Privacy policy

Natalja Zute, trading as Natalia Zute Health. I am the data controller. You can reach me at hello@nataliazutehealth.com.

I am registered with the Information Commissioner’s Office as a data controller.

• When you book a call: your name, your email address and anything you choose to write in the message box.
• When you become a client: your health questionnaire (including your date of birth, your health history and your GP’s details), your plan, any test results you share with me, and my notes from our sessions.
• When you pay: the amount, the date and a reference. Card details go straight to the payment provider; I never see or hold them.
• When you ask for the free diary: your first name, your email address and the focus you choose.
• When you send a message through the contact form: your name, your email address and your message.
• When you use the website: cookies and similar technology, as set out in the Cookie notice.

• To arrange and deliver your sessions — because it is necessary for our contract.
• Health information in your questionnaire, plan and notes — this is special category data. My lawful basis is your explicit consent, which the questionnaire asks for separately. You can withdraw it at any time.
• To keep records I am required to keep, for tax and for my professional insurance — a legal obligation and my legitimate interest in defending a claim.
• To send you the free diary — because you asked for it.
• To send you my emails — only if you ticked the box. You can unsubscribe from any email, and I will stop.

I do not sell your information, and I do not use it to make automated decisions about you.

Only the services I need to run the practice, and only what they need:

• GitHub Pages, which hosts this website, and Cal.com, which runs the booking calendar
• Stripe, which takes payments
• MailerLite, which I use to send the diary and my emails
• the video service used for sessions [name the provider once chosen]
• the secure form tool for the health questionnaire [name the tool once chosen]
• my accountant, for invoices and tax records
• your GP or another health professional, only if you ask me to or agree to it
• a supplement supplier, only if you ask me to order something for you
• my professional insurer and legal advisers, only if they are needed to deal with a claim
• BANT or the CNHC, only if a complaint is made about my work
• a laboratory, if you choose to have a test, and only with your agreement

With your agreement, I may discuss your case with a mentor or supervisor to keep my practice safe and up to date, with nothing that identifies you. I only share your feedback or a testimonial with your written permission.

If I believe your life or someone else’s is in serious danger, I may share the information needed with the emergency services or your GP, even without your consent.

Some of these services may store information outside the UK. Where they do, they must protect it to UK standards.

Enquiries that do not become bookings: up to 12 months. Client records, including your questionnaire, plan and session notes: [check the period your insurer and BANT require; commonly 7 years, or until a child turns 25]. Invoices and tax records: 6 years plus the current year. Email list: until you unsubscribe.

You can ask me for a copy of what I hold, ask me to correct it, ask me to delete it, ask me to limit how I use it, object to my using it, or ask for it in a portable form. Where I rely on your consent, you can withdraw it at any time.

Write to hello@nataliazutehealth.com and I will reply within one month. There is no charge.

Some information I have to keep even if you ask me to delete it, for example invoices and the records my insurer requires. I will tell you if that applies.

Your records are kept in password-protected accounts with two-factor logins turned on, and are not shared with anyone outside the list above. Paper notes, if any, are kept locked.

If something goes wrong and your information is at risk, I will tell you and the ICO where the rules require it.

Please tell me first. If you are still unhappy, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.