Effective date: 1st January 2026
This Privacy Policy explains how I, Dr James Fleming, collect, use, and protect your personal information when you use my website (jamesflemingnutrition.com) or engage my sports nutrition services.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Dr James Fleming is the Data Controller of your personal data.
1. Information I Collect
I collect and process personal data to deliver safe, effective, and tailored performance nutrition services:
- Contact Details: Name, email address, phone number, and location (collected via website contact forms, email, or client intake forms).
- Health & Performance Data (Special Category Data): Medical history, dietary intake, body composition data, training protocols, injury records, allergies, and lifestyle habits provided during consultations.
- Administrative Details: Payment records, appointment schedules, and service notes.
- Youth & Adolescent Data: Where services are provided to individuals under 18, explicit consent is obtained from a parent or legal guardian prior to collecting any data or commencing consultations.
2. How Your Information Is Used
Your data is used strictly to:
- Deliver individualised performance nutrition consultancy and dietetic support.
- Respond to enquiries submitted through the website.
- Manage appointments, invoicing, and service administration.
- Comply with professional, insurance, and legal obligations as a registered practitioner (SENR).
3. Legal Basis for Processing
Personal data is processed under the following lawful bases:
- Contractual Necessity: To deliver the consultancy or educational services requested.
- Explicit Consent: When voluntarily submitting enquiries or health information.
- Professional & Legal Obligations: Compliance with UK health regulations and professional practice standards.
- Special Category Health Data: Processed under explicit consent and Article 9(2)(h) of the UK GDPR for the provision of healthcare and performance nutrition support.
4. Data Sharing & Third-Party Processors
Your personal information is never sold, rented, or traded. Information is shared only under the following circumstances:
- Trusted Technical Processors: Secure third-party platforms used to run the website and practice (e.g., Netlify for form submissions, secure email providers, and accounting platforms) operating under strict data processing agreements.
- Professional Collaboration: With your explicit written consent, data may be shared with your coach, doctor, or multidisciplinary support team.
- Legal Requirement: Where required by law or regulatory authorities.
5. Cookies and Web Analytics
The website uses basic analytics scripts to monitor performance and improve user experience. These tools collect anonymised, non-identifying data such as page views and browser types.
6. Data Security & Retention
All data is stored using secure, encrypted cloud storage and password-protected systems to protect against unauthorised access, loss, or misuse.
Client records, consultation notes, and health data are retained for a minimum of 8 to 10 years following the end of services (or until age 26 for minors), in accordance with professional SENR registration and insurance requirements, after which records are securely destroyed.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data held about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of data (where legal and professional retention rules allow).
- Withdraw consent at any time for non-essential processing.
8. Complaints & ICO Registration
If you have concerns about how your data is handled, please contact me directly first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
9. Contact Details
For any questions regarding this Privacy Policy or your data rights, please contact:
Dr James Fleming
Email: j.fleming@live.co.uk
Website: https://jamesflemingnutrition.com
