Privacy Policy

1. Data controller and contact

Rita Leichenko is responsible for the processing of personal data described in this policy.

For privacy questions or requests, contact me at rita.clinicalnutritionist@gmail.com.

2. Personal data I collect

Depending on how you interact with me, I may collect:

• Contact and communication data: your name, email address, and the content of messages you send.
• Booking and service data: appointment details, confirmation messages, intake information, and records needed to organise and provide consultations.
• Health and nutrition data: information you choose to provide about your health, medical history, medications, allergies, eating habits, goals, and other information relevant to nutrition support. Health data is considered sensitive personal data.
• Payment and administration data: payment status, bank-transfer references, invoices, and records required for accounting or legal purposes. This website does not collect card details.
• Technical data: IP address, browser and device information, requested pages, date and time of access, referring page, and security or error events that may be processed automatically when you use the website.

The website does not currently provide user accounts, a newsletter, or a public contact form.

3. Why I process personal data

I process personal data only where needed to:

• respond to enquiries and communicate with you;
• schedule, prepare, and provide nutrition consultations;
• send consultation links and agreed follow-up information;
• process and confirm payments;
• maintain appropriate client and business records;
• operate, secure, and improve the website; and
• comply with legal obligations or establish and defend legal claims.

Where the GDPR applies, processing may be based on steps taken at your request before entering into a contract, performance of a contract, a legal obligation, legitimate interests in operating and protecting the business, or your consent where consent is required. You may withdraw consent at any time, without affecting processing that took place before withdrawal.

4. Health information and confidentiality

Health and nutrition information is collected only when relevant to the consultation and is used to provide personalised nutrition education and support within my professional scope. Where required by applicable law, I will ask for your express consent before processing sensitive personal data.

Please do not send detailed health or medical information through public email or social media. If we decide to work together, appropriate intake information will be collected separately.

I do not sell or rent personal data, use client health information for advertising, or make decisions about clients using solely automated processing.

5. Service providers and other recipients

Personal data may be processed by trusted providers only where needed for the purposes described above. These providers may include:

• Cloudflare for website hosting, delivery, and security;
• Google Workspace services, including Gmail, Google Drive, Google Calendar, and Google Meet, for communication, booking, online consultations, and access-controlled file storage; and
• Banks and payment providers for payments, transaction records, and related administration.

Information may also be disclosed to professional advisers, courts, regulators, or public authorities when necessary to comply with the law, protect legal rights, or respond to a binding request. It is not otherwise shared with third parties unless you request it or consent to it.

6. International data transfers

Some technology providers operate internationally. As a result, personal data may be processed in Switzerland, the European Economic Area, the United Kingdom, the United States, or other countries in which a provider or its subprocessors operate.

Where a destination does not provide an adequate level of data protection, transfers are made using safeguards recognised by applicable law, such as contractual data-protection commitments, or another lawful exception where appropriate. Provider-specific processing is also governed by the relevant provider's terms and privacy information.

7. Website hosting, cookies, and analytics

Cloudflare may process technical request and security data when delivering this website. This is necessary to make the site available, maintain its security, and diagnose technical problems.

This website uses Google Analytics, a web analytics service provided by Google, to understand how visitors use the site and to improve its content and performance. Google Analytics may collect page views, session statistics, approximate location, and browser and device information. It uses cookies and similar technologies, including the _ga cookie, to distinguish visitors and sessions.

Analytics is used for website measurement and is not intended to collect your name, email address, health information, consultation details, or payment information. Google may process analytics data outside Switzerland as described in its privacy information. You can limit or delete cookies through your browser settings or use the Google Analytics opt-out browser add-on.

8. External links and social media

This website contains links to external services, including Instagram and, when configured, a Google appointment-booking page. When you follow an external link, the other provider processes data under its own privacy policy. This Privacy Policy does not control how those independent services process your data.

9. Data retention

Personal data is kept only for as long as necessary for the purpose for which it was collected. The retention period depends on the nature of the information, the duration of the client relationship, and applicable legal, accounting, professional, or dispute-resolution requirements.

When personal data is no longer required, it is deleted or anonymised unless continued retention is required or permitted by law. Data subject to a legal retention obligation may be restricted from other use until that period ends.

10. Data security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, or alteration. Measures include access controls and limiting access to information to where it is needed.

No internet transmission or storage system can be guaranteed to be entirely secure. Please contact me if you believe information relating to you has been compromised.

11. Your rights

Depending on the law that applies and subject to its conditions and exceptions, you may have the right to:

• ask whether your personal data is being processed and request access;
• request correction of inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to certain processing;
• withdraw consent where processing is based on consent; and
• request data portability where the legal requirements are met.

To exercise a right, email rita.clinicalnutritionist@gmail.com. I may need to verify your identity before responding. You may also contact the Swiss Federal Data Protection and Information Commissioner or another competent supervisory authority.

12. Changes to this policy

This Privacy Policy may be updated when services, providers, or legal requirements change. The latest version will be published on this page with an updated date.

Please also read the Terms & Conditions, which explain the terms that apply to nutrition consulting services.