Privacy Policy

Effective Date: 04/09/2025
Business Name: The Neurospicy Nutritionist

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information in connection with our online nutrition coaching services.

1. Information We Collect

We may collect the following types of personal information:

Identity data – name, age, gender, date of birth.
Contact data – email address, phone number, postal address.
Health and lifestyle data – medical history, dietary habits, goals, allergies, and other relevant information you provide for coaching purposes.
Payment data – billing information processed securely via third-party providers (we do not store full card details).
Technical data – IP address, browser type, and cookies (when using our website).

2. How We Use Your Information

We process personal data for the following purposes:

To provide personalised nutrition coaching services.
To communicate with you about appointments, resources, and updates.
To manage payments, invoices, and accounts.
To maintain records for legal, tax, and insurance purposes.
To improve our website, services, and client experience.

We only process health data with your explicit consent and in line with UK GDPR.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent – where you provide clear consent for us to process health information.
Contract – processing necessary to deliver coaching services.
Legal obligation – compliance with UK tax, insurance, or regulatory requirements.
Legitimate interests – limited use for business improvement, provided it does not override your rights.

4. Sharing of Data

We do not sell or trade your data.
Information may be shared with trusted third-party providers (e.g. booking platforms, payment processors) who comply with UK GDPR.
We may disclose information if required by law (e.g. safeguarding, court order, or legal obligation).

5. Data Storage & Retention

Data is stored securely in encrypted systems and password-protected files.
Health records are retained for 7 years in line with professional insurance requirements, unless otherwise required by law.
After this period, your information will be securely deleted.

6. Your Rights

Under UK GDPR, you have the right to:

Access your personal data.
Request correction of inaccurate information.
Request deletion of your data (where legally possible).
Restrict or object to processing.
Withdraw consent at any time.
Lodge a complaint with the Information Commissioner’s Office (ICO).

7. Cookies & Website Use

Our website may use cookies to improve user experience and analytics. You can manage cookie settings through your browser.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Email: cliftongemma@hotmail.com
Phone: +447518926427