Privacy Policy

Introduction

 Welcome to the LØV Nutrition Privacy Policy Notice: Through use of our servicesand website with address https://lovnutrition.co.uk LØV Nutrition holds information about you. This document outlines how that information is used, who we may share that information with and how we keep it secure. This notice does not provide exhaustive detail. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to enquiries@lovnutrition.co.uk.

Data Controller: LØV Nutrition is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

ICO Registration: LØV Nutrition is registered to process data under the Data Protection Act 1998 with ICO registration ZB539438.

Purpose of this Privacy Notice: When you provide us with Personal Data in order to engage with us and/or benefit from our activities and services, we will keep a record of the data you give to us in order to enable us to comply with our statutory obligations and to achieve our operational activities. Everyone has rights with regard to how their Personal Data is handled by organisations. LØV Nutrition is committed to ensuring that Personal Data is properly and securely managed in accordance with the relevant data protection laws, and believes this is an important part of achieving trust and confidence between us and those with whom we interact. Please read this Notice to understand how we use and protect the information that you provide to us or that we obtain or hold about you, and to understand what your rights are in relation to information that we hold. 

 Last review: We keep our Privacy Notice under regular review. This Privacy Notice was last reviewed in April 2023.

What we do

LØV Nutrition provides nutritional therapy services to clients to improve their health through diet and lifestyle interventions. We focus on preventative healthcare, the optimisation of physical and mental health and chronic health conditions. Through nutritional therapy consultations, dietary and lifestyle analysis and biochemical testing, we aim to understand the underlying imbalances of your health issues which we will seek to address through personalised dietary therapy, nutraceutical prescription (supplements) and lifestyle advice. 

How we obtain your personal data

Information provided by you: You provide us with personal data in the following ways: 

• By using our website 
• Through email, over the telephone or by post 
• By completing a nutritional therapy questionnaire 
• By signing a terms of engagement form 
• During a nutritional therapy consultation 
• By making payments

Information we get from other sources: We may obtain sensitive medical information in the form of test results from biochemical testing companies. We use this information in order to provide you with direct healthcare.

We may obtain sensitive information from other healthcare providers. The provision of this information is subject to you giving us your express consent. If we do not receive this consent from you, we will not be able to coordinate your healthcare with that provided by other providers which means the healthcare provided by us may be less effective. 

The data we collect about you

The categories of personal data we collect and hold about may include the following
information: 

• Identity and contact data – such as name, address, contact details and next of kin 
• Enquiry & transaction data – Details of contact we have had with you such as referrals and appointment requests, bank details 
• Usage data – information about your current engagement with LØV Nutrition’s activities, services, events including how you use our website, products and services.
• Technical data – information we collect through your use of our Website such as IP address including, where available, your web browser type and version, time zonemsetting and location, operating system and platform, login data, other technology on the devices you use to access our Website. Other information is collected e.g. which web pages you have visited, using cookies and web beacons, which you can read more about in Section 10.
• Marketing and communications data – this includes your marketing preferences from us and third parties and your communications preferences, and other information which you chose to provide to us when communication with us.
• Special category data – Sensitive Data: Health information including your previous medical history, referrals, dietary, lifestyle, supplement and medication details, biochemical test results, clinic notes and health improvement plans, GP contact information. 

How we use your personal data and the lawful basis for processing it

We act as a data controller for use of your personal data to provide direct healthcare. We also act as a controller and processor in regard to the processing of your data from third parties such as testing companies and other healthcare providers. The lawful basis for processing your personal data under Article 6 of the UK GDPR is for the performance of a contract with you, and legitimate business interests, and under Article 9 (sensitive personal data) the lawful basis for processing your data is by your express consent. 

We act as a data controller and processor in regard to the processing of payments and the lawful basis for processing this is legitimate business interests. 

We may use your personal data where there is an overriding public interest in using the information e.g. in order to safeguard an individual, or to prevent a serious crime. Also where there is a legal requirement such as a formal court order. The lawful basis for processing is where there is a vital interest and or it is necessary to comply with a legal obligation. 

We may use your data for marketing purposes such as newsletters but this would be subject to you giving us your express consent.

Who will we share your information with?

We will keep information about you confidential. We will only disclose your information with other third parties with your express consent with the exception of the following categories of third parties: 

• Our registrant body, the CNHC, and our professional association, BANT, for the processing of a complaint made by you. 
• Any contractors and advisors that provide a service to us or act as our agents on the understanding that they keep the information confidential. 
• Anyone to whom we may transfer our rights and duties under any agreement we have with you 
• Any legal or crime prevention agencies and/or to satisfy any regulatory request (eg, CNHC, BANT) if we have a duty to do so or if the law allows us to do so. 

We may share your information with supplement companies and biochemical testing companies as part of providing you with direct healthcare. We will not include any sensitive information. 

 We will seek your express consent before sharing your information with your GP or other healthcare providers. However, if we believe that your life is in danger then we may pass your information onto an appropriate authority (such as the police, social services in the case of a child or vulnerable adult, or GP in case of self-harm) using the legal basis of vital interests. 

We may share your case history in an anonymised form with our peers for the purpose of professional development. This may be at clinical supervision meetings, conferences, online forums, and through publishing in medical journals, trade magazines or online professional sites. We will seek your explicit consent before processing your data in this way.

How long will we keep your information?

Following completion of your healthcare we retain your personal data for the period defined by our professional association BANT and registrant body, the CNHC (namely: for adults – 8 years from the date of the client’s last visit; children – until his or her 25th birthday unless the client was 17 at the last consultation in which case files and additional records should be kept until their 26th birthday). This enables us to process any complaint(s) you may make. In this case the legal basis of our holding your personal data including sensitive data is for the performance of a contract and legal obligation (UK GDPR, Article 6, (b) and (c)) and for legal claims or judicial acts (UK GDPR, Article 9 (f)). 

What are your rights over the data?

Every individual has the right to see, amend, delete or have a copy of data held that can identify you, with some exceptions. You do not need to give a reason to see your data. 

 If you want to access your data you must make a subject access request in writing to joanne@lovnutrition.co.uk. Under special circumstances, some information may be withheld. We shall respond within 20 working days from the point of receiving the request and all necessary information from you. Our response will include the details of the personal data we hold on you including:

•  Sources from which we acquired the information. 
• The purposes of processing the information. 
• Persons or entities with whom we are sharing the information.

You have the right, subject to exemptions, to ask to:

• Have your information deleted
• Have your information corrected or updated where it is no longer accurate
• Ask us to stop processing information about you where we are not required to do so by law or in accordance with the BANT and CNHC guidelines.
• Receive a copy of your personal data, which you have provided to us, in a structured, commonly used and machine readable format and have the right to transmit that data to another controller, without hindrance from us.
• Object at any time to the processing of personal data concerning you.

We do not carry out any automated processing, which may lead to automated decision based on your personal data.

If you would like to invoke any of the above rights then please email Data Controller at joanne@lovnutrition.co.uk

What safeguards are in place to ensure data that identifies you is secure?

We undertake at all times to protect your personal data, including any health and contact details, in a manner which is consistent with our duty of professional confidence and the requirements of the UK General Data Protection Regulation (UK GDPR) concerning data protection. We will also take reasonable security measures to protect your personal data storage. 

Website technical details – Forms/Cookies