Privacy
Privacy notice.
A working draft describing what The Composition Desk collects, why it is collected, how long it is kept and what you can ask for. Prepared for legal review.
Internal note — remove before publication
This document is a professional editable draft prepared for review by a qualified legal advisor. It intentionally does not state a business address, registered entity or governing jurisdiction; those must be supplied and confirmed by the owner. Do not treat this text as legal advice.
Who this notice covers
This notice applies to visitors to this website, prospective clients who submit an assessment, and active clients using the client portal.
The identity of the data controller, its registered details and the governing jurisdiction are to be confirmed by the owner of the practice and inserted here before publication.
Information collected
Enquiry information: name, email address, chosen topic and the content of your message.
Assessment information: contact details, goals, current nutrition patterns, food preferences, allergies and intolerances, training and activity, lifestyle and sleep, health-screening responses including any conditions, medications or supplements you choose to disclose, previous approaches and adherence barriers, and your preferred engagement.
Client portal information: nutrition targets set by your coach, weekly check-in entries, self-recorded measurements, documents and images you upload, and messages exchanged with your coach.
Technical information necessary to operate and secure the site.
Why it is collected
To assess whether an engagement is appropriate, to build and adjust your nutrition protocol, to communicate with you, and to maintain an accurate record of the coaching relationship.
Health-screening information is collected solely so the practice can work within its scope and refer you appropriately. It is not used to diagnose, treat or assess any medical condition.
Legal basis
Draft position, subject to legal review in the applicable jurisdiction: processing is based on your consent for enquiry and assessment data, and on the performance of a contract for active coaching engagements.
Where health-related information is processed, explicit consent is obtained at the point of intake.
Client data separation
Client records are scoped to the individual account they belong to. One client's information is never visible to another client.
Once the client portal backend is connected, access is enforced server-side per authenticated user, in addition to any interface-level restrictions.
Retention
Draft position, requiring owner confirmation: assessment data for enquiries that do not proceed is retained for a limited period and then deleted; active client records are retained for the duration of the engagement and a defined period afterwards.
Your rights
Subject to the applicable jurisdiction, you may request access to your information, correction of inaccurate information, deletion, restriction of processing, and a copy of your data in a portable format. You may also withdraw consent at any time.
Requests are made through the contact details published on the contact page.
Security
Reasonable technical and organisational measures are used to protect client information, including account-scoped access and transport encryption.
No system is perfectly secure. Please do not send sensitive medical information through the general enquiry form.
Changes to this notice
This notice will be updated as the practice and its systems change. The date of the most recent review will be published at the top of this page.