Privacy Policy.

Information We Collect

We collect personal information in the following circumstances:

• — Contact form submissions: name, email address, and message content when you send an enquiry through the contact form on this site.
• — Programme intake: food journal data, eating habit information, and lifestyle context that you share during the intake assessment stage of a nutrition guidance programme.
• — Usage data: anonymised technical information about your visit, including browser type, pages visited, and session duration, collected via cookies. See our Cookie Policy for details.

Lawful Basis and Purpose

We use personal information for the following purposes, on the following lawful bases:

• — Responding to enquiries (legitimate interest): contact form submissions are used solely to respond to the enquiry and arrange consultations as requested.
• — Delivering nutrition guidance programmes (contract performance): intake data and session records are used to construct and deliver the personalised guidance framework you have engaged us to provide.
• — Improving the website (legitimate interest): anonymised usage data is used to understand how the site is used and to make improvements. No individual is identifiable from this data.

We do not use your personal information for automated decision-making, profiling, or marketing communications without your explicit consent.

How Long We Keep Your Data

Contact form submissions are retained for 12 months from the date of receipt. Session records and intake data associated with a nutrition guidance programme are retained for 3 years from the close of the most recent programme, unless you request deletion earlier.

Anonymised usage data collected via cookies is retained for the period set out in our Cookie Policy. It cannot be used to identify any individual.

Your Data Rights Under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights in relation to your personal data:

• — Right of access: you may request a copy of the personal information we hold about you.
• — Right to rectification: you may request that inaccurate data be corrected.
• — Right to erasure: you may request deletion of your personal data, subject to any overriding legal obligations.
• — Right to restrict processing: you may request that we limit how we use your data in certain circumstances.
• — Right to object: you may object to processing carried out on the basis of legitimate interest.
• — Right to portability: where processing is based on consent or contract, you may request your data in a structured, machine-readable format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data Sharing and Third-Party Processors

We do not sell personal data to third parties. We may share data with the following categories of processor, under contractual data-processing agreements:

• — Hosting providers: for website infrastructure and storage.
• — Email service providers: for sending responses to contact form submissions.
• — Analytics providers: for anonymised usage data only. No personally identifiable information is shared with analytics providers.

All third-party processors are required to process data only as instructed by Talenova and to maintain appropriate technical and organisational security measures.