Privacy policy.

Kath Nagle t/a Get Nutrihelp

Email: Getnutrihelp@outlook.com
Telephone: 07765926529

Effective Date: November 2026

This Privacy Notice explains how I collect, use, store and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This notice applies to current clients, former clients, prospective clients and visitors to my website.

Who I Am

I am Kath Nagle, a Nutritional Therapist and Kinesiologist trading as Get Nutrihelp.

I am the data controller responsible for the personal information collected in connection with my professional services.

Information I Collect

To provide safe and appropriate care, I may collect and process:

  • Name, address, telephone number and email address

  • Date of birth

  • Emergency contact details

  • GP and healthcare practitioner details (where relevant)

  • Medical history and health information

  • Information about symptoms, diagnoses, medications and supplements

  • Diet, lifestyle and wellbeing information

  • Test results and health questionnaires

  • Consultation notes and correspondence

  • Appointment and payment records

Health information is classified as special category personal data and receives additional legal protection.

 Why I Collect Your Information

Your information is collected to:

  • Assess your health needs

  • Provide nutritional therapy and kinesiology services

  • Develop personalised recommendations

  • Maintain accurate clinical records

  • Communicate regarding appointments and follow-up care

  • Process payments

  • Meet professional, legal, insurance and regulatory obligations

  • Respond to enquiries and requests

I will never sell your personal information.

 Legal Basis for Processing

I process personal data under the following lawful bases:

Contract

Processing is necessary to provide the professional services you have requested.

Legitimate Interests

Processing is necessary for the effective administration of my practice, maintaining records and managing my business.

Legal Obligation

Certain records may need to be retained to comply with professional, insurance, tax or legal requirements.

Provision of Healthcare

Health information is processed under Article 9(2)(h) UK GDPR, which permits processing necessary for the provision of healthcare services.

 How Your Information Is Stored

Your information is stored securely using:

  • Password-protected computers and devices

  • Microsoft OneDrive cloud storage

  • Multi-factor authentication on my Microsoft account

  • Secure backup systems

  • Locked storage for any paper records

Access is limited to me and any authorised person who requires access for legitimate business purposes.

 Use of Artificial Intelligence (AI)

I may use AI tools to assist with administrative tasks, drafting educational materials, research summaries and general business activities.

I do not intentionally enter identifiable client information, clinical notes, contact details or any information that could directly identify a client into AI systems unless appropriate legal, contractual and data protection safeguards are in place.

Where AI tools are used, information is anonymised or pseudonymised wherever possible.

All clinical decisions, recommendations and professional advice remain my sole responsibility.

 Sharing Your Information

Your information will only be shared where necessary and appropriate.

This may include:

  • Functional testing laboratories

  • Supplement suppliers where you request products

  • Payment providers

  • Professional advisers such as accountants

  • Professional indemnity insurers

  • Other healthcare professionals where you have given consent

  • Legal or regulatory authorities where disclosure is required by law

I will only share the minimum information necessary for the relevant purpose.

 Online Consultations and Electronic Communication

Consultations may take place by telephone or secure online video platforms.

Although reasonable security measures are used, no internet-based communication can be guaranteed to be completely secure.

If you choose to communicate by email, you should be aware that email is not fully secure.

 International Transfers

Some service providers used to store or process information may operate outside the United Kingdom.

Where this occurs, appropriate safeguards will be implemented in accordance with UK GDPR requirements.

 How Long Records Are Kept

Clinical records are normally retained:

  • For a minimum of seven years after the last consultation

  • For children, until age 25 (or age 26 if treatment ended at age 17)

Records may be retained for longer where required by law, professional standards, insurance requirements or ongoing legal proceedings.

When no longer required, records will be securely deleted or destroyed.

 Children's Data

Where a client is under 18 years of age, consent from a parent or legal guardian will usually be required before services are provided.

The child's welfare and confidentiality will always be considered in accordance with applicable law and professional standards.

 Your Rights

Under UK GDPR, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate information

  • Request deletion of information where legally permissible

  • Restrict processing in certain circumstances

  • Object to processing in certain circumstances

  • Request transfer of your data to another provider

  • Withdraw consent where consent is the basis for processing

Please note that some records cannot be deleted where there are professional, legal or insurance retention requirements.

 Subject Access Requests

You may request a copy of the personal information I hold about you.

Requests will normally be responded to within one month of receipt.

Proof of identity may be required before information is released.

 Data Protection Complaints

If you have concerns about how your personal information has been handled, please contact me first.

Kath Nagle
Email: getnutrihelp@outlook.com
Telephone: 07765926529

I aim to acknowledge complaints within 10 working days and investigate them promptly.

If you have any concerns about how your personal information has been handled, please contact me in the first instance.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Website: www.ico.org.uk

Telephone: 0303 123 1113

 

Changes to This Privacy Notice

This Privacy Notice may be updated from time to time to reflect changes in legal requirements, technology or professional practice.

The most current version will always be available on request.