Privacy Policy

1. Data Controller

NutriOptimised (the "Company," "we," "us," or "our") is the data controller responsible for your personal data. Our contact details are:

2. Information We Collect

We collect the following types of personal data:

• • Contact Information: Name, email address, phone number, postal address
• • Health Information: Health history, dietary information, lifestyle data (with explicit consent)
• • Communication Data: Records of our communications, consultation notes
• • Technical Data: IP address, browser type, device information, cookies
• • Usage Data: How you interact with our website and services

3. Legal Basis for Processing

We process your personal data based on:

• • Contract: To provide nutritional therapy services
• • Consent: For marketing communications and health data processing
• • Legitimate Interest: To improve our services and website functionality
• • Legal Obligation: To comply with healthcare regulations

4. How We Use Your Information

We use your personal data to:

• • Provide nutritional therapy consultations and services
• • Develop personalised nutrition and wellness plans
• • Communicate with you about appointments and services
• • Send relevant health and nutrition information (with consent)
• • Improve our website and services
• • Comply with legal and regulatory requirements

5. Data Sharing

We do not sell your personal data. We may share your information with:

• • Healthcare providers (with your explicit consent)
• • Service providers who assist with our operations
• • Legal authorities when required by law

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

7. Data Retention

We retain your personal data for as long as necessary to provide services and comply with legal obligations. Health records are typically retained for 7 years after your last consultation, in accordance with healthcare regulations.

8. Your Rights

Under GDPR, you have the right to:

• • Access: Request a copy of your personal data
• • Rectification: Correct inaccurate data
• • Erasure: Request deletion of your data
• • Restriction: Limit how we process your data
• • Portability: Receive your data in a structured format
• • Object: Object to processing based on legitimate interest
• • Withdraw consent: Where processing is based on consent

9. Cookies and Tracking

We use cookies and similar technologies to improve your website experience and analyze usage. You can control cookie settings through your browser. For more details, see ourCookie Policy.

10. International Transfers

If we transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

11. Regulatory Authority

Our lead supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD). You have the right to lodge a complaint with the AEPD or your local data protection authority.

12. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us:

13. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by email or by posting a notice on our website.