Privacy policy
What I collect, why, and what you can ask me to do about it. In plain language, because a policy nobody reads protects nobody.
Last updated 22 October 2026
Who is responsible for your data
This site is run by Jessica, a registered dietitian, trading as [ legal entity name ], [ address ]. I decide what is collected here and why, which makes me the data controller.
If you have a question about your data, or want to use any of the rights below, email hello@jessicadietitian.com and I will answer personally.
What I collect, and why
I only collect what a particular thing needs. Reading the site anonymously requires nothing from you.
| What | When and why | How long I keep it |
|---|---|---|
| Name and email | When you book a session, buy a handbook or the Nutrition Guide, or join the newsletter. Needed to deliver what you paid for and to stay in touch. | As long as you are a client or a subscriber, then up to [ 24 ] months. |
| Payment details | Handled entirely by Stripe when you pay. I never see or store your card number. | Stripe keeps the record; I keep the receipt for accounting. |
| Health information | What you write in the intake and onboarding forms, and the food diary photos you upload: your goals, symptoms, conditions, medication and what you eat. I need it to give you safe, useful advice. | For the length of our work together, then [ 12 ] months unless you ask me to delete it sooner. |
| Food diary photos | Only if you are on a programme that includes one. Stored in a private file store, reachable only through a signed link - not a public address. | Deleted when the programme ends, or whenever you ask. |
| How you use the site | Only if you accept analytics cookies: which pages are visited and which links are clicked. Never your name. | Up to 14 months. |
Health information deserves a separate word
What you tell me about your health is sensitive, and the law treats it that way. I collect it only because you have asked me for nutrition support and have given it to me for that purpose, and I use it for nothing else.
It is never sold, never used for advertising, and never shared with anyone who is not listed below. Your food diary photos sit in a private store behind a signed link that cannot be guessed, and you can ask me to delete them at any point - including before we finish.
Who else touches your data
I run this on my own, with a small number of services doing specific jobs. Each one only gets what it needs for that job.
- Stripe - payments. Gets your name, email and payment details.
- Cal.com - booking. Gets your name, email and the time you picked.
- Typeform - the intake and onboarding forms. Gets what you type into them.
- Resend - email. Gets your name and email so I can send what you asked for and the newsletter.
- Vercel - hosting and the private store holding food diary photos.
- Google Analytics - which pages are useful. Only loads if you accept analytics cookies.
- Meta (Facebook and Instagram) - measuring whether my ads reach anyone. Only loads if you accept marketing cookies.
- Google Meet - where the video sessions happen.
Cookies
Nothing but the essentials runs until you choose. Before you answer the banner, no analytics or advertising cookies are set at all - I checked this, not just configured it.
Accept and two things switch on: Google Analytics, which tells me which pages help people, and the Meta pixel, which tells me whether my Instagram and Facebook ads reach anyone. Choose "Only necessary" and neither ever loads.
You can change your mind whenever you like through "Cookie settings" at the bottom of any page. The site works exactly the same either way.
Where your data goes
Some of the services above are based in the United States, so your data may be handled there. Each of them commits to the safeguards European law requires for transfers outside the EU - standard contractual clauses, and for the American ones, certification under the EU-US Data Privacy Framework.
What you can ask me to do
Whatever the law where you live, you can ask me for all of this:
- A copy of everything I hold about you.
- A correction, if something is wrong.
- Deletion. If we are mid-programme I will say what I need to keep and why, but your diary photos can go immediately.
- Your data in a portable file, to take elsewhere.
- That I stop using it for something - marketing, for instance.
- That I withdraw a consent you gave earlier. That does not undo what was lawful before you withdrew it.
If you are not happy with how I handle it
Tell me first - most things are a misunderstanding I can fix the same day. If that does not resolve it and you are in the EU or the UK, you have the right to complain to your national data protection authority.
Changes to this policy
If what I collect changes, this page changes with it, and the date at the top moves. I will not quietly start doing something this page does not mention.
Questions about any of this? hello@jessicadietitian.com. Back to the site.