Privacy Policy

We collect the information you give us (like your name and email when you download a guide, or your details when you join a programme), plus limited technical and analytics data about how the website is used. We use it to deliver what you signed up for, to send you emails you asked for, and, only if you consent to marketing cookies, to measure our advertising. We never sell your data. You can unsubscribe, ask for a copy of your data, or ask us to delete it at any time.

Our hosting provider processes technical data such as your IP address and browser type to serve the site securely. Cookies beyond those strictly necessary are only set with your consent, managed through our cookie banner.

We collect your first name and email address so we can send you the guide and follow-up emails related to it, including occasional emails about our programmes. Every email includes an unsubscribe link, and unsubscribing stops these emails immediately. The legal basis is your consent.

Your checkout is handled by Circle (our community platform) and Stripe (our payment processor). We receive your name, email address, and subscription details. We do not see or store your full card details; those are handled by Stripe.

We use this information to provide your membership, manage billing, and send you service emails about your membership, including reminders before your renewal date. The legal basis is the performance of our contract with you.

If you join the programme, we ask about your goals, lifestyle, and relevant health information (for example energy, sleep, or health markers) through forms, currently provided via Google Forms. Health information is special category data under GDPR, and we only process it with your explicit consent, which we ask for on the form itself.

We use it solely to support you within the programme. You can decline to provide it, and you can withdraw consent at any time by contacting us.

Discovery call bookings and clinical records for one to one work are held in Practice Better, our practice management platform. As a client we collect the information needed to provide dietetic care, which may include health information processed with your explicit consent and handled in line with professional record-keeping standards for dietitians.

If you email us or message us, we use your details to respond. The legal basis is our legitimate interest in handling enquiries.

We use internal reporting tools to understand how the business is performing and to manage memberships, for example subscription and engagement figures and upcoming renewal dates drawn from Stripe and Circle. This is used only for running the business and supporting members, and the legal basis is our legitimate interest in managing our services.

We use Cookiebot to manage cookie consent. Strictly necessary cookies always run. Everything else stays off until you choose to allow it:

You can change or withdraw your cookie choices at any time through the cookie settings link on the website. A full list of the cookies in use is available on our Cookies page.

If you subscribe to Nourish to Flourish, we send a conversion event to Meta from our server so we can measure and pay for advertising accurately. This includes your email address and name in hashed (scrambled) form, the subscription value, and the plan type. It does not include your health information, and it does not include your IP address.

Meta uses hashed data to match the event to an ad interaction where one exists. More detail is available in Meta's own privacy documentation.

We use trusted service providers to run the business. Each processes data on our behalf under appropriate data protection terms, or acts as an independent controller for its own limited purposes:

A small number of trusted team members and assistants who help us run the business may also access personal data where needed for their role, for example to send membership service emails. They are bound by confidentiality obligations.

We do not sell personal data, and we do not share it with anyone else except where the law requires it.

Some of these providers are based in or store data in the United States. Where data leaves the European Economic Area, it is protected by approved safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

We keep personal data only as long as needed for the purpose it was collected. As a guide: email subscriber data is kept until you unsubscribe or after a long period of inactivity; membership and payment records are kept for the periods required by tax law (generally six years); health information collected for programme support is kept while you are a member and deleted within 12 months after your membership ends.

Clinical records for one to one dietetic work are kept for the longer periods required by professional record-keeping obligations.

Under GDPR you have the right to:

To exercise any of these, email info@sineadodonovan.com. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Data Protection Commission (www.dataprotection.ie), though we would appreciate the chance to resolve it with you first.

Our website, programmes, and services are designed for adults and are not directed at anyone under 18. We do not knowingly collect personal data from children.

We will update this policy when our practices change, for example when we add new tools or services, and the date at the top will always reflect the latest version. Significant changes affecting members will be communicated by email.

Cineálta Health Limited, trading as Sinéad O'Donovan Nutrition and Dietetics

51 Bracken Road, Dublin 18, D18 CV48, Ireland

Email: info@sineadodonovan.com

Company registration number: 818711