RIVACY POLICY – INDRE NUTRITION

Last updated: 19 November 2025

1. Who I Am

Indre Nutrition

Sole trader: Indre Cepliauskaite

Email: hello@indre.co.uk

Website: www.indre.co.uk

Location: United Kingdom

I am the Data Controller responsible for how your personal information is managed and protected.

2. What Information I Collect

To provide nutritional therapy and related services, I may collect:

  • Name and contact details

  • Health and lifestyle information

  • Medical history

  • Appointment and payment details

  • Consultation notes

  • Documents you upload (e.g., GP letters, test results)

This may include special category health data.

3. How Information Is Collected

Information is collected directly from you via:

  • Online forms

  • Consultations

  • Messages or emails

  • Documents you upload

Information from other practitioners is only collected with your explicit consent.

4. Why I Collect Your Information

Your data is used to:

  • Provide personalised nutrition and lifestyle support

  • Update your care plan

  • Manage appointments, invoices, and payments

  • Communicate with you when necessary

5. Legal Basis (UK GDPR)

Your personal data is processed under the following legal bases:

Article 6(1)(b): processing necessary for the performance of a contract

Article 9(2)(a): processing of special category (health) data with your explicit consent

6. How Your Information Is Kept Secure

Your information is stored using secure, encrypted, password-protected systems, including Practice Better.

Only I have access to your client records.

7. How Long Information Is Kept

Adult records: 7 years after your final appointment

Under-18s: until age 25

Financial/payment records: 6 years (legal requirement)

After this, information is securely deleted.

8. Sharing Your Information

Your information is confidential. It will only be shared:

  • With your consent

  • If required by law

  • If there is risk of serious harm

With your permission, I may share information with your GP or another practitioner.

9. Recording and Note Taking

Recordings or AI-assisted note-taking will only be used with your explicit consent.

Recordings (if used) are deleted within 48 hours.

All notes are stored securely as part of your health record.

10. Marketing

You may receive appointment reminders or service messages as part of your care.

Marketing emails are only sent if you expressly opt in.

You can unsubscribe at any time.

11. Your Rights

You have the right to:

  • Access your information

  • Request corrections

  • Request deletion (where legally possible)

  • Request restrictions on processing

  • Receive a copy of your data

  • Withdraw consent at any time

To exercise any of these rights, email hello@indre.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

12. International Transfers

Some systems used (e.g., Practice Better) may store data outside the UK.

Where this occurs, appropriate legal safeguards are in place to protect your data.

13. Cookies

If cookies are added to the website in future, a cookie notice will appear, allowing you to accept or decline.

14. Contact

If you have any concerns about your data, please contact:
hello@indre.co.uk