Privacy Policy

Introduction

Terrava Ltd ("we", "our", or "us") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your personal information when you use our nutrition services and website.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Collection

The data we collect includes personal information you provide to us directly and information we gather automatically when you use our services. We collect the following types of personal data:

• Contact information (name, email address, phone number, postal address)
• Health and dietary information (medical history, dietary preferences, allergies, weight loss goals)
• Payment information (billing address, payment method details)
• Communication records (emails, phone calls, consultation notes)
• Website usage data (IP address, browser type, pages visited, time spent on site)
• Cookie data and tracking information

How We Use Your Information

We use of your data is based on legitimate interests and consent. Specifically, we use your personal information to:

• Provide personalised nutrition consultations and meal planning services
• Create and deliver customised meal plans based on your health goals
• Communicate with you about your nutrition programme and progress
• Process payments for our services
• Send you service updates, appointment reminders, and important notices
• Improve our services and website functionality
• Comply with legal obligations and regulatory requirements
• Protect our business interests and prevent fraud

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our cookie usage, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal data. We may share your information with:

• Healthcare professionals involved in your care (with your consent)
• Payment processors for transaction processing
• Analytics providers (Google Analytics) for website improvement
• Marketing platforms (Google Ads) for advertising purposes
• Legal authorities when required by law

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Client records: 7 years after last consultation (in accordance with healthcare record keeping requirements)
• Payment records: 6 years for tax and accounting purposes
• Marketing data: Until you withdraw consent or request deletion
• Website analytics: 26 months (Google Analytics default retention)

Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data under certain circumstances
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. We ensure appropriate safeguards are in place for such transfers, including adequacy decisions and standard contractual clauses.

Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and indicating the revision date.

Contact Information

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us: