Legal
Privacy Policy
How WellnessLab collects, uses and protects your personal data under UK and EU data protection law.
DRAFT — pending final legal review. This page is a working draft prepared ahead of the client supplying final legal text. It must not be treated as a finished, legally reviewed Privacy Policy until Dott.ssa Assunta Siani and/or her legal adviser have approved it.
Who we are
This website is operated by Dott.ssa Assunta Siani, trading as WellnessLab (“we”, “us”, “our”), a nutrition practice based at Corso Vittorio Emanuele 78, 84014 Nocera Inferiore (SA), Italy, with a further consulting base in Dundee, Scotland, and online consultations offered to clients in the UK, Italy and elsewhere. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, WellnessLab is the data controller responsible for your personal data.
Contact: hello@assuntasiani.com · +39 331 78 35 485 (Nocera Inferiore) · +39 349 06 22 884 (Dundee).
What personal data we collect
Depending on how you interact with us, we may collect:
- Contact details you give us — name, email address, phone number, and preferred practice location — when you submit the contact form or book a consultation.
- Appointment details — preferred day and time, service of interest, and any message you send us when requesting a booking.
- Health and nutrition information you choose to share with us before or during a consultation, which is “special category data” under Article 9 GDPR.
- Technical and usage data collected via cookies and similar technologies once you consent to them — see our Cookie Policy for details.
How we use your data, and our legal basis
- To respond to enquiries and booking requests — necessary to take steps at your request before entering into a consultation with you (Article 6(1)(b) GDPR).
- To provide nutrition consultations, including processing health information you share with us — based on your explicit consent (Article 9(2)(a) GDPR), which you may withdraw at any time.
- To keep records required by professional and tax obligations — necessary for compliance with a legal obligation (Article 6(1)(c) GDPR).
- To understand how visitors use this website (analytics) — only with your prior consent, given via the cookie banner (Article 6(1)(a) GDPR).
- To send occasional updates about the practice, where you have opted in — based on your consent, which you can withdraw at any time.
Sharing your data
We do not sell your personal data. We may share limited data with trusted service providers who process it on our behalf and under our instructions, such as our website host, form and booking software provider, and (once enabled) website analytics and email providers. We may also disclose data where required by law or to protect our legal rights.
International transfers
Because we operate between Italy and the UK, your data may be processed in either country. Both are subject to equivalent data protection standards (the EU GDPR and the UK GDPR respectively). Where a service provider is located outside the UK/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum.
How long we keep your data
We keep enquiry and booking data only as long as needed to respond to you or provide our services, and client health/consultation records for the period required by applicable professional and tax record-keeping obligations, after which they are securely deleted or anonymised.
Cookies
This site uses a cookie consent banner to ask for your permission before setting any non-essential cookie. See our Cookie Policy for full details and to manage your preferences at any time.
Your rights
Under the GDPR and UK GDPR, you have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected (rectification);
- Ask us to delete your data (erasure), in certain circumstances;
- Restrict or object to certain processing;
- Receive your data in a portable format;
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal; and
- Lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali; in the UK, the Information Commissioner’s Office (ICO).
To exercise any of these rights, contact us at hello@assuntasiani.com.
Children’s privacy
Our services are intended for adults. We do not knowingly collect personal data from children without appropriate parental or guardian consent.
Changes to this policy
We may update this policy from time to time. The current version will always be available on this page.
Contact us
Questions about this policy or your data can be sent to hello@assuntasiani.com.