PRIVACY POLICY

Cariad Family Nutrition
Effective Date: 10th December 2025.

Cariad Family Nutrition is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or contact us.

1. Who We Are

Business Name: Cariad Family Nutrition
Website: www.cariadfamilynutrition.co.uk
Contact Email: beth@cariadfamilynutrition.co.uk
Data Controller: Beth Preece

2. What Personal Data We Collect

We may collect the following information when you contact us through our website:

  • Name

  • Email address

  • Phone number (if provided)

  • Any information you choose to include in your message

We only collect personal data that you voluntarily provide to us.

3. Lawful Basis for Processing Your Data

Under UK GDPR, we must have a lawful reason for processing your data. Our lawful bases are:

  • Consent – when you submit a contact form

  • Legitimate interests – to respond to your enquiry and manage our services

You may withdraw your consent at any time by contacting us.

4. How We Use Your Personal Data

We use your personal data to:

  • Respond to your enquiry

  • Communicate with you about our services

  • Maintain our business records

  • Improve our website and services

We do not sell, rent, or trade your personal information.

5. How Long We Keep Your Data

We only keep your personal data for as long as necessary:

  • Enquiry data: up to 12 months

  • Ongoing client communication: up to 7 years (for insurance and legal purposes, if applicable)

You can request deletion at any time where legally permissible.

6. How Your Data Is Stored & Protected

Your personal data is:

  • Stored securely

  • Only accessed by authorised individuals

  • Protected using reasonable technical and organisational security measures

While we take strong precautions, no internet transmission is completely secure.

7. Third-Party Services (Data Processors)

We use trusted third parties to operate our website and communications, including:

  • Squarespace – website hosting and contact form processing

  • Email providers – for communication

These companies act as data processors and are legally required to protect your information and only act on our instructions.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

  • Improve website performance

  • Analyse how visitors use our site

  • Enhance your browsing experience

You are shown a cookie consent banner when you visit our site and may accept, reject, or manage your preferences at any time.

For more information, please see our Cookie Policy or manage your preferences through the banner.

9. Mailing List

If you choose to join our mailing list, we will collect:

  • Your name (if provided)

  • Your email address

We use this information to send you:

  • News and updates

  • Nutrition-related content

  • Service updates and offers (if applicable)

Lawful basis:
We process your mailing list data based on your explicit consent. You will only be added to our mailing list if you actively opt in.

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in any email

  • Contacting us directly at: [Insert Your Email]

We do not sell or share your mailing list data with third parties for marketing purposes.

10. Your UK GDPR Rights

You have the right to:

  • Request access to your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Object to or restrict processing

  • Withdraw consent at any time

  • Request data portability

To exercise these rights, contact us.

11. Right to Complain

If you believe your data has been mishandled, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

12. Children’s Privacy

We do not knowingly collect personal data from children under the age of 13 without verified parental consent. If you believe a child has submitted personal information, please contact us and we will remove it immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website with the updated effective date.

14. Contact Us

If you have any questions about this Privacy Policy or your data rights, please contact us.