Privacy Policy

1. Introduction

Susie Willsher Nutrition ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller is Susie Willsher, operating as Susie Willsher Nutrition, based in Norfolk, United Kingdom.

2. What Data We Collect

We collect personal data that you voluntarily provide to us through the following means:

Contact Form

When you submit our contact form, we collect your name, email address, and the content of your message. This data is collected on the basis of your consent and our legitimate interest in responding to your enquiry.

Newsletter

If you subscribe to our newsletter, we collect your email address. This data is collected on the basis of your explicit consent. You may unsubscribe at any time using the link provided in each email.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted through the contact form
• To send our newsletter to subscribers who have opted in
• To administer and improve our website and services
• To comply with legal obligations

4. Third-Party Services

We use the following third-party services in the operation of our website and business. Each provider processes data in accordance with their own privacy policies:

• Resend— We use Resend to deliver contact form submissions and newsletter emails. Your name and email address are shared with Resend for this purpose.
• Vercel— Our website is hosted on Vercel. Vercel may collect anonymised analytics data such as page views, device type, and geographic region. Vercel Analytics is cookieless and does not track individual users.
• Practice Better— We use Practice Better for appointment bookings and client management. When you book a consultation through Practice Better, your data is processed in accordance with their privacy policy. We encourage you to review their terms before booking.

5. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy. Specifically:

• Contact form submissions are retained for up to 12 months after your enquiry has been resolved, unless an ongoing professional relationship is established.
• Newsletter subscriber data is retained until you unsubscribe or request deletion.
• Client records relating to nutritional therapy consultations are retained for a minimum of 7 years in accordance with professional and legal requirements.

6. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access— You may request a copy of the personal data we hold about you.
• Right to rectification— You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure— You may request that we delete your personal data, subject to any legal obligations requiring us to retain it.
• Right to data portability— You may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to restrict processing— You may request that we limit how we use your data in certain circumstances.
• Right to object— You may object to our processing of your personal data where we rely on legitimate interests as our legal basis.

To exercise any of these rights, please contact us at info@susiewillshernutrition.com. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed. You can contact the ICO at ico.org.uk.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS to ensure data transmitted between your browser and our servers is encrypted.

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.