Privacy Policy

Last updated: March 2026

This privacy policy explains how Aoife Kavanagh Nutritional Therapy ("we", "us", "our") collects, uses, and protects your personal data when you visit kavnutrition.ie or make an enquiry about our services.

We are committed to protecting your privacy and handling your data in an open and transparent way, in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988 to 2018.

1. What data we collect

When you submit an enquiry through our contact form, we collect the following personal data:

• Your name
• Your email address
• Your phone number (if provided)
• The nature of your enquiry and any health information you choose to share

If you book a consultation, we may also collect additional health and dietary information relevant to providing our nutritional therapy services.

We also collect standard website analytics data such as pages visited and time on site. This is anonymised and does not identify you personally.

2. Why we collect your data

We collect and use your personal data for the following purposes:

• To respond to your enquiry and provide the nutritional therapy services you have requested
• To manage your appointments and maintain client records
• To send you information relevant to your consultations
• To comply with legal and professional obligations

We will never use your data for marketing purposes without your explicit consent, and we will never sell your data to third parties.

3. Legal basis for processing

We process your personal data on the following legal bases:

• Consent — when you submit an enquiry form and tick the consent checkbox
• Contract — when you book a consultation and we need to process your data to deliver the service
• Legitimate interests — to manage our business and respond to enquiries
• Legal obligation — where we are required to keep records for regulatory or professional reasons

Where we collect health-related information, which is considered special category data under GDPR, we do so only with your explicit consent.

4. How long we keep your data

• Enquiry data where no appointment is booked: deleted within 6 months
• Client consultation records: retained for 7 years from the date of your last appointment, in line with standard Irish healthcare record-keeping guidance
• Financial records: retained for 6 years in line with Revenue requirements

5. Who we share your data with

We do not sell or share your personal data with third parties for marketing purposes. We may share your data with the following trusted third parties only where necessary to provide our services:

• Squarespace — our website and form submission provider
• Acuity Scheduling — our appointment booking system
• Google Workspace — our email provider
• Stripe — our payment processor (payment card data is handled directly by Stripe and is never stored by us)

All third party providers are GDPR compliant and process your data only on our instructions.

We may also disclose your data where required by law or by a regulatory authority.

6. Your rights

Under GDPR you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct any inaccurate data
• Right to erasure — you can ask us to delete your data, subject to any legal obligations we have to retain it
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can ask us to provide your data in a portable format
• Right to object — you can object to us processing your data in certain circumstances
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at Use our contact form. We will respond within 30 days.

You also have the right to lodge a complaint with the Data Protection Commission (DPC) if you believe we have not handled your data correctly. You can contact the DPC at dataprotection.ie.

7. Cookies

Our website uses cookies to help it function and to understand how visitors use it. When you first visit the site you will be asked to consent to cookies. You can change your cookie preferences at any time using the cookie settings on our site.

We use the following types of cookies:

• Essential cookies — required for the website to function. These cannot be disabled.
• Analytics cookies — help us understand how visitors use the site so we can improve it. These are only set with your consent.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is stored on secure, GDPR-compliant platforms. Our website uses SSL encryption (https) for all data transmitted between your browser and our site.

9. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.