PRIVACY POLICY

1. Data Controller

The data controller for all personal data processed in connection with this website and the Elorand practice is:

Elorand operates in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

Elorand collects personal data through the following channels and for the following purposes:

2.1 Website Contact Form

When you submit an enquiry via the contact form, we collect: your name, email address, the enquiry type you select, and the content of your message. This data is used solely to respond to your enquiry and, where applicable, to arrange a consultation.

2.2 Client Engagement Data

In the course of a nutritional guidance engagement, we collect: dietary log records (seven-day food diaries), health background information relevant to dietary assessment (including food sensitivities, activity level, and stated objectives), session notes, and plan documents. This data is collected with your explicit consent and is used solely to provide the nutritional guidance service.

2.3 Website Usage Data

When you visit the elorand.info website, standard web server logs may record your IP address, browser type, pages visited, and visit duration. This data is used for website performance monitoring and security purposes only. It is not used for individual profiling.

3. Legal Basis for Processing

Elorand processes personal data on the following legal bases:

• Contract performance: data necessary to carry out a nutritional guidance engagement is processed under the legal basis of contract performance — i.e., to deliver the service you have requested.
• Explicit consent: where dietary and health-background data is collected as part of a client engagement, processing is based on your explicit written consent, which can be withdrawn at any time.
• Legitimate interests: website performance and security monitoring is conducted on the basis of legitimate interests, where those interests do not override your data protection rights.

4. Data Retention

Contact form enquiries are retained for a maximum of 12 months from the date of receipt, after which they are permanently deleted unless they have resulted in a client engagement.

Client engagement records — including dietary logs, session notes, and plan documents — are retained for a period of five years following the conclusion of the engagement. This retention period reflects the practical utility of longitudinal records for clients who return for a further engagement.

You may request earlier deletion of your data at any time by contacting us at [email protected]. Deletion requests are processed within 30 days.

5. Data Sharing and Third Parties

Elorand does not sell, rent, or share your personal data with any third party for marketing or commercial purposes. Client dietary and health-background data is never disclosed to any third party without your explicit written consent.

We may use limited third-party services for website hosting and email routing. These service providers operate as data processors under contractual data processing agreements and are permitted to use your data only as directed by Elorand.

Where required by law — for example, in response to a valid request from a law enforcement authority — Elorand may disclose data in accordance with applicable legal obligations.

6. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request correction of inaccurate or incomplete data.
• Right to erasure: you may request deletion of your personal data, subject to applicable retention obligations.
• Right to restrict processing: you may request that we limit processing of your data in certain circumstances.
• Right to data portability: where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you consider that your data has been handled unlawfully.

7. Cookies

The elorand.info website uses cookies for site functionality and performance analysis. Full details of the cookies used, their purpose, and how to manage your preferences are set out in our Cookie Policy.

You can manage your cookie preferences at any time using the Cookie Settings option in the footer of this website.

8. Security

Elorand takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. The website is served over HTTPS. Client engagement records are stored in password-protected systems with restricted access.

No method of electronic transmission or storage is entirely sesupport. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under UK GDPR.

9. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is noted at the top of this document. Significant changes will be communicated directly to active clients by email.

Your continued use of the website following an update constitutes acceptance of the revised policy. If you do not accept the revised policy, you should discontinue use of the site and contact us to arrange deletion of any data we hold.