Effective date: 11th June 2025

 

 

Privacy Policy

This Privacy Policy applies between you, the User of this Website, and Nishti Udeh, Director of Nishti’s Choice Ltd, the owner and provider of this Website (“we”, “our”, or “us”).

Nishti’s Choice Ltd takes the privacy of your information very seriously. This Privacy Policy explains how we collect, use, and protect any Data provided by you or collected by us in relation to your use of our Website and services.

This Privacy Policy should be read alongside our Terms and Conditions.

Definitions and Interpretation

In this Privacy Policy, the following definitions apply:

Data – all information you submit to Nishti’s Choice Ltd via the Website, including personal data as defined under Data Protection Laws.

Special Category Data – sensitive personal data including health information, as defined under the UK GDPR.

Cookies – small text files placed on your device when you use the Website.

Data Protection Laws – all applicable laws relating to personal data processing, including the UK GDPR and Data Protection Act 2018.

GDPR – the UK General Data Protection Regulation.

Nishti’s Choice Ltd / we / us – a company incorporated in England and Wales.

User / you – any third party accessing the Website who is not employed by or providing services to us.

Website – www.nishtischoice.com and any related subdomains or platforms unless otherwise stated.

Scope of this Privacy Policy

This Privacy Policy applies only to data collected through our Website and services. It does not extend to external websites linked from our Website.

For the purposes of Data Protection Laws, Nishti’s Choice Ltd is the data controller.

Data We Collect

We may collect the following Data:

  • Name

  • Email address

  • Contact information

  • Payment and billing details

  • IP address (automatically collected)

  • Browser type and version

  • Operating system

  • Website usage data (pages visited, time spent, navigation patterns)

Special Category (Health) Data

As part of providing dietetic and clinical services, we may collect and process sensitive personal data, including:

  • Medical history

  • Allergy information (including suspected or diagnosed CMPA and other food allergies)

  • Dietary intake and feeding history

  • Growth data and measurements

  • Medications and relevant health information

  • Information relating to infants and children provided by parents or guardians

This data is processed only where necessary for the provision of healthcare services and with your explicit consent.

Children’s Data

We may collect and process personal data relating to children where this is provided by a parent or legal guardian as part of our services. We do not knowingly collect data directly from children without parental consent.

How We Collect Data

We collect Data in the following ways:

  • Data you provide directly

  • Data collected automatically

  • Data received from third parties

Data Provided by You

We collect Data when you:

  • Contact us via email or Website

  • Register for services or programmes

  • Make a purchase

  • Sign up for marketing communications

  • Use our services or resources

Data from Third Parties

We may receive Data from:

  • Social media platforms (e.g. Instagram)

  • Payment processors

  • Email marketing providers

Data Collected Automatically

When you use our Website, we may automatically collect:

  • IP address

  • Device and browser information

  • Pages visited and actions taken

  • Referral sources

Our Use of Data

We may use your Data to:

  • Provide access to services and content

  • Deliver clinical and dietetic support

  • Process payments and manage accounts

  • Communicate with you

  • Improve Website functionality and services

  • Send marketing communications (where permitted)

Legal Basis for Processing

We process your Data based on:

  • Contractual necessity – to provide services you have requested

  • Legitimate interests – to operate and improve our business

  • Consent – for marketing and processing health data

You may withdraw consent at any time.

Who We Share Data With

We may share your Data with trusted third parties where necessary, including:

  • Payment processors (e.g. Stripe)

  • Website hosting providers

  • Email marketing platforms

  • IT and system providers

  • Professional advisers

  • Legal or regulatory authorities where required

All third parties are required to handle your data securely and in accordance with Data Protection Laws.

Data Security

We implement appropriate technical and organisational measures to protect your Data, including:

  • Secure systems and password protection

  • Encrypted payment processing

  • Restricted access to personal data

If you suspect any misuse or breach of your data, please contact us immediately at: Info@nishtischoice.com

Data Retention

We retain personal data only as long as necessary:

  • Enquiries: up to 12 months after last contact

  • Client health records: up to 8 years in line with professional guidance

  • Financial records: as required by UK law

Data may remain in secure backup systems for a limited period after deletion.

Your Rights

Under Data Protection Laws, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

To exercise your rights, contact us using the details below.

If you are dissatisfied, you may contact the Information Commissioner’s Office (ICO):
https://ico.org.uk/

Cookies

We use cookies to:

  • Improve user experience

  • Analyse Website performance

  • Enable essential functionality

Where required, we will request your consent before placing non-essential cookies on your device.

You can manage cookies through your browser settings. Disabling cookies may affect Website functionality.

Links to Other Websites

Our Website may contain links to external websites. We are not responsible for their privacy practices.

Data Accuracy

You are responsible for ensuring that any personal data you provide is accurate and up to date.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on this page and take effect immediately.

Contact Us

If you have any questions about this Privacy Policy or your data:

Nishti Udeh
Director, Nishti’s Choice Ltd
Email: Info@nishtischoice.com

Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.