Naturopathic Nutrition by Sarah customer privacy notice
This privacy notice tells you what to expect us to do with your personal information.
Naturopathic Nutrition by Sarah customer privacy notice
This privacy notice tells you what to expect us to do with your personal information.
Contact details
Telephone: +447563007538
Email: [email protected]
What information we collect, use, and why
We collect or use the following information to provide and improve products and services for clients:
Names and contact details
Addresses
Occupation
Date of birth
Transaction data (including details about payments to and from you and details of products and services you have purchased)
Usage data (including information about how you interact with and use our website, products and services)
Health information (such as medical records or health conditions)
Information relating to compliments or complaints
Account access information
Website user information
We collect or use the following personal information for the operation of client or customer accounts:
Names and contact details
Addresses
Health information
Purchase or service history
Account information, including registration details
Information used for security purposes
Marketing preferences
Technical data, including information about browser and operating systems
We collect or use the following personal information for information updates or marketing purposes:
Names and contact details
Addresses
Health information
Profile information
Marketing preferences
Purchase or account history
Website and app user journey information
IP addresses
We collect or use the following personal information to comply with legal requirements:
Name
Contact information
Client account information
Any other personal information required to comply with legal obligations
Health information
We collect or use the following personal information to protect client welfare:
Name
Contact information
Client account information
Health and wellbeing information
We collect or use the following personal information for dealing with queries, complaints or claims:
Names and contact details
Address
Account information
Purchase or service history
Correspondence
Health information
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website. Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here.
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:
Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Our legitimate interests are:
As a nutritional therapist, I collect and use personal information to provide and improve services to clients. This includes offering personalised nutrition advice, tracking health progress, and adjusting plans to meet evolving needs. The benefits of this approach—such as more effective, tailored care and better health outcomes—are greater than any potential risks. I take all necessary precautions to protect client data, ensure confidentiality, and comply with legal privacy regulations. Clients have full control over their information and are kept informed about how it is used to enhance the services they receive.
Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.
Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:
Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Our legitimate interests are:
As a nutritional therapist, I collect and use personal information for the operation of customer accounts to ensure the effective management of services. This allows me to maintain accurate records of clients' health data, track progress, and provide tailored nutritional advice. By having up-to-date information, I can offer personalized support and ensure continuity of care. The benefits of this are improved service delivery, more accurate health assessments, and better follow-up on client progress. The risks, such as privacy concerns, are minimised by securely storing data and complying with legal standards like GDPR. Clients have control over their information and are fully informed about how their data is used to manage and improve their account and services.
Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.
Our lawful bases for collecting or using personal information for information updates or marketing purposes are:
Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Our legitimate interests are:
My legitimate interest in collecting or using personal information for updates or marketing purposes is to enhance the services I provide to clients, keeping them informed about relevant health tips, new offerings, and updates related to their nutrition goals. The benefit to clients is receiving personalised, timely information that supports their health journey and helps them make informed decisions. The benefits outweigh the risks, as I ensure data is securely managed, and clients have full control over their information. They can easily opt out of marketing communications at any time, ensuring their privacy and preferences are respected.
Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.
Our lawful bases for collecting or using personal information to comply with legal requirements:
Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Our legitimate interests are:
My legitimate interest in collecting or using personal information to comply with legal requirements is to ensure I meet regulatory obligations, such as providing accurate health advice and maintaining client records for legal and professional purposes. The benefit to clients is that they receive safe, compliant care, and their health data is handled according to relevant laws. The benefits outweigh any risks, as I prioritise client privacy, store data securely, and only use it when necessary for legal compliance. Clients' rights are protected, and their information is used solely for these required purposes.
Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.
Our lawful bases for collecting or using personal information to protect client welfare are:
Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability
Our legitimate interests are:
My legitimate interest in collecting or using personal information to protect client welfare is to ensure their safety and well-being by providing tailored, appropriate nutritional advice and support. This includes monitoring health progress, identifying potential risks, and adjusting recommendations as needed. The benefit to clients is receiving care that is personalised and responsive to their health needs, which can prevent harm or improve outcomes. The benefits outweigh any risks, as I handle data securely, prioritize privacy, and use it only to support clients' best interests and welfare.
Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability
Our legitimate interests are:
My legitimate interest in collecting or using personal information to deal with queries, complaints, or claims is to ensure that any issues are addressed promptly and effectively, providing clients with the support they need. This allows me to respond accurately to concerns, resolve disputes, and improve the quality of service. The benefit to clients is receiving a clear and timely resolution to their issues, ensuring their experience is positive and their rights are respected. The benefits outweigh any risks, as I handle information securely and only use it to resolve specific matters while respecting client privacy.
Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.
Where we get personal information from
Directly from you
Publicly available sources
How long we keep information
Data Retention Schedule for Nutritional Therapist
This schedule ensures personal data is kept only as long as necessary for legal, service, and business requirements, and is securely disposed of when no longer needed.
Who we share information with
Others we share personal information with:
Suppliers and service providers
Professional consultants
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Last updated
22 January 2025
© 2025 Copyright Naturopathic Nutrition with Sarah