Nurturing You Nutrition Privacy Policy
Introduction
This Privacy Policy outlines Nurturing You Nutrition practices with respect to information collected from users who access our website at http://www.nurturingyounutrition.com " Nurturing You Nutrition " or otherwise share personal information with us (collectively: " Users ").
Grounds for data collection
Processing of your personal information (i.e. any information which may potentially allow your identification through reasonable means; hereinafter Personal Information is necessary for the performance of our contractual obligations towards you and providing you with our services, to protect our legitimate interests and for compliance with legal and financial regulatory obligations to which we are subject.
When you use the Site, you consent to the collection, storage, use, disclosure and other uses of your Personal Information as described in this Privacy Policy.
We encourage our Users to carefully read the Privacy Policy and use it to make informed decisions.
What information do we collect?
How do we receive information about you?
We receive your Personal Information from various sources:
- When you voluntarily provide us with your personal details in order to register on our Site;
- When you use or access our Site in connection with your use of our services;
- From third-party providers, services and public registers (for example, traffic analytics vendors).
- We may obtain sensitive medical information in the form of test results from biochemical testing companies. We use this information in order to provide you with direct healthcare. This means that the legal basis of our holding your personal data is for legitimate interest.
- We may obtain sensitive information from other healthcare providers. The provision of this information is subject to you giving us your express consent. If we do not receive this consent from you, we will not be able to coordinate your healthcare with that provided by other providers which means the healthcare provided by us may be less effective.
We collect two types of data and information from Users.
The first type of information is un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via your use of the Site (Non-personal Information). We are not aware of the identity of a User from which the Non-personal Information was collected. Non-personal Information which is being collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to enhance the functionality of our Site. We may also collect information about your activity on the Site (e.g. pages viewed, online browsing, clicks, actions, etc.).
The second type of information Personal Information which is individually identifiable information, namely information that identifies an individual or may, with reasonable effort, identify an individual. Such information includes:
- Device Information: We collect Personal Information from your device. Such information includes geolocation data, IP address, unique identifiers (e.g. MAC address and UUID) and other information which relates to your activity through the Site.
- By completing a nutritional therapy questionnaire
- By signing a terms of engagement form
- During a nutritional therapy consultation…
- Through email, over the telephone or by post
- By taking credit card and online payment…
These may include the following information:
- basic contact details such as name, address, contact details and next of kin
- details of contact we have had with you such as referrals and appointment requests
- health information including your previous medical history, dietary, lifestyle, supplement and medicine details, biochemical test results, clinic notes and health improvement plans
- GP contact information
- Bank details
We use this information in order to provide you with direct healthcare. This means that the legal basis of our holding your personal data is for legitimate interest.
Following completion of your healthcare we retain your personal data for the period defined by our professional association BANT and registrant body, CNHC. This enables us to process any complaint you may make. In this case the legal basis of our holding your personal data is for contract administration.
What information do we collect?
We do not rent, sell or share Users’ information with third parties, except as described in this Privacy Policy.
We may use the information for the following:
- Communicating with you – sending you notices regarding our services, providing you with technical information and responding to any customer service issue you may have;
- To communicate with you and to keep you informed about our latest updates and services;
- To serve you advertisements when you use our Site (see more under "Advertisements");
- To market our websites and products (see more under "Marketing");
- For statistical and analytical purposes, intended to improve the Site.
We may also disclose information if we have good reason to believe that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce our policies (including our Agreement), including investigations of potential violations thereof; (iii) investigate, detect, prevent or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues; (iv) to establish or exercise our rights to defend against legal claims; (v) prevent harm to the rights, property or safety of us, our users, yourself or any third party; or (vi) for the purpose of collaborating with law enforcement agencies and/or in case we find it necessary in order to enforce intellectual property or other legal rights. We may use your data for marketing purposes such as newsletters but this would be subject to you giving us your express consent.
We act as a data controller for use of your personal data to provide direct healthcare. We also act as a controller and processor in regard to the processing of your data from third parties such as testing companies and other healthcare providers. We act as a data controller and processor in regard to the processing of credit card and online payments.
We undertake at all times to protect your personal data, including any health and contact details, in a manner which is consistent with our duty of professional confidence and the requirements of the General Data Protection Regulation (GDPR) concerning data protection. We will also take reasonable security measures to protect your personal data storage.
We may use your personal data where there is an overriding public interest in using the information e.g. in order to safeguard an individual, or to prevent a serious crime. Also where there is a legal requirement such as a formal court order. We may use your data for marketing purposes such as newsletters but this would be subject to you giving us your express consent.
User Rights
You may request to:
- Receive confirmation as to whether or not personal information concerning you is being processed and access your stored personal information, together with supplementary information.
- Receive a copy of personal information you directly volunteer to us in a structured, commonly used and machine-readable format.
- Request rectification of your personal information that is in our control.
- Request erasure of your personal information.
- Object to the processing of personal information by us.
- Request to restrict processing of your personal information by us.
- Lodge a complaint with a supervisory authority.
However, please note that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements.
If you wish to exercise any of the above rights or receive more information, please contact our Data Protection Officer Raquel Ramos Fraga at:
hello@nurturingyounutrition.com
Retention
We will retain your personal information for the duration specified by guidance from our professional association BANT.
We may rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion.
Cookies
Third-party collection of information
How do we safeguard your information?
We take great care in implementing and maintaining the security of the Site and your information. We only use information that may identify you in accordance with GDPR. This requires us to process personal data only if there is a legitimate basis for doing so and that any processing must be fair and lawful. Within the health sector, we also have to follow the common law duty of confidence, which means that where identifiable information about you has been given in confidence, it should be treated as confidential and only shared for the purpose of providing direct healthcare. We will protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared. We also ensure the information we hold is kept in secure locations, restrict access to information to authorised personnel only, protect personal and confidential information held on equipment such as laptops with encryption (which masks data so that unauthorised users cannot see or make sense of it). We ensure external data processors that support us are legally and contractually bound to operate and prove security arrangements are in place where data that could or does identify a person are processed.
Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorised access or abuse our Site, and we make no warranty, express, implied or otherwise, that we will prevent such access.
Transfer of data outside the EEA
Advertisements
We may use a third-party advertising technology to serve advertisements when you access the Site. This technology uses your information with regards to your use of the Services to serve advertisements to you (e.g., by placing third-party cookies on your web browser).
You may opt out of many third-party ad networks, including those operated by members of the Network Advertising Initiative ("NAI") and the Digital Advertising Alliance ("DAA"). For more information about this practice by NAI and DAA members, and your choices regarding having this information used by these companies, including how to opt-out of third-party ad networks operated by NAI and DAA members, please visit their respective websites: http://optout.networkadvertising.org/#!/ and http://optout.aboutads.info/#!/ .
Marketing
Corporate transaction
Minors
We understand the importance of protecting children’s privacy, especially in an online environment. The Site is not designed for or directed at children. Under no circumstances shall we allow the use of our services by minors without prior consent or authorisation by a parent or legal guardian. We do not knowingly collect Personal Information from minors. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at hello@nurturingyounutrition.com
Updates or amendments to this Privacy Policy
How to contact us
If you have any general questions about the Site or the information we collect about you and how we use it, you can contact us at hello@nurturingyounutrition.com
Nurturing You Nutrition. Last Modified 08/07/2021