Privacy Policy

---

Last updated: July 2026

At Berries & Blossom, we are committed to protecting your privacy and handling your personal information responsibly, securely and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Berries & Blossom provides personalised nutrition and lifestyle coaching designed to help individuals optimise their health through evidence-informed nutrition, lifestyle assessment and measurable health markers.

If you have any questions about this Privacy Policy or how your personal information is handled, please contact us at:

Email: info@berriesandblossom.com

What information we collect

Depending on how you interact with us, we may collect:

• Your name and contact details (such as email address and telephone number).
• Information you provide through the Bloom Assessment.
• Lifestyle information, including nutrition, sleep, stress, movement and wellbeing.
• Health information that you choose to share, including symptoms, medical history, medications, allergies and health goals.
• Measurements such as weight, waist circumference, blood pressure and other health metrics where relevant.
• Laboratory and biomarker results where these form part of your programme.
• Appointment and consultation records.
• Payment information processed securely through our payment provider.
• Technical information collected through our website, such as cookies and website analytics.

Some of this information, particularly health information, is classified as special category personal data under UK GDPR and receives additional protection.

Why we collect your information

We collect your information to:

• Respond to enquiries.
• Deliver the Bloom Assessment.
• Provide personalised nutrition and lifestyle coaching.
• Develop your personalised Bloom Snapshot and recommendations.
• Arrange appointments and consultations.
• Process payments.
• Communicate with you about your programme.
• Improve our services and website.
• Meet our legal and regulatory obligations.

We will only collect information that is relevant to providing our services.

Our lawful basis for processing

Under UK GDPR, we process your information using one or more of the following lawful bases:

• Your consent.
• Performance of a contract when you engage our services.
• Compliance with legal obligations.
• Our legitimate interests in operating and improving our business.

Where we process health information, we do so only where UK GDPR permits this, including with your explicit consent where required.

Who we share your information with

We treat your information confidentially and only share it where necessary.

This may include trusted service providers such as:

• Practice Better (practice management platform)
• Stripe (payment processing)
• Typeform (Bloom Assessment)
• Zoom (virtual consultations)
• Accredited laboratories involved in requested testing
• Qualified phlebotomists where blood sample collection forms part of your programme
• Professional advisers or regulators where legally required

These organisations process information on our behalf or provide services that enable us to deliver our programmes. They are expected to protect your information appropriately.

We never sell your personal information to third parties.

How we protect your information

We take appropriate technical and organisational measures to safeguard your personal information, including secure cloud-based systems, password protection, access controls and secure data storage.

Although no electronic system can guarantee absolute security, we continually aim to use reputable providers with appropriate security standards.

How long we keep your information

We keep personal information only for as long as necessary to provide our services, comply with legal obligations and maintain appropriate business records.

When information is no longer required, it will be securely deleted or anonymised.

Your rights

Under UK GDPR you have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Request deletion of your information where appropriate.
• Restrict how your information is processed.
• Object to certain processing.
• Request transfer of your information to another provider where applicable.
• Withdraw your consent where processing relies on consent.

If you wish to exercise any of these rights, please contact us using the email address above.

If you remain dissatisfied, you also have the right to complain to the Information Commissioner's Office (ICO).

Cookies

Our website uses cookies to help improve your browsing experience and understand how visitors use our website.

Some cookies are essential for the website to function, while others help us analyse website performance and improve our services.

Where required, you will be asked for your consent before non-essential cookies are used.

You can manage or disable cookies through your browser settings at any time.

Third-party websites

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or technology. Any updates will be published on this page with the revised date shown above.

If you have any questions about this Privacy Policy, please contact us at info@berriesandblossom.com.