Privacy Policy

Your privacy matters to me. This policy explains what personal information I collect when you visit kaleightyler.com, how I use it, and what rights you have. I am committed to handling your data with care and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I am

The data controller for this website is:

Kaleigh Tyler
Based in: Westgate-on-Sea, Kent, CT8
Email: kaleightyler@hotmail.com
Phone: +44 7515 018751

2. What information I collect

I only collect the information you choose to give me. This may include:

• Contact form submissions: your name, email address, phone number, and the message you send me
• Enquiry details: information you share about your health goals or concerns when booking a discovery call
• WhatsApp messages: if you contact me directly via WhatsApp, your phone number and message content
• Health information: details you voluntarily share during consultations or in communications (treated as special category data under UK GDPR)

I do not use Google Analytics, Facebook Pixel, or any tracking software on this website. No data is collected passively by visiting this site.

3. Why I collect it (lawful basis)

I collect and use your personal data for the following reasons:

• To respond to your enquiry — lawful basis: legitimate interests
• To provide nutritional therapy services — lawful basis: performance of a contract
• To keep client health records — lawful basis: legal obligation (health practitioner records obligations) and, where applicable, explicit consent
• To send you information you've requested (e.g. programme details) — lawful basis: legitimate interests or consent

I will never use your information for marketing purposes without your explicit consent.

4. Health information (special category data)

Information about your health is classed as "special category" data under UK GDPR and receives extra protection. I will only process health information where you have given me explicit consent to do so, or where it is necessary to provide you with nutritional therapy services. I will never share your health information with third parties without your written consent, except where legally required to do so.

5. How I store and protect your data

Your personal information is stored securely. I do not use unsecured systems or store data in places accessible to others. Specifically:

• Contact form submissions are sent directly to my email inbox
• Client records are held in password-protected, encrypted systems
• I do not store card payment details — payments are processed by third-party providers where applicable

I take reasonable technical and organisational steps to protect your data from unauthorised access, loss, or disclosure.

6. How long I keep your data

• General enquiries (no appointment booked): deleted within 12 months if no ongoing relationship develops
• Client health records: retained for a minimum of 8 years from the date of last treatment, in line with UK health practitioner guidance
• Financial records: retained for 6 years in line with HMRC requirements

7. Who I share your data with

I do not sell, rent or trade your personal data. I may share data only in the following limited circumstances:

• With your GP or other healthcare professionals, with your explicit written consent
• If required to do so by law or a court order
• With trusted service providers who process data on my behalf (e.g. email providers) under strict data processing agreements

8. Cookies

This website uses only essential cookies required to make the site function. It does not use advertising, tracking or analytics cookies. Please see my Cookie Policy for full details.

9. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can ask for a copy of the data I hold about you
• Right to rectification — you can ask me to correct inaccurate or incomplete data
• Right to erasure — in some circumstances, you can ask me to delete your data
• Right to restrict processing — you can ask me to limit how I use your data
• Right to data portability — you can ask for your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact me at kaleightyler@hotmail.com. I will respond within 30 days.

10. Complaints

If you have concerns about how I handle your data, please contact me first and I will do my best to resolve the matter. If you remain unhappy, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

11. Changes to this policy

I may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. I encourage you to check back occasionally if you are a regular visitor.