Privacy Policy

About me

• Business name: Anna Doran Health
• HCPC Registration: DT034558
• Email: contact@annadorandiet.com
• ICO Registration: CSN1032456

Why I collect your data

I collect your personal data with your explicit consent in order to provide my independent nutrition and dietetic services to you. You may also have opted in to receive my newsletter.

Lawful basis for processing

I process your personal data under Article 6(1)(a) UK GDPR (consent). Health and dietary information is classified as special category data under Article 9 UK GDPR. I process this data on the basis of your explicit consent (Article 9(2)(a)), which you provide when booking a consultation and completing the client consent form. You may withdraw your consent at any time by contacting me.

What information I collect

• Name, date of birth, age, sex, next of kin, GP name and address, marital status, living arrangements and occupation.
• Contact details: home address, email and telephone numbers.
• Clinical and health-related information via forms, emails and verbally during a consultation. This includes dietary information, symptoms, medical history, and food diaries.
• Payment information processed securely by Stripe. I do not store your card details — these are handled entirely by Stripe in compliance with PCI DSS standards.

This information is required for

• Professional clinical record keeping of client information in accordance with the British Dietetic Association Guidance for Records and Record Keeping.
• Sharing information with relevant healthcare professionals such as your GP or medical team (your separate consent will always be obtained before this is done).

In exceptional circumstances, information about a client may be disclosed without consent if it is in the public interest to do so. This might be in circumstances where disclosing the information is necessary to prevent a serious crime or serious harm to other people.

What information is collected via this website

• When you visit this website, your browsing data may be collected anonymously to help me understand how the site is used. No data is collected which could identify an individual.
• This website uses cookies to help provide a better user experience. Please see the Cookie Policy for full details. You may disable cookies in your browser if you prefer.
• If you subscribe to the newsletter, your email address is stored securely and used only to send you regular updates. You are free to unsubscribe at any time.
• When you submit the contact form, your name, email, selected service, and message are saved securely. A notification containing these details is sent to me via Telegram, a messaging service operated outside the UK. By submitting the form, you consent to this international data transfer.

Third-party service providers

I use the following third-party services to operate my business. Each provider has their own privacy policy and data protection measures:

• Stripe — payment processing. Your card details are handled securely by Stripe and are never stored on my systems.
• MailerLite — email newsletter. Your name and email are stored to send you nutrition updates you have subscribed to.
• Telegram — I receive instant notifications of contact form submissions to respond to enquiries promptly. Telegram servers are located outside the UK.
• Contabo (server hosting) — the website and database are hosted on secure servers in Europe.

Controlling your personal information

I will not distribute, sell or lease your personal information to third parties unless I have your explicit permission or am required by law to do so.

You may request details of personal information which I hold about you under the UK General Data Protection Regulation (UK GDPR). If you believe that any information I am holding on you is incorrect or incomplete, please contact me as soon as possible and I will promptly correct it.

All service providers used to store and process information related to carrying out dietetic services have robust security procedures in place and are GDPR compliant. BDA and HCPC record-keeping guidelines are strictly adhered to for one-to-one consultations.

Data retention

Records relating to the care of a client will be stored for eight years, in line with British Dietetic Association Guidance for Records and Record Keeping. Contact form enquiries are retained for 12 months. Payment records are retained for six years in accordance with HMRC requirements.

Your rights under UK GDPR

• The right to access the personal data we hold about you (Subject Access Request).
• The right to request correction of any inaccurate data.
• The right to request deletion of your data (right to be forgotten).
• The right to restrict or object to processing of your data.
• The right to data portability.
• The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

If you are unhappy with how your data has been handled, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Data controller

I (Anna Doran, HCPC registered dietitian DT034558) am the data controller at Anna Doran Health. Please contact me at contact@annadorandiet.com with any queries or requests related to your personal data and I will respond promptly.