Privacy notice

Who we are

This notice explains how Nutrition1st LTD ("Nutrition First", "we", "us") collects and uses your personal information when you use our website or our services. We are a company registered in England, company number 11647430. Our registered office is Room 241, 25 Wilton Road, London SW1V 1LW.

We are the data controller for your information and we are registered with the Information Commissioner's Office (ICO). For any privacy question or request, email info@nutritionfirst.life.

What information we collect

• Contact details – your name, email address and phone number, when you contact us, book with us or subscribe.
• Messages – what you write to us through the contact form or by email.
• Health and lifestyle information – if you become a client, the information you give us for your consultation, such as your health history, eating habits, goals, and body composition results from an InBody scan.
• Information about children – some of our services are for families. When a child takes part, we collect only what we need, from their parent or guardian.
• Payment records – what you bought and when you paid. We never see or store your card details.
• Website technical data – when you visit the website, our hosting provider records technical details such as your IP address and browser type.

Please don't send medical details through the website contact form. We'll talk about your health at your consultation.

How we use it, and why we're allowed to

• To reply to you and arrange appointments – because you asked us to (steps before a contract).
• To provide your consultation, nutrition plan and follow-up – to carry out our agreement with you.
• Health information – with your explicit consent, which we ask for before your first consultation. You can withdraw it at any time, but we may then be unable to continue your care.
• To send news and nutrition tips – only if you subscribe. Every email lets you unsubscribe.
• To keep business, tax and accounting records – because the law requires it.
• To keep the website secure and working – in our legitimate interests.

We don't sell your information, and we don't use it for advertising.

Who we share it with

We use a small number of trusted services to run the business. Each one handles your information only on our instructions:

• Netlify (USA) – hosts this website and receives contact and subscribe form submissions, which are then emailed to us. Netlify privacy policy
• Microsoft 365 – our email and client records. Microsoft privacy statement
• Jotform – our electronic intake form and questionnaire, with data stored in the EU. This is optional: tell us if you'd rather not use it. Jotform privacy policy
• InBody (InBody Europe B.V., Netherlands) – body composition results and the InBody app, with data stored in the EU. This is optional: we can take measurements without InBody keeping your data. InBody privacy policy
• Payments – card payments are handled by the payment provider and direct debits by our bank, Tide. We never receive your card details.

If a blood, pathology or DNA test is part of your care, we'll explain who processes the sample and results before you agree to it.

We may also share information if the law requires it, for example with a court or the police when they have proper authority, or if we need it to protect someone's safety.

Information stored outside the UK

Some of these services store or process data outside the UK, in the EU or the USA. When that happens, it is protected by the provider's data protection terms, which include the safeguards the law requires for international transfers.

Cookies

This website doesn't use cookies, analytics or advertising trackers, so we don't ask for cookie consent. If that ever changes, we'll update this notice and ask for your consent first where the law requires it.

How long we keep it

• Enquiries that don't lead to a booking – up to 12 months.
• Client records – for as long as we need them to provide your care, and afterwards for as long as needed for legal, insurance and professional requirements. Then we delete them securely.
• Financial records – 6 years, as tax law requires.
• Mailing list – until you unsubscribe.
• Job applications – up to 3 years.

How we keep it safe

The website is served only over an encrypted connection (HTTPS). Client information is kept in password-protected accounts that only we can access, and we ask our service providers to protect it to the same standard.

Your rights

You have the right to:

• get a copy of the information we hold about you;
• ask us to correct it, delete it, or limit how we use it;
• object to how we use it;
• receive it in a format you can take to another provider;
• withdraw your consent at any time.

To use any of these rights, email info@nutritionfirst.life. We'll check your identity first, and we'll reply within one month. It's free in most cases.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.