Privacy Policy

The type of personal information we collect

We currently collect and process the following information:

  • Personal identifiers, contacts and characteristics (for example, name and contact details)

  • Health information including your medical history, dietary, lifestyle, supplement and medicine details, biochemical test results, clinic notes and nutrition plans

  • GP contact information

  • Bank details

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • Completing a health assessment questionnaire

  • During a nutrition consultation

  • Through email

  • Making online payments

We use this information to provide you with healthcare. This means that the legal basis for holding your personal data is for legitimate interest.

Following completion of your healthcare we retain your personal data for the period defined by our professional association BANT and registrant body, CNHC. This enables us to process any complaint you may make. In this case the legal basis of our holding your personal data is for contract administration.

Personal information from other sources

We also receive personal information indirectly, from the following sources in the following scenarios:

  • Biochemical testing companies

We use the information that you have given us in order to provide you with healthcare. This means that the legal basis for holding your personal data is for legitimate interest.

How we use your data

We may use your personal data where there is an overriding public interest in using the information e.g. in order to safeguard an individual, or to prevent a serious crime, or where there is a legal requirement such as a formal court order. We may use your data for marketing purposes such as special offers but this would be subject to you giving us your express consent.

Sharing data with other organisations

  • Our registrant body, CNHC and our professional association, BANT, for the processing of a complaint made by you

  • Any legal or crime prevention agencies and/or to satisfy any regulatory request (e.g, CNHC if we have a duty to do so or if the law allows us to do so)

  • Supplement companies and biochemical testing companies as part of providing you with healthcare. We will not include any sensitive information.

  • GP or other healthcare providers.

  • Authorities such as the police, social services in the case of a child or vulnerable adult, or GP in case of self-harm if we feel like your life is in danger, using the legal basis of vital interests.

Your data protection rights

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

  • Your consent. You are able to remove your consent at any time. You can do this by contacting your nutritional therapist via the email address they have provided you with.

  • We have a legitimate interest.

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information.

  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

  • Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact your nutritional therapist on the email they have provided you with if you wish to make a request.

Safeguarding

We only use information that may identify you in accordance with GDPR. This requires us to process personal data only if there is a legitimate basis for doing so and that any processing must be fair and lawful.

Within the health sector, we also have to follow the common law duty of confidence, which means that where identifiable information about you has been given in confidence, it should be treated as confidential and only shared for the purpose of providing direct healthcare. We will protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared.

How we store your personal information

We ensure the information we hold is kept in secure locations, restrict access to information to authorised personnel only, protect personal and confidential information held on equipment such as laptops with encryption (which masks data so that unauthorised users cannot see or make sense of it). We ensure external data processors that support us are legally and contractually bound to operate and prove security arrangements are in place where data that could or does identify a person are processed.

Strength and Salad is currently in the process of registering with the Information Commissioner’s Office (ICO) as a data controller. A copy of the registration is available through the ICO website (search by business name) shortly.

All records held by Strength and Salad will be kept for the duration specified by guidance from our professional association BANT.

We will then dispose your information by permanently and safely deleting all of your digital records.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint by emailing your nutritional therapist via the email address they have provided you with at the time of your initial consultation.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

 

How your data is used on this website:

Analytics

This website collects personal data to power the site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

Visitor data

When you buy something on this website, we collect personal information from you to fulfill the order. We may collect information like your:

  • Billing and shipping address

  • Email address

  • Name

  • Phone number

Account emails

We may email you with messages about your order or account activity. For example, we may email you to tell you that:

  • You’ve created a customer account

  • Your customer account password has been reset or updated

  • You’ve made a purchase

It’s not possible to unsubscribe from these messages.

Scheduling an appointment

When you schedule an appointment by booking on this website, we collect personal information from you to complete the booking. We may collect information like your:

  • Name

  • Email address

  • Phone number

  • Details relating to your appointment (for example, who referred you)