Privacy Policy -

This Privacy Policy applies between you, the User of this Website, and Tania Thacker trading as Food Body Freedom, the owner and provider of this Website. Tania Thacker, trading as Food Body Freedom, takes the privacy of your information very seriously. This Privacy Policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website and our services.

This Privacy Policy should be read alongside, and in addition to, our Terms and Conditions, which can be found at: https://foodbodyfreedom.co/terms-conditions/.

Please read this Privacy Policy carefully.

1. Definitions and Interpretation

In this Privacy Policy, the following definitions are used:

Data	Collectively all information that you submit to Tania Thacker trading as Food Body Freedom via the Website or in connection with our services. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
Clinical Data	Special category personal data relating to your health, including but not limited to: intake forms, session notes, risk assessments, treatment records, and any health information you share with FBF practitioners. This data is subject to additional protections under UK GDPR.
Cliniko	The clinical practice management software used by Food Body Freedom to store and manage clinical records, appointments, session notes, and client communications. Cliniko is provided by Red Guava Pty Ltd and is hosted in Ireland (EU). Full details at cliniko.com.
Paid Memberships Pro	The member portal software used by Food Body Freedom to provide access to the FBF content library. Member portal accounts are created voluntarily by members themselves. Hosted on FBF’s WordPress website.
MailerLite	The email marketing platform used by Food Body Freedom for two purposes: (1) communications with gym and business partners, and (2) sending members the portal setup link. Member data in MailerLite is limited to name and email address and is not used for marketing. Provided by UAB MailerLite.
Cookies	A small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website.
Data Protection Laws	Any applicable law relating to the processing of personal Data, including but not limited to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
GDPR	The UK General Data Protection Regulation.
Tania Thacker trading as Food Body Freedom, we or us	Tania Thacker trading as Food Body Freedom of 61 Bridge Street, Kington, HR5 3DJ. ICO Registration Number: ZC105351
UK and EU Cookie Law	The Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 and 2018.
User or you	Any third party that accesses the Website and is not either (i) employed by Tania Thacker trading as Food Body Freedom and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Tania Thacker trading as Food Body Freedom and accessing the Website in connection with the provision of such services.
Website	The website that you are currently using, foodbodyfreedom.co, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

In this Privacy Policy, unless the context requires a different interpretation: the singular includes the plural and vice versa; references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this Privacy Policy; a reference to a person includes firms, companies, government entities, trusts and partnerships; “including” is understood to mean “including without limitation”; reference to any statutory provision includes any modification or amendment of it; the headings and sub-headings do not form part of this Privacy Policy.

2. Scope of this Privacy Policy

This Privacy Policy applies to the actions of Tania Thacker trading as Food Body Freedom and Users with respect to this Website and the services we provide. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.

For purposes of the applicable Data Protection Laws, Tania Thacker trading as Food Body Freedom is the “data controller”. This means that Tania Thacker trading as Food Body Freedom determines the purposes for which, and the manner in which, your Data is processed.

3. Data Collected

We may collect the following Data, which includes personal Data, from you:

(a) Website and contact data:

Name, job title, and profession
Contact information, such as email addresses and telephone numbers
Demographic information such as postcode, preferences, and interests
Information submitted through our website contact form

(b) Clinical and service data (collected from therapy clients and service users only):

Health and well-being information provided on intake forms
Session notes and treatment records were created during the course of therapy
Risk assessment information
Appointment history and correspondence related to your care
Consent forms and declarations

Clinical Data is a special category of personal data under UK GDPR and is subject to additional legal protections. We only collect and process Clinical Data with your explicit consent, which you will be asked to provide when you first access our services.

Business name, contact name, email address, and telephone number
Number of members or staff covered under a partnership agreement
Communications relating to the partnership

(d) Member portal data (where you choose to create a portal account):

Name and email address used to create your Paid Memberships Pro account
Login credentials (stored securely and never visible to FBF staff)
Content access history within the portal

(e) Group workshop data (where you attend a group workshop):

Your display name and video/audio during the session if your camera is on. You are never required to have your camera on.
Group workshops may be recorded for the FBF content library. You will be asked to consent before each workshop. You may attend with the camera and microphone off at any time. You can request the removal of your contribution from any recording by contacting hello@foodbodyfreedom.co.
Recordings are stored on Adilo, accessible only to FBF members via the secure password-protected portal.

(e) Group workshop data (where you attend a group workshop):

Your display name and video/audio during the session, if your camera is on
Group workshops may be recorded for the FBF content library. You will be asked to consent to recording before each workshop. You may attend with your camera off at any time. If you do not wish to be included in a recording, you may attend with the camera and microphone off, or contact us to request that your contribution be removed from any recording.
Recordings are stored on Adilo, our domain-restricted video platform, and are accessible only to FBF members via the secure portal

4. How We Collect Data

We collect Data in the following ways:

Data given to us directly by you, for example, when you contact us through the Website, by email, or through our contact form
Data collected automatically when you visit the Website, including your IP address, date and time of access, and browser information
Data collected via cookies, in line with your cookie settings (see Section 12)
Clinical Data collected through our secure intake forms hosted in Cliniko, which you complete before your first session
Member contact data shared with us by your gym or employer partner, solely to enable us to provide the FBF programme to you
Portal account data created by you when you choose to set up an account on the FBF member portal

5. Our Use of Data

Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience. Specifically, Data may be used by us for the following reasons:

Internal record keeping and practice administration
Providing therapeutic services and clinical care
Sending appointment confirmations, session reminders, and clinical correspondence via Cliniko
Sending you the FBF member portal setup link via Cliniko or, where that is not possible, via MailerLite
Providing access to the FBF content library via the member portal (Paid Memberships Pro)
Communicating with the gym and business partners about the FBF programme
Sending marketing communications to gym and business contacts via MailerLite (not to therapy clients)
Improvement of our services
Compliance with legal, regulatory, and professional obligations

We will only process your data where we have a lawful basis to do so. Our lawful bases are:

Explicit consent — for all Clinical Data and special category health information
Legitimate interests — for website contact data, member portal access, and business partner communications
Legal obligation — where we are required to retain or share data by law

6. Systems We Use to Store Your Data

Your data may be held in the following systems, depending on your relationship with Food Body Freedom:

System	What data it holds	Who it applies to	Where data is stored
Cliniko	Clinical records, session notes, intake forms, appointment history, risk assessments, email confirmations and reminders	Therapy clients and service users only	Ireland (EU) — GDPR compliant. AES-256 encryption.
Paid Memberships Pro	Name, email, self-created login credentials, content access history. Account created voluntarily by you.	Members who choose to create a portal account	FBF website server (Hostinger, EU). SSL encrypted.
MailerLite	Name and email address only. Used to send the portal setup link to all members, and for marketing communications to gym and business partners only.	All members (portal welcome email). Gym and business contacts (marketing).	EU servers. GDPR compliant. Member data not used for marketing.
Zoom	Display name and video/audio during group workshops only. Not used for 1:1 sessions (Cliniko telehealth used for those). Cameras off always permitted.	Website enquiry form submissions. IP addresses and analytics data are collected automatically.	Zoom servers (US). GDPR compliant. Recordings moved to Adilo (EU) straight after each session.
WordPress website	Name, email, self-created login credentials, and content access history. Account created voluntarily by you.	Website visitors and enquirers	Hostinger EU servers. Wordfence security. SSL encrypted.

7. Who We Share Data With

We may share your Data with the following groups of people for the following reasons:

Our employees, contractors, and professional advisors — to provide the services and obtain professional advice. All contractors are bound by confidentiality obligations.
Cliniko (Red Guava Pty Ltd) — to store and manage clinical records and appointments as described above.
MailerLite (UAB MailerLite) — to send the portal setup link to members, and marketing communications to gym partners only.
Gym and business partners — we share aggregate, anonymised programme reports only. We never share individual clinical data or identifiable information about service users with gym partners.
Regulatory or statutory authorities — where we are legally required to do so, for example, in connection with a safeguarding referral, mandatory reporting obligation, or court order.

We do not sell, rent, or trade your personal data to any third party for marketing purposes. We do not share clinical data with gym or employer partners under any circumstances.

8. Clinical Data and Retention

Clinical Data is a special category of personal data under UK GDPR and is subject to additional protections. We only collect and process Clinical Data on the basis of your explicit consent, which you provide through our intake and consent forms before your first session.

We retain Clinical Data in accordance with professional body guidance and applicable law:

Clinical records (session notes, intake forms, risk assessments, correspondence) are retained for a minimum of seven (7) years from the date of your last session.
FBF does not provide services to anyone under the age of 18.
After the applicable retention period, records are securely deleted or destroyed.

Even if you withdraw consent to therapy or request deletion of your data, we may be required to retain clinical records for the periods set out above in order to comply with our professional and legal obligations.

9. Keeping Data Secure

We will use technical and organisational measures to safeguard your Data, including:

Clinical data is stored in Cliniko, which uses AES-256 encryption and is hosted in Ireland in compliance with UK GDPR.
Our website uses SSL encryption (HTTPS) and is protected by Wordfence security software with regular malware scanning.
Access to systems holding personal data is restricted to authorised staff and contractors only.
All contractors who may access personal data sign confidentiality obligations as part of their engagement with FBF.
Our website is backed up weekly to Google Drive.

Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via: hello@foodbodyfreedom.co.

10. Data Retention

Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this Privacy Policy or until you request that the Data be deleted, subject to the following:

Clinical records — minimum 7 years from last session (see Section 8 above).
Member portal data (Paid Memberships Pro) — for the duration of your gym or employer’s partnership with FBF, plus 12 months. You may delete your own portal account at any time.
MailerLite member data — name and email address held only until your portal account is set up, after which you can unsubscribe. Unsubscribing from MailerLite does not affect your clinical care or Cliniko records.
Website enquiry data — for as long as necessary to respond to your enquiry and for reasonable record-keeping purposes thereafter.

Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

11. Your Rights

You have the following rights in relation to your Data:

Right to access — the right to request copies of the information we hold about you at any time. We will not charge you for this unless your request is manifestly unfounded or excessive.
Right to correct — the right to have your Data rectified if it is inaccurate or incomplete.
Right to erase — the right to request that we delete or remove your Data from our systems, subject to our legal and professional retention obligations (see Section 8 and 10).
Right to restrict our use of your Data — the right to block us from using your Data or limit the way in which we can use it.
Right to data portability — the right to request that we move, copy or transfer your Data.
Right to object — the right to object to our use of your Data, including where we use it for our legitimate interests.
Right to withdraw consent — where we process your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To make enquiries or exercise any of your rights, please contact us at: hello@foodbodyfreedom.co. We will respond within one calendar month.

If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/.

12. Transfers Outside the United Kingdom

Data which we collect from you may be stored and processed in and transferred to countries outside of the UK and European Economic Area (EEA). Specifically:

Cliniko stores data in Ireland, which is within the EEA and provides an adequate level of data protection.
MailerLite stores data on EU servers in compliance with UK GDPR.
Our website is hosted by Hostinger on EU servers.

Where any data transfer outside the UK or EEA is required, we will only transfer Data where it is compliant with data protection legislation, and the means of transfer provides adequate safeguards, for example, by way of a data transfer agreement incorporating the current standard contractual clauses.

13. Links to Other Websites

This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This Privacy Policy does not extend to your use of such websites. You are advised to read the Privacy Policy or statement of other websites prior to using them.

14. Changes of Business Ownership and Control

Tania Thacker trading as Food Body Freedom may, from time to time, expand or reduce our business, and this may involve the sale and/or the transfer of control of all or part of the business. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use the Data for the purposes for which it was originally supplied to us.

We may also disclose Data to a prospective purchaser of our business or any part of it. In the above instances, we will take steps with the aim of ensuring your privacy is protected.

15. Cookies

This Website may place and access certain Cookies on your computer. Tania Thacker trading as Food Body Freedom uses Cookies to improve your experience of using the Website and to improve our range of services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy is protected and respected at all times.

All Cookies used by this Website are used in accordance with current UK and EU Cookie Law. Before the Website places Cookies on your computer, you will be presented with a message bar requesting your consent to set those Cookies. You may deny consent to the placing of Cookies; however certain features of the Website may not function fully or as intended.

You can adjust your cookies preferences at any time at: https://foodbodyfreedom.co/cookie-settings/.

Type of Cookie	Purpose
Strictly necessary cookies	These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
Analytical / performance cookies	They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works.
Functionality cookies	These are used to recognise you when you return to our website. This enables us to personalise our content for you and remember your preferences.

16. General

You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably believe your rights will not be affected.

If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected.

Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.

17. Changes to This Privacy Policy

Tania Thacker trading as Food Body Freedom reserves the right to change this Privacy Policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the Privacy Policy on your first use of the Website following the alterations. You may contact Tania Thacker trading as Food Body Freedom by email at hello@foodbodyfreedom.co.

This Privacy Policy was last updated on 04 March 2026.

END OF PRIVACY POLICY