Privacy Policy
Last updated: 20 October 2026
This policy explains how NutriSource Wellness (the sole trader business of Éadaoin Russell Smullen, Blackrock, Co. Dublin, Ireland) ("we", "us") handles personal data, in line with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. Contact: ers@nutrisourcewellness.ie.
What we collect
- Enquiry and contact details: name, email, phone and your message, when you use a form.
- Booking details: name, email, phone, the service and time you book, and any intake information you choose to give us before a consultation.
- Health related information you share in consultations or intake forms. This is special category data and is handled with extra care.
- Payment details are handled by our payment provider. We do not store card numbers.
- Newsletter details: name and email, only if you opt in.
- Technical data such as cookies, only where you consent. See the cookie policy.
Why we use it and our legal basis
- To reply to your enquiry and take bookings (contract and legitimate interests).
- To deliver nutrition services, keep client records and meet professional obligations (contract, and your explicit consent for health data).
- To send newsletters (your consent, which you can withdraw at any time).
- To meet tax and accounting duties (legal obligation).
Who we share it with
Only service providers needed to run the business, such as website hosting (SiteGround), our booking system, email and newsletter platform (MailerLite), and payment processors. They act on our instructions. We do not sell your data.
How long we keep it
Enquiries are kept for up to 24 months. Client records are kept for as long as needed to deliver and review services and for up to 7 years where tax or professional rules require it. Newsletter data is kept until you unsubscribe.
Your rights
You can ask to access, correct, delete, restrict or move your data, and to object to certain uses. Email us and we will respond within one month. You can also complain to the Data Protection Commission at dataprotection.ie.
Transfers outside the EEA
Some providers may process data outside the European Economic Area. Where they do, we rely on approved safeguards such as standard contractual clauses.