Privacy Policy
Last updated: November 2025
Introduction
TaraWell is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.
By using our website or services, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our services.
Information We Collect
Personal Information
We collect information that you voluntarily provide to us when you:
- Complete our contact form or enquiry forms
- Book a consultation with our nutritionists
- Fill out pre-consultation questionnaires
- Communicate with us via email or phone
- Participate in our services
This information may include:
- Name and contact details (email address, phone number, postal address)
- Dietary information and food preferences
- Health and lifestyle information relevant to nutrition guidance
- Payment information when booking services
- Any other information you choose to provide
Automatically Collected Information
When you visit our website, we may automatically collect certain information about your device and browsing actions, including:
- IP address and browser type
- Operating system and device information
- Pages visited and time spent on pages
- Referring website addresses
- Date and time of visits
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our use of cookies, please see our Cookie Policy.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide and maintain our nutritionist services
- To communicate with you about your consultations and enquiries
- To create personalised nutrition plans and recommendations
- To process your bookings and manage appointments
- To send you relevant information about our services
- To improve our website and services
- To comply with legal obligations
- To prevent fraudulent activity and ensure security
Legal Basis for Processing (UK GDPR)
Under UK GDPR, we process your personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for the performance of our services
- Legitimate Interests: Processing is necessary for our legitimate interests in operating and improving our business
- Legal Obligation: Processing is necessary to comply with legal requirements
How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and providing services, subject to confidentiality agreements
- Legal Requirements: We may disclose information if required by law or in response to valid legal requests
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
- With Your Consent: We may share information with your explicit consent
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:
- Client consultation records are retained for 7 years in accordance with professional guidelines
- Contact form enquiries are retained for 2 years
- Marketing communications data is retained until you unsubscribe
- Website analytics data is retained according to our analytics provider's policies
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data under certain circumstances
- Right to Restrict Processing: Request that we limit how we use your data
- Right to Data Portability: Request transfer of your data to another organisation
- Right to Object: Object to our processing of your personal data
- Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication procedures
- Staff training on data protection
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
International Data Transfers
Your information is primarily processed and stored within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
TaraWell
118 Castle View Road
Edinburgh EH11 3FB
United Kingdom
Email: [email protected]
Phone: +44 131 645 7820
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: www.ico.org.uk