Privacy Policy
Privacy Policy
GoodFlaura Nutrition
Last updated: 4 November 2026
1. Who We Are
GoodFlaura Nutrition is an independent nutritional therapy practice operated by Laura Higgins, a sole trader based in Kent, England.
Laura holds a Diploma in Nutritional Therapy from the College of Naturopathic Medicine (CNM), awarded with Distinction, and is registered with the Association of Naturopathic Practitioners (ANP) and the General Naturopathic Council (GNC).
Laura Higgins, trading as GoodFlaura Nutrition, is the data controller responsible for determining how and why personal information is collected, used and stored.
We are registered with the Information Commissioner's Office (ICO).
This Privacy Policy explains how we handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
It applies to visitors to our website, prospective clients and clients receiving nutritional therapy services.
Contact details
GoodFlaura Nutrition
Laura Higgins
Email: laura@goodflaura.com
Website: www.goodflaura.com
2. What Personal Information We Collect
We collect personal information necessary to provide nutritional therapy services and manage our practice.
Depending on how you interact with GoodFlaura Nutrition, this may include:
Personal and contact information
Full name and date of birth
Email address, telephone number and postal address
Emergency contact information, where provided
GP or other healthcare professional details
Health and nutritional information
Medical history, symptoms and diagnosed conditions
Current medications and supplements
Relevant family medical history
Dietary habits, food diaries and nutritional preferences
Lifestyle information, including physical activity, sleep and stress
Relevant laboratory tests and medical reports
Consultation notes, nutritional assessments and personalised plans
Progress updates and communications relating to your care
Administrative and payment information
Appointment bookings and attendance
Services and programmes purchased
Invoices, payment status and transaction records
Communications and enquiries
Website and marketing information
Information submitted through website contact forms
Newsletter subscriptions and communication preferences
Website usage information and cookie preferences, where applicable
Health information is classified as special category personal data under UK GDPR and is subject to additional legal protections.
We aim to collect only information that is relevant and reasonably necessary for the purposes described in this policy.
3. How We Use Your Information
We use personal information to:
Respond to enquiries and arrange discovery calls and appointments
Assess suitability for nutritional therapy
Understand your nutritional and lifestyle needs
Provide personalised nutritional therapy consultations and ongoing support
Prepare individualised nutrition, supplement and lifestyle recommendations
Monitor progress and adjust recommendations where appropriate
Communicate about appointments, care plans and follow-ups
Process payments, issue invoices and manage subscriptions
Maintain accurate and confidential client records
Meet applicable legal, professional, insurance and accounting obligations
Respond to complaints, resolve disputes and protect legal rights
Maintain and improve our website and services
Send newsletters, educational information and promotional communications where permitted
We do not sell your personal information.
We do not use identifiable health information for targeted advertising based on medical conditions.
4. Our Legal Bases for Processing Personal Information
Under Article 6 of the UK GDPR, we rely on the following lawful bases where applicable.
Performance of a contract — Article 6(1)(b)
Where processing is necessary to arrange and deliver nutritional therapy services, manage appointments and fulfil our contractual obligations to you.
Legal obligation — Article 6(1)(c)
Where processing is necessary to comply with applicable legal requirements, including tax and accounting obligations.
Legitimate interests — Article 6(1)(f)
Where processing is necessary for legitimate business purposes, including responding to enquiries, practice administration, information security, handling complaints and protecting legal rights, provided those interests are not overridden by your rights and freedoms.
Consent — Article 6(1)(a)
Where consent is the appropriate lawful basis, including certain optional marketing communications.
Special Category Health Information
GoodFlaura Nutrition collects and processes sensitive health information for the purpose of providing personalised nutritional therapy services.
For personal information necessary to deliver our services, we generally rely on Article 6(1)(b) — performance of a contract.
For special category health information, we rely on Article 9(2)(a) — explicit consent.
Before collecting and processing health information for nutritional therapy, we ask clients to provide explicit consent through our client onboarding and informed consent process.
You may withdraw your consent at any time by contacting laura@goodflaura.com.
Withdrawal of consent does not affect processing already carried out lawfully. However, withdrawing consent to the processing of health information may mean that we can no longer provide personalised nutritional therapy services.
Certain information may continue to be retained or processed where another applicable lawful basis and, for special category information, a valid Article 9 condition applies, including where necessary for the establishment, exercise or defence of legal claims.
5. How We Collect Your Information
We collect personal information directly from you when you:
Contact us through our website, email or booking system
Book a discovery call or nutritional therapy appointment
Complete pre-consultation questionnaires, consent forms or food diaries
Attend consultations or communicate through Nurish Pro
Provide laboratory results, medical reports or other relevant documents
Purchase services or make payments
Subscribe to our newsletter or other communications
Where appropriate and lawful, we may also receive relevant information from healthcare professionals, testing laboratories or other third parties, including where you have authorised such sharing.
6. How We Store and Protect Your Information
GoodFlaura Nutrition uses Nurish Pro as its primary practice management and clinical record system.
Client health records, questionnaires, food diaries, consultation notes, test results, nutritional plans, appointment information and related communications are stored and managed through Nurish Pro.
Nurish Pro is operated by Craftech Media Solutions Ltd and processes client information on our behalf under its applicable contractual data protection arrangements.
We also use Google Workspace for business email and general administration. Google Workspace is not intended to be our primary repository for clinical records, although relevant personal information may be contained in business correspondence.
We take appropriate technical and organisational measures to protect personal information, including:
Password-protected accounts and devices
Appropriate authentication and access controls
Restricted access to confidential client information
Secure practice management and communication systems
Procedures for managing, retaining and deleting information
Measures to reduce the risk of unauthorised access, disclosure, alteration or loss
We seek to ensure that third-party service providers handling personal information maintain appropriate data protection safeguards.
Although no electronic storage or communication system can guarantee absolute security, we take the confidentiality and security of client information seriously.
7. Third-Party Service Providers
We use selected third-party services to operate GoodFlaura Nutrition.
These include:
Nurish Pro — Practice Management
Used for client records, health questionnaires, consultation notes, nutritional plans, appointments, documents and client communications.
Nurish Pro processes relevant client information on our behalf in accordance with its applicable data processing arrangements.
Stripe — Payment Processing
Used to process payments and manage recurring subscription payments.
Stripe processes payment details and related transaction information in accordance with its applicable privacy and data protection arrangements.
GoodFlaura Nutrition does not require access to your full payment card details.
Google Workspace — Business Administration
Used for business email and administrative communications.
Squarespace — Website Hosting
Used to host and operate the GoodFlaura Nutrition website, including relevant website forms and functionality.
EmailOctopus — Email Marketing
Used, where implemented, to manage newsletter subscriptions and send marketing communications.
Calendly — Appointment Scheduling
Where used, Calendly may process information necessary to arrange discovery calls and appointments.
We share personal information with these providers only to the extent reasonably necessary for the relevant services.
Depending on the activity, providers may act as data processors, independent data controllers or in another legally recognised capacity.
We may also share relevant information with professional advisers, accountants, insurers or public authorities where lawful and necessary.
8. Confidentiality and Sharing Health Information
Your health and nutritional information is treated as confidential.
We do not routinely share your health information with your GP, other healthcare professionals, laboratories or third parties without an appropriate lawful basis.
Where relevant, we may ask for your permission to contact your GP or another healthcare professional to support coordinated care.
Where testing or other services are agreed, relevant information may be shared with the appropriate provider where lawful and necessary.
We may disclose information without consent where legally required or otherwise permitted by law, including in certain serious safety situations.
We only share information that is necessary and proportionate to the relevant purpose.
9. Online Consultations and Communication
Consultations may take place online or in person by prior arrangement.
Online consultations are conducted using appropriate video communication systems.
We may communicate with clients through Nurish Pro, email or other agreed communication methods.
Standard email is not always fully secure. Where appropriate, sensitive health information will be shared through more secure methods.
Clients are encouraged to use the designated client platform when sharing confidential health information.
10. International Data Transfers
Some third-party technology providers used by GoodFlaura Nutrition may process, store or access personal information outside the United Kingdom.
Our primary client management platform, Nurish Pro, uses third-party infrastructure and service providers to support its operations.
Where personal information is transferred outside the UK, we seek to ensure that appropriate safeguards are in place in accordance with UK data protection law.
These may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses or other legally recognised transfer mechanisms, where applicable.
We review relevant data processing arrangements with our service providers and take reasonable steps to protect personal information wherever it is processed.
11. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, professional and insurance requirements.
Client health and consultation records
Our standard retention period for adult client clinical records is seven years following the end of the client relationship, unless a different period is necessary or required by law.
This includes relevant questionnaires, consultation notes, nutritional plans, health information and related clinical correspondence.
Financial records
Invoices, transaction information and other accounting records are retained for the applicable statutory retention period.
General enquiries
Information relating to enquiries that do not result in a client relationship is retained only for an appropriate and proportionate period.
Marketing information
Newsletter subscription information is retained while you remain subscribed or until it is no longer required for the relevant purpose.
We may retain limited records of marketing preferences where necessary to respect unsubscribe requests.
When information is no longer required, we take appropriate steps to securely delete, anonymise or otherwise dispose of it.
Where information is held by third-party processors, deletion and return arrangements are also subject to the applicable data processing agreements.
12. Your Data Protection Rights
Under UK data protection law, you may have the right to:
Access: Request a copy of the personal information we hold about you.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of your information in certain circumstances.
Restriction: Ask us to restrict certain processing activities.
Objection: Object to processing based on particular lawful grounds.
Data portability: Request transfer of eligible information in a structured, commonly used, machine-readable format.
Withdraw consent: Withdraw consent at any time where processing relies on consent.
Automated decision-making: Exercise relevant rights concerning certain solely automated decisions, where applicable.
These rights are subject to legal conditions and exceptions.
For example, we may be required or otherwise legally entitled to retain certain records despite a request for deletion.
To exercise your rights, contact:
We will normally respond within one month, in accordance with applicable data protection requirements and permitted extensions.
You also have the right to complain to the Information Commissioner's Office at www.ico.org.uk.
13. Marketing Communications
GoodFlaura Nutrition may offer newsletters, educational resources, nutritional information and updates about our services.
Where required, we will obtain your consent before sending marketing communications.
Marketing preferences are separate from consent to nutritional therapy and the processing of health information.
You can unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us directly.
Unsubscribing from marketing does not affect essential communications relating to appointments, payments or services.
14. Website Cookies
Our website uses or may use cookies and similar technologies to support its operation and improve the user experience.
These may include:
Essential cookies required for website functionality
Analytics cookies used to understand website usage, where enabled
Marketing cookies or similar tracking technologies, where enabled
Where required by UK law, we will request consent before using non-essential cookies or similar tracking technologies.
You can manage your preferences through the cookie controls available on our website.
Further information about cookies and their purposes will be provided through our website's cookie notice or Cookie Policy.
15. Children's Privacy
GoodFlaura Nutrition currently provides nutritional therapy services to adults aged 18 and over.
We do not knowingly offer consultations to children or collect children's personal health information for the purpose of providing nutritional therapy services.
If we become aware that information has been collected inappropriately, we will take appropriate steps to address this.
16. Data Security and Breaches
We investigate suspected personal data breaches promptly and take appropriate action to contain and address any risks.
Where a personal data breach is reportable under UK GDPR, we will notify the Information Commissioner's Office without undue delay and, where feasible, within 72 hours of becoming aware of it.
Where legally required, affected individuals will also be informed.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, systems, business practices or legal requirements.
The latest version will be available on our website and, where appropriate, through our client onboarding materials.
We will communicate significant changes where required by law.
18. Questions and Complaints
If you have any questions or concerns about how GoodFlaura Nutrition handles your personal information, please contact:
Laura Higgins
GoodFlaura Nutrition
Email: laura@goodflaura.com
Website: www.goodflaura.com
We welcome the opportunity to address any concerns directly.
You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
You do not need to contact us before raising a complaint with the ICO.