Privacy Policy

Juliana Gedney Nutrition (“we",“us”) collects and manages personal information as part of providing nutritional therapy services. This Privacy Policy explains what information we collect, how we use it, how we keep it secure, and your rights under UK GDPR.

We keep this Policy under regular review.

Last updated: May 2026.

1. What We Do

Juliana Gedney Nutrition (“we”,“us”) provides one-to-one nutritional therapy services using a functional medicine and personalised nutrition approach. This may include support with digestion, energy, metabolic health, hormones, immune function, cognitive wellbeing, and general health concerns.

We deliver this through clinical consultations, dietary and lifestyle assessment, analysis of nutritional status, interpretation of laboratory testing (where appropriate), and the creation of personalised nutrition and lifestyle recommendations.

2. How We Obtain Your Personal Data

Information you provide directly

You may provide personal data through:

completing an intake questionnaire
completing forms within your onboarding documents
signing the Client Agreement
attending consultations (online or written follow-up)
email or written communication
submitting a Food & Lifestyle Diary
making payments via GoCardless or Stripe

Payment data is processed under the lawful basis of “performance of contract.”

This may include:

contact details (name, address, email, telephone)
date of birth
GP information
next of kin
health history
medication and supplement use
lifestyle information
laboratory test results
consultation notes
payment information (handled securely by GoCardless/Stripe — not stored by us)

We use this information to provide direct healthcare.

The legal basis for this processing is legitimate interest and, for special category (health) data, provision of healthcare.

Information received from others

We may receive:

biochemical test results from laboratory testing companies
relevant medical or health information from other healthcare providers (only with your explicit consent)

We use this information to support your care.

3. How We Use Your Personal Data

We act as the data controller for personal data used to deliver direct healthcare, and as data processor when handling information from testing companies or other providers.

We process your information to:

provide nutritional therapy services
evaluate health concerns
create personalised plans
manage your consultations
maintain accurate clinical records
provide access to your digital programme materials (Xperiencify and Google Drive)
manage payments and programme administration

We may also process your data:

where required by law
where necessary in the public or vital interest (e.g., safeguarding)
for newsletters or marketing only with your explicit consent

We do not use your data for automated profiling or decision-making.

4. Sharing Your Information

Your information is kept confidential.

We only share information with your consent or when legally required.

We may share information with:

biochemical testing companies (e.g., laboratories)
supplement providers (basic order information only)
other healthcare providers (only with your explicit consent unless vital interests apply)
professional bodies (BANT, CNHC) only in the event of a complaint
contractors or service providers who support administrative systems, including:
- GoCardless (Direct Debit payments)
- Stripe (one-off payments)
- Google Workspace (email, Drive storage)
- Xperiencify (programme delivery)
- Calendly (scheduling)
- secure online forms (e.g., Jotform/Google Forms)

All third-party processors used by us have their own GDPR-compliant privacy policies and security controls.

Payment processors handle bank details directly. We do not store or process your bank or card information.

We may share anonymised case information for professional development, supervision, or publication, but never in a way that identifies you.

Where there is concern about risk of harm, we may share information under the lawful basis of vital interests.

5. Your Rights

Under UK GDPR, you have the right to:

access your data
request corrections
request deletion (subject to clinical record-keeping obligations)
restrict or object to processing
request transfer of your data to another provider
withdraw consent for non-essential processing (e.g., newsletters)

To exercise these rights, email: info@jgnutri.com. We will respond within one month, in line with UK GDPR requirements.

6. Data Security

We store your information securely and restrict access to authorised personnel only.

Safeguards include:

encrypted devices
password-protected systems
secure clinical record storage
secure cloud-based platforms (Google Workspace)
contractual agreements with external processors
regular data reviews

We use two-factor authentication (2FA) wherever available.

We follow UK GDPR and the common law duty of confidentiality.

We are registered with the Information Commissioner’s Office (ICO) as a Data Controller.

7. Data Retention

We retain client records for the duration required by our professional bodies (BANT and CNHC). This ensures continuity of care and supports processing of any complaints.

If you work with us again in the future, your previous records help ensure continuity of care.

8. Keto Clarity Collective — Community and Challenges

This section covers data processing activities specific to the Keto Clarity Collective (KCC), my free Facebook community and paid challenge programme.

What data we collect

When you sign up for the KCC community or a challenge, we collect:

Name and email address (provided at sign-up)
WhatsApp number (for challenge participants who join the WhatsApp accountability group)
Health confirmation data submitted via the sign-up health waiver (confirmation that contraindications do not apply)
Payment information for the Connector upgrade (£9) — processed securely by Connector and/or Stripe; we do not store card details

Why we collect it

We use this data to administer the challenge and community, including to send daily WhatsApp messages and emails during the challenge period, to deliver digital resources via Connector, to verify that participants have completed the health waiver, and to process payments for the Challenge upgrade. The legal basis for challenge communications is consent, which you provide via the sign-up form checkboxes. The legal basis for payment processing is performance of contract.

How long we keep it

Challenge sign-up and communications data is retained for 12 months after the end of the challenge to which it relates, after which it is deleted or anonymised. If you have also consented to receive marketing communications, your email address will be retained on our marketing list until you unsubscribe. You can unsubscribe at any time using the link in any email.

WhatsApp group

Challenge participants who join the WhatsApp group should be aware that WhatsApp is operated by Meta Platforms Inc. and is subject to WhatsApp’s own Privacy Policy (available at whatsapp.com/legal/privacy-policy). Your phone number will be visible to other members of the group. We recommend using WhatsApp only if you are comfortable with this. You can leave the group at any time.

Facebook community

The Keto Clarity Collective Facebook group is hosted on the Facebook platform, operated by Meta Platforms Inc. Membership of and activity within the group is subject to Meta’s Privacy Policy (available at facebook.com/privacy/policy). We do not control how Meta processes data shared on its platform. We recommend reviewing Meta’s Privacy Policy before joining the group.

Third-party processors used for the KCC

In addition to the processors listed in Section 4, the following third-party platforms are used in the delivery of the KCC community and challenges:

Connector (sign-up forms and payment processing for the Connector upgrade)
Stripe (payment processing — card details are handled directly by Stripe and are not stored by us)
Meta (Facebook group hosting and WhatsApp group messaging) — subject to Meta’s own Privacy Policy
Wix (challenge sign-up landing page hosting)

All third-party processors have their own GDPR-compliant privacy policies. We recommend reviewing these where relevant.

Testimonials and community content

If you share a testimonial or outcome during or after the challenge and give your permission for it to be used in our marketing materials, we will only do so with your explicit consent. You may withdraw this consent at any time by emailing info@jgnutri.com. We will never publish identifying information without your permission.

Important note

Participation in the KCC community or any challenge does not constitute a therapeutic relationship and does not replace individual nutritional therapy or medical advice. The challenge is an educational and community experience.

If you have individual health concerns, please seek advice from a qualified healthcare professional.

9. Website & Cookies

Our website uses essential cookies required for technical function, and may use analytics cookies (e.g., Google Analytics) to understand how visitors use our site.

Our website may display a cookie consent banner where you can choose which cookies to allow.

No personally identifiable information is collected via cookies.

You can manage cookies via your browser settings.

10. Analytics

We use Google Analytics to analyse website use.

This anonymised data helps us improve website performance.

No personally identifiable information is used for analytics reports.

11. Complaints

If you have concerns about how your data is handled, please contact:

Data Controller

Juliana Gedney Nutrition

Court Lodge Farm

Hook Green Road

Southfleet

Kent

DA13 9NQ

or email: info@jgnutri.com

If unresolved, you can escalate your concern to the Information Commissioner’s Office(ICO).