We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights under data protection laws in the UK and EU (including the UK GDPR and Data Protection Act 2018).

1. Who we are

Gareth Davies Nutrition (“I”, “we”, “us”, or “our”) operates this website and is the data controller for the personal data collected through it.

If you have any questions about this policy or how we handle your data, please contact us at:
Email: info@garethdaviesnutrition.com 

2. What data we collect

We may collect the following types of personal information when you use our website, contact us, join our mailing list, book a consultation, or use any of our services.

• Contact details: your name, email address, phone number, and postal address
• Booking information: details such as event or key dates (e.g. wedding date) to help fulfil your order or booking
• Client personal experiences: to inform an appropriate nutrition plan for you
• Location information: approximate location data, used for analytics and website performance monitoring
• Payment details: processed securely via wordpress payment systems — we do not store your full card information
• Marketing preferences: your consent to receive updates, offers, or newsletters
• Cookies and website usage data: including pages visited, time on site, and actions taken, collected via wordpress cookies and analytics tools

3. How we collect your data

We collect information in the following ways:

• When you complete contact forms or join our mailing list
• When you make a booking through our website
• Through cookies and analytics tools that track website activity and performance

4. How we use your data

We only use your personal information for the purposes it was collected for, including:

• To respond to your enquiries or messages
• To process bookings and payments
• To send updates, offers, or newsletters (if you’ve opted in)
• To analyse website performance and improve your experience
• To comply with our legal and accounting obligations

We will never sell your data or share it with third parties for marketing purposes.

5. Lawful basis for processing

Under UK GDPR, we process your data on the following lawful basis:

• Contract: to fulfil bookings, orders, or services you’ve requested
• Consent: for marketing communications (you can withdraw consent anytime)
• Legitimate interests: to operate, improve, and secure our website and services
• Legal obligation: when required to comply with UK law or tax regulations

6. Cookies and analytics

Our website is hosted on the WordPress platform, which uses cookies to collect information such as visitor numbers, location (based on IP address), and how visitors interact with the site.

Cookies help us understand how our website is used so we can improve it. You can control or disable cookies in your browser settings at any time.

For details of the cookies used by WordPress, please visit:

Cookie Policy | WordPress.org English (UK)

7. Data storage and security

We use secure, encrypted platforms to store your information. All devices and systems used to access personal data are password-protected and only accessible by authorised employees.

8. How long we keep your data

We keep your data only for as long as needed to fulfil the purposes outlined above – for example, to complete your booking, comply with legal obligations, or manage our business records.

If you join our mailing list, we’ll keep your information until you unsubscribe.

9. Sharing your data

We do not sell or share your personal information with third parties. However, your data may be processed by trusted service providers (such as WordPress or payment processors) who help us run our business securely. These providers are bound by data protection laws and only process data according to our instructions.

10. Your rights

Under data protection law, you have the right to:

• Access the personal data we hold about you
• Ask us to correct or update inaccurate information
• Request that we delete your personal data (“right to be forgotten”)
• Object to or restrict processing of your data in certain situations
• Withdraw consent to marketing at any time

To exercise any of these rights, please contact us at info@garethdaviesnutrition.com 

If you’re not satisfied with how we’ve handled your data, you can contact the Information Commissioner’s Office (ICO) at http://www.ico.org.uk.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, with the date of the latest update shown at the top.