Privacy Policy

We respect your privacy. This notice explains what personal information we collect, how we use it, the legal bases we rely on, how long we keep it, and your rights under UK data protection law.

Who we are

Ferylife provides nutrition and health coaching services. We act as the data controller for information collected via this website and in the course of providing our services. You can contact us at [email protected].

Special category data (health information)

Where you choose to share information about your health so that we can tailor coaching, we process that information with your explicit consent and for the purpose of providing the service. You can withdraw consent at any time; this will not affect processing that has already occurred.

Information we collect

• Contact details (e.g. name, email) and information you choose to share about your goals when you enquire or book.
• Service information (e.g. appointments, preferences, notes you provide to tailor your plan).
• Website usage data (e.g. pages visited, interactions) when analytics are enabled. We do not sell your data.

Where we get your information

We collect personal information directly from you via our website, email, and during consultations. If you use our booking system or email service, limited information may also be received from those providers in order to arrange and deliver services. We do not buy data from third parties.

Legal bases for processing

We process your data based on the following legal bases:

• Contract (UK GDPR Art. 6(1)(b)): Respond to enquiries; bookings; service delivery
• Legitimate interests (Art. 6(1)(f)): Operate, secure and improve website/services
• Consent (Art. 6(1)(a)): Optional communications; analytics/cookies (where required)
• Legal obligation (Art. 6(1)(c)): Legal/audit requirements; dispute resolution
• Explicit consent (Art. 9(2)(a)): Tailoring plans using health information

How we use your information

• To answer enquiries and deliver our services.
• To tailor recommendations and track agreed progress.
• To operate and improve the website (e.g. performance, accessibility, security).
• To communicate important updates and service information.

Marketing communications

We send optional updates only with your consent or where permitted by the UK Privacy and Electronic Communications Regulations (PECR). You can unsubscribe at any time by following the link in our emails or by contacting us.

Cookies

We use essential cookies for site functionality and may use privacy‑friendly analytics to understand usage. You can control cookies in your browser. For details, see our Cookies Policy.

Links to other websites

Our website may link to other websites. Their privacy practices are not covered by this notice. We encourage you to read their policies.

Sharing

We do not sell personal data. We may share limited information with service providers who help us operate the website, email, or booking system. Providers may be located in the UK, EU, or other countries with appropriate safeguards (e.g. UK International Data Transfer Addendum (IDTA) and/or EU Standard Contractual Clauses (SCCs)). You can contact us to request a copy of relevant safeguards. We only share what is necessary and require appropriate security.

Common provider categories include: website hosting, email delivery, booking and scheduling, analytics (if enabled), and customer support tools.

Data retention

We keep personal data only as long as needed for the purposes set out above and to meet legal, accounting, or reporting requirements. We periodically review and securely delete data that is no longer required. Indicative periods:

• Enquiry data: up to 12 months after last contact.
• Client service records: typically up to 6 years (legal/accounting).
• Analytics data (if enabled): typically 12–24 months.

Security

We use reasonable technical and organisational measures to protect personal data (for example, encryption in transit, access controls, and least‑privilege practices). No method of transmission or storage is 100% secure and we cannot guarantee absolute security.

Automated decision‑making

We do not use automated decision‑making or profiling that produces legal or similarly significant effects about you.

Your rights

• Access, correct, update or delete personal information.
• Object to or restrict certain processing.
• Data portability in certain cases.
• Withdraw consent where processing is based on consent.
• Complain to the ICO (UK Information Commissioner's Office) if you have concerns. We appreciate the chance to resolve concerns first.

We respond within one month. We may ask for information to verify your identity. To exercise rights, contact [email protected].

You can also complain to the ICO: https://ico.org.uk/make-a-complaint/.

Children

Our services and website are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us to remove it.

Updates

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date.

Contact

For privacy requests, email [email protected].