Privacy Policy

Juliana Gedney Nutrition (“we",“us”) collects and manages personal information as part of providing nutritional therapy services. This Privacy Policy explains what information we collect, how we use it, how we keep it secure, and your rights under UK GDPR.

We keep this Policy under regular review.

Last updated: November 2025.

1. What We Do

Juliana Gedney Nutrition (“we”,“us”) provides one-to-one nutritional therapy services using a functional medicine and personalised nutrition approach. This may include support with digestion, energy, metabolic health, hormones, immune function, cognitive wellbeing, and general health concerns.

We deliver this through clinical consultations, dietary and lifestyle assessment, analysis of nutritional status, interpretation of laboratory testing (where appropriate), and the creation of personalised nutrition and lifestyle recommendations.

2. How We Obtain Your Personal Data

Information you provide directly

You may provide personal data through:

completing an intake questionnaire
completing forms within your onboarding documents
signing the Client Agreement
attending consultations (online or written follow-up)
email or written communication
submitting a Food & Lifestyle Diary
making payments via GoCardless or Stripe

Payment data is processed under the lawful basis of “performance of contract.”

This may include:

contact details (name, address, email, telephone)
date of birth
GP information
next of kin
health history
medication and supplement use
lifestyle information
laboratory test results
consultation notes
payment information (handled securely by GoCardless/Stripe — not stored by us)

We use this information to provide direct healthcare.

The legal basis for this processing is legitimate interest and, for special category (health) data, provision of healthcare.

Information received from others

We may receive:

biochemical test results from laboratory testing companies
relevant medical or health information from other healthcare providers (only with your explicit consent)

We use this information to support your care.

3. How We Use Your Personal Data

We act as the data controller for personal data used to deliver direct healthcare, and as data processor when handling information from testing companies or other providers.

We process your information to:

provide nutritional therapy services
evaluate health concerns
create personalised plans
manage your consultations
maintain accurate clinical records
provide access to your digital programme materials (Xperiencify and Google Drive)
manage payments and programme administration

We may also process your data:

where required by law
where necessary in the public or vital interest (e.g., safeguarding)
for newsletters or marketing only with your explicit consent

We do not use your data for automated profiling or decision-making.

4. Sharing Your Information

Your information is kept confidential.

We only share information with your consent or when legally required.

We may share information with:

biochemical testing companies (e.g., laboratories)
supplement providers (basic order information only)
other healthcare providers (only with your explicit consent unless vital interests apply)
professional bodies (BANT, CNHC) only in the event of a complaint
contractors or service providers who support administrative systems, including:
- GoCardless (Direct Debit payments)
- Stripe (one-off payments)
- Google Workspace (email, Drive storage)
- Xperiencify (programme delivery)
- Calendly (scheduling)
- secure online forms (e.g., Jotform/Google Forms)

All third-party processors used by us have their own GDPR-compliant privacy policies and security controls.

Payment processors handle bank details directly. We do not store or process your bank or card information.

We may share anonymised case information for professional development, supervision, or publication, but never in a way that identifies you.

Where there is concern about risk of harm, we may share information under the lawful basis of vital interests.

5. Your Rights

Under UK GDPR, you have the right to:

access your data
request corrections
request deletion (subject to clinical record-keeping obligations)
restrict or object to processing
request transfer of your data to another provider
withdraw consent for non-essential processing (e.g., newsletters)

To exercise these rights, email: info@jgnutri.com. We will respond within one month, in line with UK GDPR requirements.

6. Data Security

We store your information securely and restrict access to authorised personnel only.

Safeguards include:

encrypted devices
password-protected systems
secure clinical record storage
secure cloud-based platforms (Google Workspace)
contractual agreements with external processors
regular data reviews

We use two-factor authentication (2FA) wherever available.

We follow UK GDPR and the common law duty of confidentiality.

We are registered with the Information Commissioner’s Office (ICO) as a Data Controller.

7. Data Retention

We retain client records for the duration required by our professional bodies (BANT and CNHC). This ensures continuity of care and supports processing of any complaints.

If you work with us again in the future, your previous records help ensure continuity of care.

8. Website & Cookies

Our website uses essential cookies required for technical function, and may use analytics cookies (e.g., Google Analytics) to understand how visitors use our site.

Our website may display a cookie consent banner where you can choose which cookies to allow.

No personally identifiable information is collected via cookies.

You can manage cookies via your browser settings.

9. Analytics

We use Google Analytics to analyse website use.

This anonymised data helps us improve website performance.

No personally identifiable information is used for analytics reports.

10. Complaints

If you have concerns about how your data is handled, please contact:

Data Controller

Juliana Gedney Nutrition

Court Lodge Farm

Hook Green Road

Southfleet

Kent

DA13 9NQ

or email: info@jgnutri.com

If unresolved, you can escalate your concern to the Information Commissioner’s Office(ICO).