Privacy Policy

1. Who We Are

NUTRIBE ("we", "our", "us") operates the digital health and wellness platform at nutribe.com. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For data protection purposes, NUTRIBE is the data controller. If you have any questions about this policy, please contact us at privacy@nutribe.com.

2. Data We Collect

We collect and process the following categories of personal data:

• Account data: name, email address, password (hashed), referral code, GDPR consent record and consent date
• Profile data: profile photo, date of birth, health questionnaire responses, wellness goals
• Subscription and payment data: subscription plan, billing period, Stripe customer ID (we do not store payment card details)
• Consultation data: booking details, consultation notes and practitioner recommendations
• Usage data: pages visited, videos watched, events attended, referrals made
• Communications: messages sent through the platform, support enquiries
• Technical data: IP address, browser type, device type, operating system

3. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

• Contract performance: to provide you with our platform services, process subscriptions and bookings, and send you service-related communications
• Legitimate interests: to improve our platform, detect and prevent fraud, ensure platform security, and send service notifications
• Consent: to send you marketing communications (you may withdraw consent at any time)
• Legal obligation: to comply with applicable laws and regulatory requirements

4. Sharing Your Data

We share your data only as necessary:

• Practitioners: when you book a consultation, relevant booking details and pre-consultation information are shared with the practitioner
• Stripe: payment processing (governed by Stripe's Privacy Policy)
• Email providers: for transactional and marketing emails
• Analytics providers: aggregated, anonymised usage statistics only
• Legal authorities: where required by law or to protect our legal rights

We do not sell your personal data to third parties.

5. Health Data

Health-related information you share (questionnaire responses, consultation notes, health goals) constitutes special category data under UK GDPR. We process this data only with your explicit consent and take additional technical and organisational measures to protect it.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: to request a copy of your personal data
• Rectification: to correct inaccurate or incomplete data
• Erasure: to request deletion of your personal data
• Restriction: to restrict processing of your data in certain circumstances
• Portability: to receive your data in a structured, machine-readable format
• Objection: to object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, to withdraw it at any time

To exercise any of these rights, please contact us at privacy@nutribe.com. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies to operate our platform and improve your experience. Please see our Cookie Policy for full details.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include encryption in transit (HTTPS), hashed passwords and access controls.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The "last updated" date at the top of this page reflects the most recent revision.

11. Complaints

If you have a concern about our data practices, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.