1. Data We Collect & How We Get It

We only collect data that you directly provide to us. This includes:

• Contact Information: Your name, email address, and phone number when you fill out an inquiry form.

• Health & Lifestyle Data: Your dietary habits, health history, sleep patterns, medical conditions, and body metrics. This is classified as "Special Category Data" under GDPR.

• Technical Details: Your IP address and basic web browsing data, collected via necessary website cookies.

2. Our Legal Grounds for Using Your Data

Under the GDPR, we must have a lawful reason to use your data. We rely on:

• Contractual Necessity: We need your contact details to deliver the coaching services you purchase.

• Explicit Consent: We will never process your sensitive health or medical information without your explicit, written consent. You can withdraw this consent at any time.

• Legitimate Interests: We use website analytical data to ensure our site operates safely and effectively.

3. How We Use Your Personal Data

We use the information you share with us strictly to:

• Build your personalized nutritional protocols and lifestyle frameworks.

• Review your weekly 1:1 progress updates and check-in metrics.

• Process your service payments and issue digital receipts.

• Respond to your client support inquiries and emails.

4. Third Parties Who Process Your Data

We do not sell, rent, or trade your personal data. To run our coaching business effectively, we share necessary data with trusted, secure software providers:

• Payment Processing: Wix Payments, Stripe

• Administration: Secure cloud storage and professional business email providers.

5. Keeping Your Data Safe & Retaining It

• Security: We use industry-standard encryption, password-protected devices, and secure software platforms to prevent unauthorized access to your information.

• Retention: We only keep your records for as long as you are an active coaching client. Following the termination of our services, we retain your data for 6 years to fulfill administrative or potential legal requirements, after which it is permanently deleted.

6. Your Rights Under EU Law

You have powerful rights regarding your personal information. At any point, you can ask us to:

• Access: Provide you with a free copy of all the data we hold about you.

• Correct: Update or fix any inaccurate or incomplete personal information.

• Delete: Erase your personal and health records permanently from our systems.

• Stop: Pause processing your data or object to any marketing communications.

To enforce any of these rights, please email us directly at ivysong.nutri@gmail.com

7. Complaints

If you feel your data has been handled incorrectly, you have the right to lodge an official complaint. In Ireland, you can contact the Data Protection Commission (DPC).