Privacy Policy

Last updated: 28 September 2026

This Privacy Policy explains how Sarah Todd Nutritional Therapy collects, uses, and protects your personal information when you use this website or contact me.

I am committed to protecting your privacy and handling your data in line with UK GDPR.

What information I collect

Depending on how you interact with me, I may collect:

Your name
Email address
Phone number
Information you choose to provide through my website or during an enquiry
Health and wellbeing information that you provide as part of an enquiry or consultation
Information relating to your nutritional therapy consultation and ongoing support
Relevant medical, medication, supplement, dietary or lifestyle information that you choose to provide
Information relating to bookings, payments and appointments
Information you provide through my client onboarding and consultation forms
Any other information you choose to share with me in connection with my services

Health information is considered special category data under UK data protection law and is handled with additional care and appropriate safeguards.

How I use your information

I use your information to:

Respond to enquiries and requests for information
Arrange and manage discovery calls, consultations and appointments
Provide nutritional therapy services and personalised support
Understand your health history, circumstances and nutritional needs
Communicate with you about your appointments and ongoing support
Maintain appropriate client records
Process payments where applicable
Meet relevant professional, legal and regulatory requirements
Manage and operate my business

I will only use your information for purposes that are compatible with how it was collected and where I have an appropriate lawful basis for doing so.

Lawful basis for processing

Depending on the circumstances, I may process your personal information under the following lawful bases:

Consent – for example, when you voluntarily submit information through my website or consent to receive marketing communications.
Contract – where processing is necessary to provide nutritional therapy services you have requested.
Legitimate interests – where processing is necessary for the effective and secure operation of my business and does not override your rights and interests.
Legal obligation – where I am required to retain or process information to comply with a legal requirement.

Where I process health information as part of providing nutritional therapy services, I will rely on an appropriate additional condition for processing special category data under UK GDPR, as applicable.

Data storage

I use a number of secure systems to operate my practice.

Website and enquiries: My website is hosted through Wix. Information submitted through my website, including contact and enquiry information, may be processed through Wix.

Client portal: If you become a client, I use Sanno as my client portal. Sanno is used to manage the client journey, including onboarding, consultation forms, consent, client information, records and ongoing communication where applicable.

Your information may therefore be processed and stored within Sanno as part of providing my services to you. Sanno is designed to support GDPR-compliant handling of client information and appropriate security measures.

Email: I may use email to communicate with you about enquiries, appointments and your nutritional therapy services.

I only use service providers that I consider appropriate for the nature of the information being processed and take reasonable steps to ensure your information is handled securely.

I do not sell or rent your personal information.

I may share information with third-party service providers where this is necessary to operate my practice and provide services to you, such as my website provider, client portal, email provider and payment or booking providers.

Where third-party providers process information on my behalf, I take reasonable steps to ensure appropriate data protection and security arrangements are in place.

I may also disclose information where I am legally required to do so or where necessary to protect your rights, safety or the rights and safety of others.

How long I keep your data

I retain personal information only for as long as it is necessary for the purposes for which it was collected, including any applicable legal, professional or insurance requirements.
As a general guide:
Enquiry information: may be retained for up to 12 months where no ongoing relationship is established.
Client records: retained for the period required by applicable professional, legal and insurance requirements.
Marketing information: retained until you withdraw your consent or unsubscribe, where consent is the lawful basis for processing.
Specific retention periods may vary depending on the type of information and the circumstances.

Your rights

Under UK data protection law, you may have the right to:

Request access to the personal information I hold about you
Request correction of inaccurate or incomplete information
Request deletion of your information in certain circumstances
Request restriction of processing in certain circumstances
Object to certain processing
Withdraw consent where I rely on consent as the lawful basis for processing
Request a copy of your information in a portable format in certain circumstances

Some rights are subject to legal or other applicable exemptions. For example, I may need to retain certain client records where there is a professional, legal or insurance requirement to do so.

To exercise your rights or ask a question about how your information is handled, please contact me using the details below.

Marketing

I will only send marketing communications where I have an appropriate lawful basis to do so.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided or by contacting me directly.

Cookies

My website may use cookies and similar technologies. For information about the cookies used on this website and how you can manage them, please refer to my website's cookie settings or cookie notice.

Contact

If you have any questions, please contact: sarahtodd.nutritionaltherapy@gmail.com