Privacy Notice
Rachel Rees Nutrition (RRN) holds personal and sensitive information. This document outlines how that information is used, who we may share that information with and how we keep it secure. This notice does not provide exhaustive detail and we can provide any additional information needed. We keep our Privacy Notice under regular review.
What we do:
RRN provides Nutritional Therapy services. This refers to the application of evidence-based nutrition science in the promotion of physical and mental health optimisation and peak performance. RRN seeks to identify physiological and psychological factors that underpin individual health status and nutritional needs, and aims to address these factors through personalised dietary, nutraceutical and lifestyle interventions.
How we obtain and use your personal data:
Personal and sensitive Information is obtained via nutrition therapy questionnaires and consultations, and with your consent, third party healthcare providers. Personal and sensitive information may include contact details, medical history, medications, supplements, biochemical test results, clinic notes, health improvement plans and payment details. We use this information to provide you with direct healthcare. This means that the legal basis of holding your personal data is for legitimate interest.
Following completion of your healthcare, we retain your personal data for the period defined by the British Association for Nutrition and Lifestyle Medicine (BANT) and the Complimentary Natural Healthcare Council (CNHC). This enables us to process any complaint you may make. In this case, the legal basis of holding your personal data is for contract administration.
We may use your data where there is a legal requirement, i.e. in order to safeguard an individual or to prevent a serious crime.
Subject to your consent, we may use your data for marketing purposes.
Do we share your information with other organisations?
We will keep your information strictly confidential. We will only disclose your information with third parties subject to your consent (such as your GP, biochemical testing or supplement companies or for the purpose of professional development), with the exception of the following:
-
If we believe there is a risk of harm to life
-
Any legal or crime prevention agencies and/or to satisfy any regulatory request
-
Our registrant bodies, BANT and CNHC, for the processing of a complaint made by you
What are your rights?
You have the right to see, amend, delete, request a copy or object to the processing of your personal data. You do not need to give a reason to see your data.
If you want to access your data, you must make a subject access request in writing to rachel@rachelreesnutrition.com. Under special circumstances, some information may be withheld. We shall respond within 20 working days from the point of receiving the request and all necessary information from you.
We do not carry out any automated processing which may lead to any automated decision based on your personal data.
What safeguards are in place to ensure your data is secure?
RRN is registered with the Information Commissioner’s Office (ICO) as a data controller for use of your personal data, including data from third parties. We will protect your data in a manner consistent with the requirements of the UK General Data Protection Regulation (UK GDPR). This requires us to process personal data only if there is a legitimate basis for doing so and that any processing must be fair and lawful. A copy of the registration is available through the ICO website (search by business name).
Within the healthcare sector, we follow the common law duty of confidence, which means that where identifiable information about you has been given in confidence, it should be treated as confidential and only shared for the purpose of providing direct healthcare. We will protect your information, inform you of how your information will be used, and allow you to decide if and how your information can be shared.
We take security measures to protect your personal data storage. We ensure the information is kept in secure locations, restrict access to information to authorised personnel only and protect personal and confidential information held on equipment, such as laptops, with encryption (which masks data so that unauthorised users cannot see or make sense of it). We ensure external data processors that support us are legally and contractually bound to operate and prove security arrangements are in place where data that could or does identify a person are processed.
Analytics
Like most websites, we make use of analytics software to help us understand the trends in popularity of our website and of different sections. We make no use of personally identifiable information in any of the statistical reports we use from this package. We use an analytics package called Google Analytics who provide details of their privacy policy on the Google website.
Website technical details
We use electronic forms on our website making use of an available ‘forms module’ which has built-in features to help ensure privacy. We also aim to use secure forms where appropriate.
In compliance with EU legislation, the following lists the use of cookies on this web site:
-
AcceptCookies: this is used to store whether you have agreed to receive cookies. Persistent for one year.
-
Google Analytics: these cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
-
Cookies are small. We do not make use of cookies to collect any private or personally identifiable information. The technical platform of this website uses cookies solely to aid the proper technical functioning of the website. The cookies used contain random strings of characters alongside minimal information about the state and session of the website – which in no way collects or discloses any personal information about you as a visitor.
-
Advanced areas of this site may use cookies to store your presentation preferences in a purely technical fashion with no individually identifiable information.
-
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org
-
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout
Complaints
If you have a complaint regarding the use of your personal data then please contact us by writing to the Data Controller at rachel@rachelreesnutrition.com. If your complaint is not resolved to your satisfaction and you wish to make a formal complaint to the ICO, you can contact them on 01625 545745 or 0303 1231113.