Privacy Policy

Introduction

ToBalance is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Personal Information

When you contact us or use our services, we may collect the following personal information:

• Name and contact details (email address, phone number, postal address)
• Demographic information
• Dietary preferences and eating habits
• Health and lifestyle information relevant to nutrition consultation
• Communication preferences
• Any other information you choose to provide

Automatically Collected Information

When you visit our website, we automatically collect certain information including:

• IP address and browser type
• Device information
• Pages visited and time spent on pages
• Referring website addresses
• Cookie data (see our Cookie Policy for details)

How We Use Your Information

We use your personal information for the following purposes:

• To provide nutrition consultation services and support
• To communicate with you about your enquiries and appointments
• To create and maintain personalized nutrition plans
• To improve our services and website functionality
• To send you relevant information about our services (with your consent)
• To comply with legal obligations
• To protect our rights and prevent fraud

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Contract: Processing is necessary to provide the services you have requested
• Consent: You have given clear consent for us to process your personal data for specific purposes
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services
• Legal Obligation: Processing is necessary to comply with legal requirements

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information with:

• Service Providers: Third-party companies that help us operate our website and provide services (e.g., email service providers, hosting services)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission to share your information

All third-party service providers are required to maintain the confidentiality and security of your personal information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include secure servers, encrypted connections, and restricted access to personal data.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Your Rights

Under UK data protection law, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us using the details provided below.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. For detailed information about how we use cookies, please refer to our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your personal information may be transferred to and processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Complaints

If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the supervisory authority: