring that your privacy is protected. Should you provide sensitive information, it will be used in accordance with this privacy statement. This notice does not provide exhaustive detail. If you require any additional information or explanation, please email your request to info@naturalfoodtherapy.co.uk. This privacy policy was last reviewed in October 2024.


What We Do

Natural Food Therapy provides nutritional therapy, coaching services, and other health-related services to support clients' relationships with food, body image, and overall health. We also offer educational courses and other digital resources designed to assist individuals in managing their health and wellness.


How We Obtain Your Personal Data

Information provided by you

You may provide personal data in the following ways:

• Completing a client form
• Signing a disclaimer
• Signing up for a mailing list
• During a coaching session
• By payment through debit/credit card or online payment
• Through email, telephone, Zoom, Telegram, Voxer, post, or social media
• Ordering a biochemical/nutritional test
• Enrolling in a course or using digital services
• Through automated technologies such as cookies

This may include the following information:

• Identity data such as full name, date of birth, and contact details
• Details of contact we have had with you such as appointment requests
• Health information such as GP contact, medical history, dietary/lifestyle information, test results, consultation notes, and programme plans
• Financial data such as payment details
• Course-related data, including course preferences, participation data, and feedback

This information is used to provide you with direct healthcare and course-related services. The lawful basis of our holding your personal data is legitimate interest and, for course enrolment, contract administration.

Information we get from other sources

We may obtain sensitive medical information from private testing companies if you order a test. This information is used to provide you with direct healthcare. We may also receive sensitive data from other healthcare providers with your consent.


How We Use Your Personal Data

We act as a data controller for your personal data in the context of providing direct healthcare and running our courses and digital services. We also act as a data controller and processor for payments and data from third parties such as testing companies.

Your personal data may be used for:

• Healthcare services: To provide nutritional therapy, coaching, and direct healthcare.
• Course administration: To deliver educational services, courses, and digital resources you enrol in.
• Communication: To respond to enquiries, provide updates on courses, and deliver marketing materials (with your consent).
• Legal and regulatory compliance: To meet professional or legal obligations.

We take reasonable security measures to protect your personal data and store it in a manner consistent with GDPR and professional confidence.


Disclosure of Your Personal Data with Other Organisations

We will keep your information confidential and only disclose it to third parties with your express consent, with the following exceptions:

• Registrants and regulatory bodies such as the CNHC (in case of a complaint).
• Course providers and platforms: We may share limited information with course hosting platforms such as Thinkific to administer course services.
• Healthcare providers: With your consent, we may share information with your GP or other healthcare providers, except in emergencies where vital interests are at stake.
• Legal and crime prevention agencies: If required to satisfy a legal obligation or court order.
  
  

If you enrol in a course or use other digital services, relevant data may be shared with payment processors and course delivery platforms to facilitate these services securely.


How Long We Retain Your Personal Data

We will retain your personal data for as long as necessary:

• Healthcare data: Retained for 8 years (or until age 25 for minors) in compliance with professional association guidelines.
• Course data: Retained for the duration of the course and as long as necessary to administer services or meet regulatory requirements.

Your Legal Rights

Under the UK GDPR, you have the following rights:

• Right to access: You can request details of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete data.
• Right to erasure: You can request the deletion of personal data, where lawful.
• Right to restrict processing: You can ask us to limit how we use your data.
• Right to data portability: You can request a copy of your data in a machine-readable format.
• Right to object: You can object to the processing of your data, including for marketing purposes.

To exercise any of these rights, please email sasha@naturalfoodtherapy.co.uk. We will respond within 30 days.


Data Protection and Security

We only use information in accordance with the UK GDPR and ensure:

• Confidentiality: Your personal data will only be shared for the purpose of providing healthcare or educational services.
• Security: We implement strict security measures, including encryption, to protect your personal data.
• Data Transfers: If your personal data is transferred outside the UK, we ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to comply with UK data protection laws.

Cookies

Cookies are used on our website to enhance user experience. We use cookies to:

• Analyse web traffic (Google Analytics)
• Remember your preferences

We do not use cookies to collect personally identifiable information. You can disable cookies via your browser settings if you prefer, although this may affect functionality.

For more details about cookies, visit www.allaboutcookies.org. To opt out of Google Analytics, visit http://tools.google.com/dlpage/gaoptout.


Marketing and Consent

With your explicit consent, we may use your data to send you marketing communications, such as newsletters and course updates. You can withdraw consent at any time by contacting us at info@naturalfoodtherapy.co.uk or using the “unsubscribe” option in our communications.


Complaints

If you have concerns about the handling of your personal data, please email sasha@naturalfoodtherapy.co.uk. If we cannot resolve your complaint, you may contact the Information Commissioner’s Office (ICO) at 01625 545745 or 0303 1231113.


Analytics

We use Google Analytics to understand trends on our website. The data is anonymised, and no personally identifiable information is used in our reports. You can opt out of Google Analytics tracking by visiting http://tools.google.com/dlpage/gaoptout.