Privacy Notice

1. What We Do

Conscious Nutrition provides nutritional therapy services to clients to improve their health through diet and lifestyle interventions. We focus on preventative healthcare, the optimisation of physical and mental health, and chronic health conditions.

Through nutritional therapy consultations, dietary and lifestyle analysis, and biochemical testing, we aim to understand the underlying causes of your health issues which we seek to address through personalised dietary therapy, nutraceutical prescription (supplements), and lifestyle advice.

2. How We Obtain Your Personal Data

Information provided directly by you

You provide us with personal data in the following ways:

• By completing a nutritional therapy questionnaire
• By signing a terms of engagement form
• During a nutritional therapy consultation
• Through email, over the telephone, or by post
• By taking credit card, debit card, or online payments (including secure PayPal transactions)

This may include:

• Basic details such as name, address, contact details, and next of kin
• Details of contact we have had with you such as referrals and appointment requests
• Health information including your previous medical history, dietary, lifestyle, supplement, and medicine details, biochemical test results, clinic notes, and health improvement plans
• GP and primary healthcare contact information
• Bank and payment transaction details

Legal basis: We use this information in order to provide you with direct healthcare. This means the legal basis of our holding your personal data is for legitimate interest. Following completion of your healthcare, we retain your personal data for the period defined by our professional association BANT and regulatory body CNHC (contract administration).

Information we receive from other sources

We may obtain sensitive medical information in the form of test results from biochemical testing laboratories (such as Genova Diagnostics, Invivo, or Doctor’s Data). We use this information to provide direct healthcare under legitimate interest.

We may also obtain information from other healthcare providers subject to your express written consent.

3. How We Use Your Personal Data

We act as a data controller for use of your personal data to provide direct healthcare. We also act as a controller and processor in regard to the processing of your data from third parties such as testing companies and other healthcare providers, and in regard to processing card and online payments.

We undertake at all times to protect your personal data, including any health and contact details, in a manner consistent with our duty of professional confidence and the requirements of the UK General Data Protection Regulation (UK GDPR).

We may only disclose information without consent where there is an overriding public interest (e.g. to safeguard an individual, prevent serious crime, or comply with a court order). Marketing messages (such as newsletters) are strictly subject to your prior opt-in consent.

4. Sharing Your Information with Other Organisations

We keep information about you strictly confidential. Third-party disclosures are limited to:

• Our registrant body, CNHC, and our professional association, BANT, for the processing of any formal complaint
• Vetted contractors and technology advisors bound by strict confidentiality agreements
• Law enforcement or crime prevention agencies where required by statutory legal duty
• Approved supplement companies and biochemical testing laboratories as part of your healthcare programme

We seek your express consent before communicating with your GP or other medical specialists, unless vital interests apply (e.g. immediate threat to life).

5. Your Rights as a Data Subject

Under UK data protection law, you have the right to:

• Access a copy of your personal data held by us (Subject Access Request)
• Request correction or rectification of inaccurate or outdated information
• Request deletion of your information (subject to statutory healthcare record retention rules)
• Ask us to restrict or stop processing where not required by law or professional regulatory bodies (BANT/CNHC)
• Data portability: receive your data in a structured, commonly used, machine-readable format
• Object at any time to processing based on legitimate interests

We do not carry out any automated profiling or automated decision-making. To exercise any of these rights, contact Alex Georgiou in writing at alex@conscious-nutrition.co.uk. Requests are answered within 20 working days.

6. Security Safeguards

Conscious Nutrition is registered with the Information Commissioner’s Office (ICO) as a data controller. Identifiable health data is kept in secure encrypted storage, with restricted access, complex password management, and verified cloud processors.

7. Data Retention

All clinical records are retained in accordance with professional guidance from the British Association for Nutrition and Lifestyle Medicine (BANT) and the Complementary and Natural Healthcare Council (CNHC) — typically for 8 years following the last consultation, or until the age of 25 in the case of minors.

8. Website Cookies & Analytics

Our website uses cookies strictly to enable site navigation, payment checkout security, and aggregated anonymous analytics via Google Analytics. Cookies do not store personally identifiable or financial records. You can manage or disable cookies at any time via your browser settings.

9. Contact & Complaints

If you have any questions or complaints regarding the handling of your personal data, please contact the Data Controller directly:

If your complaint is not resolved to your satisfaction, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.