Privacy policy

This privacy notice provides you with details of how personal data is collected and processed through your use of this website and its services. Anaïs Nutrition holds some information about you. This document outlines how that information is used, who I may share that information with and how I keep it secure. This notice does not provide exhaustive detail. However, I am happy to provide any additional information or explanation needed. Any requests for this should be sent to info@anaisnutrition.com. This Privacy Notice will be reviewed annually.

Anaïs Nutrition is registered with ICO, the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

Anaïs Lafferty is the data controller and is responsible for your personal data (also referred to as “I” or “my”).

I care about protecting your data and ensuring it is up to date. Please let me know if at any time your personal information changes by emailing me at info@anaisnutrition.com.

Personal data means any information capable of identifying an individual. It does not include anonymised data. By providing me with your data, you guarantee that you are over 16 years of age.

Data collection

Across the www.anaisnutrition.com website there are opportunities to supply your details to opt-in to marketing communications. There is no obligation to opt-in.

When you use www.anaisnutrition.com to pay for a service you will be sent a document for you to complete including your personal data.

To purchase services, you may be asked to provide details to third-party payment service providers. I am not responsible for how they process and use your data.

I may use your data to deliver relevant website content and advertisements to you (including social media adverts or other display advertisements) and to measure or understand the effectiveness of the advertising. I may also use such data to send other marketing communications to you. My lawful ground for this processing, under GDPR, is legitimate interests which is to grow my business. 

Ways in which your data is collected

  • You may provide the data directly to me (for example by filling in forms on this site, by sending me an email).

  • Certain data may be collected from you as you use this website by using cookies and/or similar technologies.

  • Data may be received from third parties such as Google, social media, advertising, search information providers, providers of technical, payment and delivery services, such as data brokers or aggregators.

All data collected, through whichever source, will comply with GDPR law.

Sensitive Data

If you book for a private nutritional consultation, I will need to collect sensitive data about you in order to process your agreement and deliver the services to you.

On submission of the questionnaire prior to the initial consultation, you will be asked to sign a disclaimer and provide personal details that I am required to collect by law. If you do not provide me with that data when requested, I may not be able to perform the contract (deliver services to you). If you don’t provide the requested data, I reserve the right to cancel the services and will notify you on doing so.

Your personal data will be used for the purpose it was collected or a reasonably compatible purpose such as stated in the above section (data collected). If your details are required for unrelated, new purpose(s) I will let you know and explain the legal grounds for processing.

I may process your personal data without your knowledge or consent where this is required or permitted by law.

Disclosures of your personal data

I may have to share your personal data with the parties set out below:

  • Service providers who provide IT and system administration services.

  • Professional advisers including lawyers, bankers, auditors and insurers

  • Government bodies that require me to report processing activities.

  • Third parties to whom I sell, transfer, or merge parts of my business or assets.

All third parties to whom your data is transferred is required to respect the security and treat your personal data in accordance with the law.

Third Parties

This website may contain hyperlinks to third party websites, plug-ins and applications, including the websites of any partners, advertisers and affiliates.

These websites operate fully independently from Anaïs Nutrition, and I cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources.

The appearance of such links on my website is not an endorsement.

Should you use any of these websites, such use is at your own risk and I would strongly advise that you review their respective privacy policies.

Data security

Security measures are in place to prevent your data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. Access to your personal data is only granted to those who have a business need. They will only process your personal data on my instructions, and they must keep it confidential. 

Data retention and access

Your personal data will be retained for as long as necessary to fulfill the purposes it was collected for, including satisfying any legal, accounting or reporting requirements, and in accordance with GDPR.

For tax purposes, the law requires me to keep basic information about my clients (including contact, identity, financial and transaction data) for seven years after they stop being clients. For regulation purposes with BANT, I am required to store data for eight years or eight years after their eighteenth birthday if the client is under eighteen when seeing me in my clinic.

Under data protection laws, and in relation to your personal data, you have rights to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.

If you wish to exercise any of the rights set out above, please email info@anaisnutrition.com.

Marketing communications

The lawful ground of processing your personal data to send you marketing communications is either your consent or my legitimate interests (namely to grow my business). However, you can still opt out of receiving marketing emails at any time.

You can ask me or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message or by emailing info@anaisnutrition.com.

If you opt-out of receiving marketing communications this opt-out does not apply to personal data provided as a result of other transactions, such as purchases.

Nutrition clients:

The information I collect about you and why I collect it.

I will collect relevant personal and medical information about you, including: name, date of birth, age, address, telephone number, email address, sex, marital status, children, occupation, height, weight, waist circumference, and GP contact details.

I may also collect copies of test results, your medical history, and your current state of health as well as any relevant medical letters.

I collect this information to facilitate your consultation and offer naturopathic nutrition advice.

I will process this information on the basis of your explicit consent only.

How long I keep your personal information.

Your information will be kept for 8 years from the date of your appointment, unless you are under 18 in which case it will be kept for 8 years from the date you reach 18.

How I share your personal information.

I may share your personal information with relevant third party suppliers (for example those who provide technical support to the online clinic booking system). I may also share your information with third party testing laboratories or supplement companies, with your explicit consent.

Website Users:

Analytics

This website collects personal data to power my site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

I share this information with Squarespace, my website analytics provider, as well as Google, to learn about site traffic and activity.

Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

My website may use “cookies” to enhance your experience of it. These cookies may be set by my own websites, or by third parties whose services I use on my websites (such as Google or Squarespace). Your web browser places cookies on your hard drive for record-keeping purposes and sometimes to track information about you. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you do so, note that some parts of my website may not function properly.

I may also collect personal information from you when you register on my website, fill out a form, and in connection with other activities, services, features or resources I make available on my website. The information you may be asked for includes your name, email address, mailing address, phone number, nationality, and how you found us. You may, however, visit my website anonymously. I will collect personal information from you only if you voluntarily submit such information to me. Users can always refuse to supply personal information, except that it may prevent them from engaging in certain website related activities.

I may collect non-personal information about you whenever you interact with my website. Third parties whose services I use on my website may also collect your information. Non-personal identification information may include the browser name, the type of computer and technical information about you by means of connection to my website, such as the operating system and the internet service providers utilised and other similar information.

I will collect and use the personal information collected to run and operate my website, to improve customer service information I provide, to help me respond to your customer service requests and support needs more efficiently, and to improve my website. I may use feedback you provide to improve my products and services, and to send periodic emails.

You may provide the data directly to me (for example by filling in forms on this site, by sending me an email).

  • Certain data may be collected from you as you use this website by using cookies and/or similar technologies.

  • Data may be received from third parties such as Google, social media, advertising, search information providers, providers of technical, payment and delivery services, such as data brokers or aggregators.

All data collected, through whichever source, will comply with GDPR law.

The legal basis on which I collect and use your personal information.

You have agreed to me placing cookies by consent – by using my website you agree that I may place cookies on your computer or device (as describe above). Most web browsers allow some control of most cookies through the use of browser settings. If you want to find out more information about cookies including how to control what cookies are put on your computer or device and how to delete them then visit http://www.allaboutcookies.org/.

Other information is processed on the basis of my legitimate interests in operating my website effectively.

Your rights

You have a number of rights over your personal information, which are:

  • The right to make a complaint to the ICO if you are unhappy about the way your personal data is being used – please refer to the ICO’s website for further information about this (https://ico.org.uk/);

  • The right to ask me what personal information about you I am holding and to have access to a copy of your personal information;

  • The right to ask me to correct any errors in your personal information;

  • The right, in certain circumstances such as where my use of your personal information is based on your consent and I have no other legal basis to use your personal information, to ask me to delete your personal information;

  • The right, in certain circumstances such as where I no longer need your personal information, to request that I restrict the use that I am making of your personal information;

  • The right, in certain circumstances, to ask me to review and explain my legitimate interests to you; and

  • The right, where my use of your personal information is carried out for the purposes of an agreement with me and is carried out by automated means, to ask me to provide you with a copy of your personal information in a structured, commonly-used, machine-readable format.

Changes to this privacy notice

This privacy policy was last updated on 20 November 2021. Please note that this privacy policy will be updated annually as a minimum.

Any changes that I make to this policy in the future will be posted on this webpage. Please check back frequently to see any updates and changes to this privacy policy.