Northern Nutrition Academy

1. Who We Are

Northern Nutrition Academy provides education and consultations in nutrition coaching across the United Kingdom. For the purposes of UK data protection law, we are the data controller for personal data collected through this website.

Data Controller: Northern Nutrition Academy

Registered Office: 71‑75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom

Phone: +44 20 1234 5678

Email: [email protected]

2. Scope of this Policy

This Privacy Policy explains how we collect, use, store, and share personal data when you browse our website, read our content, or send us an enquiry via our forms. It also outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. The Data We Collect

Contact and enquiry data: full name, email address, phone number, programme of interest, and the message you provide, including your consent preference.
Usage and device data: pages viewed, time on page, clicks, approximate location (country/region), device type, and browser information collected through essential and analytics cookies. For details, see our Cookie Policy.
Communication preferences: records of your requests and our responses, including scheduling notes for consultations.
Operational data: internal notes required to administer courses and consultations, such as booking confirmations and dates.

We do not request or require special category data (such as health information) via this website. Please do not include sensitive information in free‑text fields.

4. How We Collect Data

Directly from you when you submit an enquiry or communicate with us.
Automatically via cookies and similar technologies when you use our website.

5. Purposes and Legal Bases

We process personal data for the following purposes under the legal bases listed below:

Responding to enquiries and providing consultations (performance of a contract or steps prior to entering into a contract).
Administering courses and service communications such as confirmations and scheduling (performance of a contract).
Improving our website and content through analytics (legitimate interests in operating and improving our services). Analytics cookies are used in line with your preferences; where required, we rely on consent.
Maintaining security, preventing misuse, and keeping records (legitimate interests and legal obligations).
Complying with law including responding to lawful requests (legal obligation).

6. Cookies and Similar Technologies

We use essential cookies to enable core site functionality and analytics cookies to understand website performance. You can manage your preferences through your browser settings and as described in our Cookie Policy.

7. Sharing Your Data

We do not sell your personal data. We may share data with trusted service providers who help us operate this website and deliver our services (for example, website hosting, email delivery, and analytics). These providers act under written contracts, process data only on our instructions, and implement appropriate security measures. We may also share data where required by law or to protect our rights, safety, or the rights and safety of others.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as approved standard contractual clauses with the UK addendum, or the destination is covered by an adequacy regulation. You may request information about relevant safeguards by contacting us.

9. Data Retention

Enquiry records: kept for up to 24 months from last contact unless you ask us to delete them sooner, subject to legal holds.
Course and consultation administration records: generally kept for up to 6 years to meet contractual and legal requirements.
Cookies and analytics data: retained according to the lifetimes set out in our Cookie Policy.

10. Your Rights

Under UK GDPR, you have the following rights, subject to conditions and exemptions:

Right of access to your personal data.
Right to rectification of inaccurate or incomplete data.
Right to erasure (the “right to be forgotten”).
Right to restrict processing.
Right to data portability.
Right to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent at any time where processing relies on consent.

To exercise your rights, please contact us using the details in the Contact Us section. We may need to verify your identity before fulfilling your request.

11. Children’s Privacy

Our website and services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us so we can delete it.

12. Security

We use technical and organisational measures appropriate to the risk, including transport encryption (HTTPS), access controls, and routine monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Complaints

If you have concerns about how we handle your data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom.

14. Third‑Party Links

Our website may contain links to other pages on this site, including our Terms of Use and Cookie Policy. This Privacy Policy applies only to pages operated by Northern Nutrition Academy.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the effective date above. We encourage you to review this page regularly.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Northern Nutrition Academy
71‑75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Phone: +44 20 1234 5678
Email: [email protected]

You may also reach us via our Contact page.