top of page

Privacy Policy

RASHMI NUTRITION

Privacy Notice

Rashmi Nutrition holds personal information about you. This notice explains how that information is used, who we may share it with, and how we keep it secure. This notice is not exhaustive — if you need more detail or a specific explanation, please contact us at rashmi@rashminutrition.com. We keep this Privacy Notice under regular review.

Last reviewed: 9.9.2026

WHO WE ARE AND WHAT WE DO

Rashmi Nutrition is a nutritional therapy practice run by Rashmi Gajree, a Registered Nutritional Therapist (DipION, CNHC and BANT registered, AFMCP-trained through the Institute for Functional Medicine). We work with clients experiencing exhaustion, cravings, weight and hormonal changes, and gut symptoms, using a root-cause approach built around three areas assessed together: gut health, blood sugar balance, and nervous system regulation.

We offer 1:1 and group nutritional therapy programmes, discovery calls, and functional testing (for example gut, hormone, and comprehensive blood panels through third-party testing laboratories). Programmes are based on your goals and take into account your symptoms, diet, medical history and lifestyle, and result in personalised nutrition and lifestyle recommendations — which may include dietary and lifestyle changes, supplement suggestions, and ongoing coaching support.

Nutritional therapists cannot diagnose medical conditions. Our recommendations do not replace advice from your GP or other medical professionals.

HOW WE OBTAIN YOUR PERSONAL DATA

Information you provide to us

You provide us with personal data in the following ways:
- By completing a nutritional therapy questionnaire or health history form
- By signing a terms of engagement/client agreement
- During a nutritional therapy consultation
- Through email, telephone, WhatsApp, or post
- By making a card or online payment
- By downloading a free resource, such as a guide or ebook
- By booking a discovery call or session through our website or booking platform

This may include:
- Basic details such as name, address, email address, phone number and next of kin
- Details of contact we have had with you, such as enquiries and appointment requests
- Health information, including your medical history, dietary and lifestyle habits, supplement and medicine use, biochemical test results, clinic notes and health improvement plans
- GP contact information
- Payment details (processed securely by our payment provider — we do not store full card details)

We use this information to provide you with nutritional therapy services. The lawful basis for processing your general contact and administrative data is our legitimate interest and, where you have a service agreement with us, performance of that contract (Article 6(1)(f) and 6(1)(b) UK GDPR).

Because health information is "special category data" under UK GDPR, we rely on an additional condition to process it: the provision of health or social care by a health professional acting under a duty of confidentiality (Article 9(2)(h) UK GDPR).

Following completion of your programme with us, we retain your personal data for the period recommended by our professional bodies (BANT and CNHC) to allow us to respond to any queries or complaints. The lawful basis for this retention is contract administration and compliance with our professional obligations.

Information we obtain from other sources

We may receive sensitive health information in the form of results from third-party biochemical testing laboratories that you have chosen to test with (for example, blood, hormone or gut testing providers). We process this to provide you with your nutritional therapy service, under the same lawful basis set out above.

We may also obtain information from other healthcare providers, such as your GP. We will only do this with your express consent. If you do not give consent, we may still support you, but our ability to coordinate your care with other providers may be limited.

HOW WE USE YOUR PERSONAL DATA

We act as a data controller for the personal data we hold to provide you with nutritional therapy services. We also act as a controller and, in some cases, a processor when handling data from third parties such as testing laboratories, other healthcare providers, and payment processors.

We take reasonable technical and organisational measures to protect your personal data, including health and contact details, consistent with our professional duty of confidentiality and the requirements of UK GDPR and the Data Protection Act 2018.

We may use your personal data where there is an overriding public interest — for example, to safeguard an individual or to prevent a serious crime — or where there is a legal requirement, such as a court order. We will only use your data for marketing purposes, such as newsletters, where you have given us your express consent, and you can withdraw that consent at any time.

DO WE SHARE YOUR INFORMATION WITH OTHER ORGANISATIONS?

We keep your information confidential. We will not disclose it to third parties without your express consent, except in the following circumstances:
- Contractors and advisers who provide services to us or act as our agents, on the understanding that they keep the information confidential (for example, our practice management, scheduling or payment software providers)
- Anyone to whom we transfer our rights and duties under an agreement with you (for example, if the practice is sold or restructured)
- Legal or crime-prevention agencies, or as required to satisfy a regulatory request

We may share relevant information with the biochemical testing laboratories and supplement suppliers involved in providing your care. We will not share sensitive health information with your GP or other healthcare providers without first seeking your express consent — unless we believe your life, or someone else's, may be at risk, in which case we may share information with an appropriate authority (such as your GP, the police, or social services) on the basis of vital interests.

We may share your case history in anonymised form with peers for professional development — for example at clinical supervision, conferences, or in professional publications. We will always seek your explicit consent before doing this.

WHAT ARE YOUR RIGHTS?

You have the right to see, amend, delete, or receive a copy of the personal data we hold about you, subject to some exceptions, and you do not need to give a reason for asking.

To make a subject access request, please write to rashmi@rashminutrition.com. In some circumstances certain information may be withheld. We will respond within one month of receiving your request and any information we need from you to verify your identity. Our response will set out:
- The sources from which we obtained your information
- The purposes for which we process it
- Who we share it with

Subject to some exemptions, you also have the right to:
- Ask us to delete your information
- Ask us to correct or update information that is inaccurate
- Ask us to stop processing your information, where we are not required to continue by law or our professional body's guidance
- Receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format, and to have that data transferred to another controller
- Object at any time to the processing of your personal data

We do not carry out any automated decision-making using your personal data.

To exercise any of these rights, please write to the Data Controller at rashmi@rashminutrition.com.

WHAT SAFEGUARDS ARE IN PLACE TO KEEP MY INFORMATION SECURE?

We only process personal data in accordance with UK GDPR, which requires a lawful basis for processing and that all processing is fair and transparent.

As a health professional, we also follow the common law duty of confidence: information given to us in confidence is treated as confidential and used only to provide your care, unless you agree otherwise or the law requires disclosure.

We keep information in secure locations, restrict access to authorised personnel only, and protect data held on devices such as laptops with encryption. Any external data processors who support us are contractually required to have appropriate security arrangements in place.

[If you hold ICO registration]: Rashmi Nutrition is registered with the Information Commissioner's Office (ICO) as a data controller, registration number [insert number]. You can view this via the ICO's online register at ico.org.uk.

HOW LONG DO WE HOLD YOUR INFORMATION?

We retain client records for the period recommended by our professional bodies, BANT (British Association for Nutrition and Lifestyle Medicine) and CNHC (Complementary and Natural Healthcare Council), to allow us to respond to any future queries or complaints about the care we provided.

WEBSITE TECHNICAL DETAILS

Forms

Where we use electronic forms on our website, we aim to use secure, reputable form providers with built-in privacy safeguards.

Cookies

Our website may use cookies, including analytics cookies, to understand how visitors use the site and to help us improve it. These cookies collect anonymous information, such as the number of visitors, where they came from, and which pages they visited. We do not use cookies to collect personal or identifiable information beyond what is necessary for the site to function.

Most web browsers let you control or delete cookies through your browser settings. For more information on managing cookies, visit www.allaboutcookies.org.

Analytics

We use analytics software (such as Google Analytics) to understand how our website is used. We do not use personally identifiable information in the statistical reports this generates. Google's own privacy policy explains how they handle this data.

COMPLAINTS

If you have a complaint about how we use your personal data, please contact the Data Controller by email at rashmi@rashminutrition.com and we will do our best to resolve it.

If you remain unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO):
- Helpline: 0303 123 1113
- Website: ico.org.uk
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

bottom of page