Privacy Policy

Last updated: October 2026

The UK Diabetes Dietitian (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, www.theukdiabetesdietitian.com, contact us, or use our dietetic services.

We process personal information in accordance with applicable UK data protection legislation, including the UK GDPR and Data Protection Act 2018.

1. Who we are

The UK Diabetes Dietitian is the data controller responsible for your personal information.

Business name: The UK Diabetes Dietitian
Website: www.theukdiabetesdietitian.com
Email: heather@theukdiabetesdietitian.com
Telephone: 07886 419 497
Business address: 999 Medical Centre, 999 Finchley Road, London NW11 7HB

If you have any questions about how we handle your personal information, please contact us using the details above.

2. Information we collect

Depending on how you interact with us, we may collect the following information:

Contact information

Name
Email address
Telephone number
Information you provide when contacting us through our website contact form

Health and dietary information

When you enquire about or receive dietetic services, we may collect information relevant to your care, which may include:

Health and medical information
Dietary information and eating habits
Information about allergies and intolerances
Information about medications or supplements where relevant to your nutritional care
Information about your health and nutrition goals
Other information that you choose to share with us as part of your care

Health information is considered special category personal data under UK data protection law and is handled with additional care and appropriate safeguards.

Payment and appointment information

Where applicable, we may process information relating to:

Appointments and consultation arrangements
Payments and transactions
Information required to arrange appointments through Calendly
Payment information processed through Stripe

We do not normally store your full payment card details ourselves. Payment information is processed securely by our payment provider.

Website and technical information

When you visit our website, we may collect information about how you use the website, including information such as:

IP address
Browser and device information
Pages visited
Approximate location
Website usage and interaction data

We count visits to our website ourselves, without cookies, to understand how it is used and to improve it (see section 8).

3. How we use your information

We may use your personal information to:

Respond to enquiries and messages
Arrange and manage consultations
Provide dietetic and nutritional services
Understand your health and dietary needs
Communicate with you about your care
Process payments
Send appointment-related information
Maintain appropriate professional and business records
Improve our website and services
Send newsletters or other marketing communications where you have provided the appropriate consent
Meet legal, regulatory and professional obligations
Protect the security of our website, systems and services

We will only use your personal information where we have an appropriate lawful basis to do so. In particular:

To provide your care, arrange appointments and take payment: this is necessary for our contract with you, or to take steps at your request before entering into one.
To keep professional and business records: this is necessary to meet our legal and regulatory obligations.
To send newsletters and marketing emails: we rely on your consent, which you can withdraw at any time.
To answer enquiries, improve our website and keep it secure: this is in our legitimate interests, and we balance those interests against your rights.

4. Health and medical information

Because we provide dietetic services, we may need to process information about your health, medical history and dietary needs.

This information is used only where necessary to provide appropriate dietetic support, manage your care, communicate with you and meet our professional and legal obligations.

We process health information because it is necessary for the provision of health care by a registered health professional who is bound by a duty of confidentiality (UK GDPR Article 9(2)(h), and the Data Protection Act 2018, Schedule 1, paragraph 2).

We take particular care with health information and limit access to information to what is reasonably necessary.

5. Communication

We may communicate with you by:

Email
Telephone
WhatsApp, where appropriate and where you choose to use this method

Please be aware that electronic communications, including WhatsApp, may carry risks that are outside our control. We will take reasonable steps to protect your information, but you should avoid sending highly sensitive information by ordinary email or messaging unless this has been agreed as an appropriate method of communication.

6. Third-party services

We use selected third-party providers to help operate our practice and website. These may include:

Practice Better – client management, appointments, communications, health and dietary information, and dietetic records.
Calendly – to arrange and manage appointments.
Stripe – to process payments securely.
Mailchimp – to manage newsletters and marketing communications where you have subscribed.
Cloudflare – to host our website and to protect our forms from spam. Cloudflare sees your IP address and browser details when you visit the website or use a form. Cloudflare also stores the details you send us through the website’s forms.

These providers may process personal information on our behalf. We take reasonable steps to ensure that appropriate contractual and data-protection safeguards are in place.

7. Marketing communications

If you choose to subscribe to our newsletter or marketing communications, we may use your name and email address to send you information about our services, resources, news or other relevant content.

If you request one of our free guides, we will also add you to our newsletter. You can unsubscribe at any time.

You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us.

We will not send direct marketing emails to individuals without an appropriate lawful basis and, where required, consent under applicable electronic marketing rules.

8. Cookies and analytics

Our website sets no cookies of its own and stores nothing in your browser. There is no tracking pixel and no advertising network.

We count visits ourselves, on our own website hosting, so that we know how the website is doing. To tell one visitor from another within a single day, the server makes a code from your IP address and browser type using a secret that changes every day and is then discarded. The code cannot be turned back into your address and cannot recognise you the next day; your IP address itself is not stored. Individual records are deleted within seven days, and what we keep is totals: which pages were viewed, which site or app a visit came from, country, device type, and which links were tapped. If your browser sends the Global Privacy Control or Do Not Track signal, your visit is not counted at all.

If you open our booking calendar, it is provided by Calendly, which may set its own cookies. Calendly’s own privacy notice explains how it uses them.

You can also control or delete cookies through your browser settings.

9. How we protect your information

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

10. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide your care, maintain appropriate professional records, comply with legal and regulatory requirements, resolve disputes and establish or defend legal claims.

The length of time we retain information will depend on the type of information and the circumstances in which it was collected.

We will not sell or rent your personal information.

We may share information where necessary with:

Service providers who help us operate our business, such as Practice Better, Calendly, Stripe, Mailchimp and Cloudflare
Professional advisers where necessary
Healthcare professionals or other professionals where appropriate and lawful, including where you have asked us to share information or where this is necessary for your care
Relevant authorities where we are legally required to do so

We will only share information that is reasonably necessary for the relevant purpose.

12. International transfers

Some of the third-party services we use may process personal information outside the UK.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection law and that appropriate safeguards are in place, such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework. You can contact us for more information about these safeguards.

13. Your rights

Depending on the circumstances, you may have rights under UK data protection law, including the right to:

Request access to the personal information we hold about you
Ask us to correct inaccurate or incomplete information
Ask us to erase your personal information in certain circumstances
Ask us to restrict how we use your information in certain circumstances
Object to certain processing
Request the transfer of certain information to another organisation
Withdraw consent where we rely on consent to process your information

These rights are subject to certain legal exceptions and may not apply in every situation.

If you would like to exercise one of these rights, please contact us using the details provided above.

Where we rely on your consent to process your personal information, you can withdraw your consent at any time.

Withdrawing consent will not affect the lawfulness of any processing carried out before you withdrew your consent.

15. Complaints

If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Further information about making a complaint is available on the ICO’s website, ico.org.uk/make-a-complaint (opens in a new tab), or by calling the ICO helpline on 0303 123 1113.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, the way we process personal information or changes in applicable legislation.

Any updated version will be published on this page with a revised “Last updated” date.

17. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact:

The UK Diabetes Dietitian
Email: heather@theukdiabetesdietitian.com
Telephone: 07886 419 497
Address: 999 Medical Centre, 999 Finchley Road, London NW11 7HB