Privacy Policy
How your personal data is collected, used, stored, and protected.
Claudia Ehrlicher, Registered Dietitian
Email: claudia@londondietitian.com
This privacy policy explains how your personal data is collected, used, stored, and protected by Claudia Ehrlicher, Registered Dietitian. It reflects the requirements of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the professional standards of the Health and Care Professions Council (HCPC). By providing your consent, you agree to the practices described in this policy.
Purpose of Collecting Personal Data
Your personal data is collected to support:
- Responding to your enquiry and understanding how I may help you.
- Providing safe, effective, and individualised nutrition and dietetic care.
- Maintaining accurate clinical records in line with professional and legal requirements.
- Coordinating care with other healthcare providers when you give explicit consent.
How Personal Data Is Collected
Personal data is typically provided directly by you when:
- You complete a contact form or send an email enquiry.
- You participate in a discovery call.
- You attend a consultation or programme session.
Additional sensitive information may be received from other healthcare professionals, but only with your explicit consent.
If you access my website, technical information such as IP address, browser type, and time zone settings may be collected automatically for security and functionality.
What Personal Data Is Collected
The information collected may include:
- Personal identifiable information: Name, home address, email address, telephone number
- Occupation, gender, marital status
- Contact details of your GP or other healthcare professionals
- Health and lifestyle information
- Past and current medical conditions
- Medical tests, blood results, diagnoses, and reports
- Current medications
- Anthropometric data
- Dietary intake and lifestyle information
- Any additional information you choose to share to support your care
- Technical information (website use): IP address, browser type and version, operating system and platform, time zone settings
Session Recording for Note-Keeping
With your explicit consent, sessions may be audio-recorded for the sole purpose of accurate clinical note keeping.
Recordings are processed using Heidi Health, a medical note-keeping software designed specifically for healthcare settings. Heidi Health protects user and patient personal data through:
- Strict compliance with UK GDPR, the NHS Data Security and Protection Toolkit (DSPT), HIPAA, and ISO 27001
- Advanced technical security measures
- A “privacy by design” approach that ensures data is not retained unnecessarily
You will always be asked for consent before any recording takes place. If you do not consent, sessions will not be recorded.
How Personal Data Is Used
Your information is used for:
- Professional clinical record keeping
- Providing safe and effective nutrition and dietetic services
- Coordinating care with other healthcare professionals (with your consent)
- Ensuring security and integrity of clinical records
- Meeting legal and regulatory obligations
Sharing of Personal Data
Your personal data may be shared with:
- With your explicit consent: Medical doctors (GPs, consultants), allied health professionals, other professionals involved in your care
- Without consent only in exceptional circumstances, to prevent serious harm or comply with legal obligations
Your data will never be sold, leased, or distributed to third parties for marketing or unrelated purposes.
Lawful Bases for Processing
Under UK GDPR, your data is processed under:
- Consent — you may withdraw consent at any time
- Legitimate interest — to provide safe, effective, and professional healthcare services
How Your Personal Data Is Stored
Electronic notes and personal information are stored on secure, password-protected systems accessible only to those directly involved in your care. Written information is kept in a locked, secure location. All records are retained for eight years, in line with British Dietetic Association (BDA) guidance, after which they are securely destroyed. Email communication is conducted with the understanding that email is inherently insecure.
Your Data Protection Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your data in certain circumstances
- Request restriction of processing
- Object to processing
- Request data portability
Requests may be made via: claudia@londondietitian.com
Withdrawing Consent
You may withdraw your consent at any time. This includes:
- Consent to hold personal data
- Consent to share information with other professionals
- Consent to session recording
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
How to Raise Concerns or Make a Complaint
If you have concerns about how your data is used, please contact me at: claudia@londondietitian.com
If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: https://www.ico.org.uk