
Privacy Policy
The GLP-1 Nutrition Clinic
Last Updated: 31st August 2026
1. Who I amI am Soeng Ha Liu, a Registered Dietitian practising as The GLP-1 Nutrition Clinic. I am the data controller for the information described in this policy, which means I am responsible for deciding how it is used and for keeping it safe.Registered Dietitian, registered with the Health and Care Professions Council (HCPC), registration number DT29965
Member of the British Dietetic Association (MBDA)
Email: [email protected]
ICO registration number: ZC149456If you have any question about your information, please email me at the address above and I will respond within one month.
2. What information I collectIf you contact me through the website
Your name, email address, and whatever you choose to include in your message.
If you download a free guide or join my email list
Your name and email address, and a record of which emails you have been sent, opened, or clicked.
If you book a discovery call or a consultation
Your name, email address, telephone number where you provide one, and the appointment details.If you become a client:
Before your first appointment I ask you to complete a pre-consultation form. This includes information about your health, which the law treats as a special category of personal data requiring extra protection. Depending on your situation, this may cover:
Your medical history and any current diagnoses
The GLP-1 medication you are taking, the dose, and how long you have been on it
Other medications and supplements you take
Symptoms and side effects you are experiencing
Your weight history
A record of what you have been eating and your activity
Relevant blood test or other clinical results, where you choose to share them
Any relevant information about your family, work or living situation that affects your eating
During and after our sessions I keep clinical notes recording what we discussed, my assessment, and the advice I gave. This is a professional requirement for a registered health professional.If you pay for a service:
I do not see or store your card details. Payment is handled by Stripe or bank transfer, who process your payment information under their own privacy terms. I keep a record of the transaction for accounting purposes.Automatically, when you visit the websiteStandard technical information such as your approximate location, browser type, device, the pages you visited, and how you arrived at the site. See section 8 on cookies.
3. WHY I USE YOUR INFORMATION, AND MY LEGAL BASIS FOR DOING SOUK data protection law requires me to have a lawful basis for each use of your information. Mine are as follows.Replying to your enquiry
Legitimate interests: you have contacted me and expect a reply.Sending you a free guide you requested
Consent.Sending you nutrition emails and information about my services
Consent, which you can withdraw at any time.Arranging and delivering your consultation
Performance of a contract with you.Assessing your nutritional needs and providing dietetic advice
Performance of a contract with you, and, for health information, Article 9(2)(h) of the UK GDPR: the provision of health care by a health professional who is subject to a duty of professional confidentiality.Keeping clinical records
Legal obligation, and my professional obligations as an HCPC registered dietitian.Keeping financial records
Legal obligation under UK tax law.Understanding how the website is used
Consent, given through the cookie banner.On health information specifically. I only collect health information that is relevant to giving you safe and appropriate nutrition advice. I am bound by professional confidentiality as a condition of my HCPC registration.
4. WHO I SHARE YOUR INFORMATION WITHI do not sell your information, and I do not share it for advertising purposes.I use the following services to run my practice. Each of them processes some of your information on my behalf, under contract, and only for the purpose I have set.Carrd
Hosting this website and the contact form. Handles enquiry details.MailerLite
Email list, and sending guides and newsletters. Handles your name, email address and email engagement.Stan Store
Delivering paid and free digital guides. Handles your name, email address and purchase details.Zapier
Passing information between the tools above. Handles your name and email address.Calendly
Appointment booking. Handles your name, email address and appointment details.Google (Forms, Meet, Drive, Analytics)
Pre-consultation forms, video consultations, document storage and website analytics. Handles health information, consultation content and website usage.Google Mail
Email correspondence with you. Handles anything we discuss by email.Other circumstances in which I may share informationWith your prescriber, GP or another health professional, where doing so is in your interests. I will ask for your agreement first, except in the circumstances below.Without your agreement, only where I am required to by law, or where there is a serious risk to your safety or someone else's. As a registered health professional I have a duty to act if I have a serious concern about your welfare or a child's welfare. If this ever arises I will tell you what I have done and why, unless doing so would increase the risk.Information sent outside the UKSome of the services above are based in the United States. Where your information is transferred outside the UK, it is protected by either a UK adequacy decision or the International Data Transfer Addendum to the European Commission's standard contractual clauses, which are approved safeguards under UK law.
5. HOW LONG I KEEP YOUR INFORMATIONWebsite enquiries that do not lead to a booking: [12 months]Email list subscription: until you unsubscribe, or after [24 months] of no engagementClient clinical records: [8 years] after our last contactFinancial records: 6 years after the end of the relevant tax year, as required by HMRCWebsite analytics: [14 months], the standard retention period in Google AnalyticsWhen a retention period ends, I delete the information or anonymise it so it can no longer identify you.
6. HOW I KEEP YOUR INFORMATION SAFE- Devices and accounts are protected by strong, unique passwords and two-factor authentication where the service offers it
- Client records are stored in access-controlled accounts, not on shared or unsecured devices
- Video consultations take place on a platform requiring a link and are not recorded unless you have asked for a recording and agreed to it in writing
- I do not discuss your case with anyone outside the circumstances in section 4No system is completely secure, but if there were ever a breach affecting your information and it posed a risk to you, I would tell you and report it to the Information Commissioner's Office as the law requires.
7. YOUR RIGHTSYou have the right to:- Be told what information I hold about you and what I do with it
- See a copy of your information, usually within one month and free of charge
- Have mistakes corrected
- Have your information deleted, though I may need to keep clinical and financial records for the periods in section 5
- Restrict or object to how I use your information
- Withdraw consent at any time, for example by unsubscribing from my emails. This does not affect anything done before you withdrew it
- Receive your information in a portable format so you can pass it to another provider
- Complain to the Information Commissioner's OfficeTo use any of these rights, email me at [email protected]If you are unhappy with how I have handled your information, please tell me first so I have the chance to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You are entitled to complain to the ICO without contacting me first.Concerns about my professional conduct as a dietitian can be raised with the Health and Care Professions Council at hcpc-uk.org.
8. COOKIESThis website uses cookies, which are small files stored on your device.Essential cookies make the site work. These do not require your consent.Analytics cookies tell me how the site is being used, for example which pages people read and where they arrive from. These are only set if you accept them through the cookie banner.You can change your choice at any time, and you can block or delete cookies through your browser settings, though some parts of the site may then not work properly.9. CHILDRENMy services are for adults. I do not knowingly collect information from anyone under 18. If you believe a child has given me their information, please contact me and I will delete it.10. WHAT THIS WEBSITE IS NOTThe information on this website is general and is not personalised advice. It does not replace advice from your own prescriber, GP or healthcare team. I do not prescribe medication or advise on medication doses. Always speak to your prescribing team about your treatment.11. CHANGES TO THIS POLICYIf I change this policy I will update the date at the top. Where the change is significant and affects clients or subscribers, I will let you know by email.