Skip to content

Privacy

Privacy notice.

A working draft describing what The Composition Desk collects, why it is collected, how long it is kept and what you can ask for. Prepared for legal review.

  • Draft — not yet reviewed
  • Editable draft

Internal note — remove before publication

This document is a professional editable draft prepared for review by a qualified legal advisor. It intentionally does not state a business address, registered entity or governing jurisdiction; those must be supplied and confirmed by the owner. Do not treat this text as legal advice.

01

Who this notice covers

This notice applies to visitors to this website, prospective clients who submit an assessment, and active clients using the client portal.

The identity of the data controller, its registered details and the governing jurisdiction are to be confirmed by the owner of the practice and inserted here before publication.

02

Information collected

Enquiry information: name, email address, chosen topic and the content of your message.

Assessment information: contact details, goals, current nutrition patterns, food preferences, allergies and intolerances, training and activity, lifestyle and sleep, health-screening responses including any conditions, medications or supplements you choose to disclose, previous approaches and adherence barriers, and your preferred engagement.

Client portal information: nutrition targets set by your coach, weekly check-in entries, self-recorded measurements, documents and images you upload, and messages exchanged with your coach.

Technical information necessary to operate and secure the site.

03

Why it is collected

To assess whether an engagement is appropriate, to build and adjust your nutrition protocol, to communicate with you, and to maintain an accurate record of the coaching relationship.

Health-screening information is collected solely so the practice can work within its scope and refer you appropriately. It is not used to diagnose, treat or assess any medical condition.

05

Client data separation

Client records are scoped to the individual account they belong to. One client's information is never visible to another client.

Once the client portal backend is connected, access is enforced server-side per authenticated user, in addition to any interface-level restrictions.

06

Sharing and processors

Client information is not sold, rented or used for advertising.

Service providers used to operate the practice — such as hosting, email delivery and payment processing — are to be listed here once confirmed by the owner.

07

Retention

Draft position, requiring owner confirmation: assessment data for enquiries that do not proceed is retained for a limited period and then deleted; active client records are retained for the duration of the engagement and a defined period afterwards.

08

Your rights

Subject to the applicable jurisdiction, you may request access to your information, correction of inaccurate information, deletion, restriction of processing, and a copy of your data in a portable format. You may also withdraw consent at any time.

Requests are made through the contact details published on the contact page.

09

Security

Reasonable technical and organisational measures are used to protect client information, including account-scoped access and transport encryption.

No system is perfectly secure. Please do not send sensitive medical information through the general enquiry form.

10

Changes to this notice

This notice will be updated as the practice and its systems change. The date of the most recent review will be published at the top of this page.