Privacy Policy
 

Last updated: 8 November 2026
 

1. Introduction

I am Paulina Wrona, an HCPC Registered Dietitian offering online dietetic consultations and home visits in Peterborough and the surrounding areas.

I am committed to protecting your privacy and treating your personal information with care, confidentiality and respect.
 

This Privacy Policy explains how I collect, use, store and protect your personal information when you visit my website, make an enquiry, request a consultation or use my dietetic services.

Your personal information is handled in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
 

2. Who Is Responsible for Your Personal Information?

I am the data controller responsible for deciding how and why personal information is processed in connection with my independent dietetic practice.

Paulina Wrona
HCPC Registered Dietitian
HCPC Registration Number: DT036174

Business address:
4 Channing Road
Peterborough
PE1 5FH
United Kingdom

Email: contact@paulinawronadietitian.co.uk

Website: https://paulinawronadietitian.co.uk

If you have questions about how your personal information is handled, you can contact me using the details above.
 

3. Personal Information I Collect

Depending on how you interact with my website and services, I may collect the following information:

Contact and identification information

Your name, email address, telephone number and, where relevant, your address for a home visit.

Appointment information

Details of consultation requests, appointment dates, booking arrangements and related communications.

Health and dietary information

Where necessary for providing dietetic services, this may include relevant medical history, health conditions, medications, food allergies, dietary habits, nutritional concerns and other information relevant to your care.

Communication records

Information provided when you contact me by email, telephone, website forms or other agreed communication methods.

Administrative and payment information

Information required to manage invoices, payments and business records.

Technical and website information

Information such as IP addresses, browser types, device information and data collected through cookies or similar website technologies.

I aim to collect only the information reasonably necessary for the purpose for which it is required.
 

4. How I Collect and Use Your Information

I may collect personal information directly from you when you:

• Complete a website enquiry form.

• Request or arrange a consultation.

• Contact me by email or telephone.

• Provide information before or during a dietetic consultation.

• Communicate with me about ongoing dietetic support.

• Visit or interact with my website.

Your information may be used to:

• Respond to enquiries and provide information about my services.

• Arrange, confirm, reschedule or manage appointments.

• Provide personalised dietetic assessment, advice and support.

• Maintain appropriate clinical and administrative records.

• Communicate with you about your consultations.

• Manage invoices and payment records.

• Comply with applicable legal and professional obligations.

• Protect the security and functionality of my website.

Where information is necessary to arrange or provide a consultation, choosing not to provide it may mean that I cannot offer the requested service.
 

5. Lawful Bases for Processing Personal Information

Under Article 6 of the UK GDPR, personal information must be processed on an appropriate lawful basis.

Depending on the purpose, I may rely on the following:

Performance of a contract — Article 6(1)(b)

Where processing is necessary to arrange or provide dietetic services, or to take steps at your request before entering into a contract.

Legal obligation — Article 6(1)(c)

Where processing is necessary to comply with applicable legal requirements, including relevant financial or regulatory obligations.

Legitimate interests — Article 6(1)(f)

Where processing is necessary for the legitimate interests of operating and administering my practice, responding to enquiries, maintaining appropriate business communications and protecting website security, provided those interests are not overridden by your rights and freedoms.

Consent — Article 6(1)(a)

Where consent is the appropriate lawful basis for a particular activity, such as certain optional communications.

Optional cookies and similar technologies are also subject to applicable privacy and electronic communications requirements.

The lawful basis applied depends on the specific purpose for which information is processed.
 

6. Health Information and Special Category Data

Health information is classified as special category personal data under the UK GDPR and is subject to additional legal protection.

Where processing is necessary for the provision of dietetic assessment, care or treatment, I rely on Article 9(2)(h) of the UK GDPR, together with the applicable health or social care condition in Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018.

This processing is undertaken in connection with professional healthcare services and the confidentiality obligations applicable to an HCPC Registered Dietitian.

Health information is used only where relevant and necessary for providing appropriate dietetic services or meeting applicable professional and legal obligations.

Consent to receive dietetic care is separate from the lawful basis used to process personal information.

Where another lawful condition is required for a different purpose, the appropriate condition will be considered before the information is processed.
 

7. Confidentiality and Information Security

I take the confidentiality and security of personal and health information seriously.

As an HCPC Registered Dietitian, I am required to follow professional standards relating to confidentiality, record-keeping and the responsible handling of information.

I take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse or disclosure.

Information is shared only where necessary and where an appropriate legal or professional justification applies.

This may include sharing relevant information with other healthcare professionals, such as your GP, where appropriate for your care and permitted under applicable confidentiality and data protection requirements.

Information may also be disclosed where required by law or where disclosure is otherwise legally justified, including in relevant safeguarding circumstances.
 

8. Website Enquiries and Online Bookings

My website is built and hosted using Wix.

Website forms allow visitors to contact me and make general enquiries about my services.

Wix Bookings may be used to request a consultation. Appointment requests are subject to availability and manual confirmation.

Information submitted through these services may be processed and stored using Wix systems for the purposes of managing enquiries and appointment requests.

Please avoid submitting detailed medical histories, diagnoses, medication lists or other sensitive health information through general contact or booking forms.

Where additional health information is required before a consultation, I will provide appropriate instructions on how to submit it.
 

9. Online and Telephone Consultations

Dietetic consultations may take place by telephone, video call or another mutually agreed communication method.

The communication method will be selected according to the needs of the consultation and the suitability of the available service.

Where third-party communication platforms are used, relevant personal information may be processed by the service provider in accordance with its applicable privacy terms and data protection arrangements.

Appropriate consideration will be given to confidentiality and the secure handling of information during consultations.
 

10. Sharing Information with Third Parties

I may use trusted third-party service providers to support the operation of my website and the administration of my dietetic practice.

These may include providers of:

• Website hosting, forms and booking services, including Wix.

• Email and communication services.

• Telephone and video consultation services.

• Secure clinical record-keeping, where applicable.

• Accounting and administrative services.

Personal information is shared only where necessary for the relevant purpose and subject to applicable data protection and confidentiality requirements.

Some providers may process information on my behalf, while others may act as independent data controllers for particular activities.

I do not sell your personal information.