PRIVACY | Fiona Sandeman Nutrition

Last updated: 8 July, 2026

1. Who we are

Fiona Sandeman Nutrition provides nutritional therapy services - dietary and lifestyle analysis, blood and functional testing advice and interpretation, and personalised nutrition support to adults and children. Services are provided online (UK and Kenya) and in person (Kenya).

2. Information we collect

Name, contact details, and next of kin
Health information: medical history, dietary/lifestyle details, supplement and medication history, blood and functional test results, clinic notes, and care plans
GP contact details
Payment details (we do not store full card or bank account numbers; payments may be made by card, bank transfer, or M-Pesa)
Enquiries, appointment requests, and any correspondence with us

We collect this directly from you (forms, consultations, correspondence, payment) and sometimes from third parties - testing labs, or other healthcare providers with your express consent.

3. How we use it, and on what legal basis

We use your information to provide nutritional therapy, manage appointments, and meet our professional obligations to our regulatory bodies, BANT and CNHC. Because health information is a "special category" of data under UK GDPR, we rely on legitimate interest as our general legal basis, alongside the health and social care condition (Article 9(2)(h) UK GDPR), which applies because your data is processed by a professional bound by a duty of confidentiality.

After your care ends, we retain records under contract administration to allow us to handle any complaint.

We'll only use your data for marketing (e.g. newsletters) with your express consent, and never for automated decision-making.

4. Clients based in Kenya

For clients based in or receiving care in Kenya, your information is also handled in line with Kenya's Data Protection Act (2019). Where data needs to move between our UK-based systems (including testing labs) and Kenya, we take reasonable steps to keep it secure in transit and storage, consistent with both UK GDPR and Kenyan data protection requirements.

5. Who we share it with

We keep your information confidential. We only share it with:

CNHC/BANT, if you make a complaint
Contractors or advisors who support our practice, bound to confidentiality
Blood / functional testing and supplement companies, as needed to deliver your care (sensitive health information is not shared beyond what's necessary)
Your GP or other healthcare providers — only with your express consent
Legal or crime-prevention authorities, where required by law

If we believe your life — or someone else's — is at risk, we may share relevant information with an appropriate authority (e.g. police, social services, your GP) under the vital interests basis, without waiting for consent.

Anonymised case details may occasionally be shared with peers for professional development (supervision, conferences, publications) — always with your explicit consent first.

6. How long we keep it

Adult client records: minimum 8 years from your last contact with us
Children's records: until their 25th birthday (26th if treatment ended after age 17)

After this, records are securely and permanently deleted.

7. Your rights

You can ask us to:

Give you access to your data
Correct inaccurate data
Delete your data
Stop processing your data (where we're not legally required to keep it)
Provide your data in a portable format
Object to how we're using your data

To use any of these rights, email fiona@fionasandemannutrition.com.

If you're unhappy with how we've handled a concern, you can complain to the ICO at www.ico.org.uk.

8. Keeping your data secure

We store information securely, restrict access to authorised personnel, and encrypt confidential information held on devices. Any external processors we work with are contractually required to maintain appropriate security.

9. Website, cookies and analytics

This website is built on Wix and uses Wix's secure forms module for enquiries and bookings.

This website may use cookies and similar technologies to improve user experience and monitor website performance.

We use Google Analytics to understand site usage in anonymised form. You can manage cookies via your browser settings, or opt out of Google Analytics tracking.

10. Complaints

Email fiona@fionasandemannutrition.com with any concerns about how your data is handled. If you're not satisfied with our response, you can contact the ICO at www.ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. Changes will be posted here with a new "last updated" date.