Privacy Policy

Who we are

This site is run by Kinga Topolowska, trading as Neurodietitian, a HCPC-registered dietitian based in the UK. For any privacy question, or to exercise any of the rights below, please get in touch via the contact form.

Enquiries you send us

When you submit the contact form we collect your name, email address, subject and message. This is used only to respond to your enquiry and, where you go on to book an appointment, to arrange your care. It is stored securely in our database and a copy is emailed to Kinga so enquiries aren't missed. We rely on your consent (given by submitting the form) and, where a consultation follows, on taking steps to enter a contract with you, as our legal basis for this processing.

Please avoid including sensitive medical details in your first message - these are better discussed once your consultation is booked.

Cookies & analytics

This site does not use any advertising or social media tracking cookies. The only non-essential cookies we use are for Google Analytics 4, which helps us understand how the site is used (e.g. which pages are visited) so we can improve it.

Analytics cookies are off by default. They are only set if you click "Accept analytics" on the cookie banner shown on your first visit, which is our legal basis (consent) for using them. You can withdraw or give consent at any time via "Cookie preferences" in the footer of every page - this takes effect immediately and, if you withdraw consent, stops any further analytics cookies being set.

Google acts as a data processor for this analytics data. Google Analytics 4 uses your IP address briefly to estimate your rough location, then discards it - it is not stored against your visit. We have also configured Analytics not to use Google's advertising signals or share this data for ad personalisation. Data is retained by Google for 14 months before being automatically deleted. See Google's Privacy Policy for how Google handles this data.

Aside from analytics, this site sets only strictly necessary cookies required for it to function (for example, keeping the admin area secure for staff) - these don't require consent under UK law and are never used to track visitors.

Sharing & storage

Enquiry data is stored with Google Firebase (Firestore), and enquiry notification emails are sent via our email provider. Analytics data is processed by Google as described above. We don't sell your data, and we don't share it with anyone else except where required by law.

Your rights

Under UK GDPR you have the right to access, correct, or ask us to delete your personal data, to object to or restrict how we use it, and to receive a copy of it in a portable format. To exercise any of these, use the contact form. You can also complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

Changes to this policy

We may update this policy from time to time; the current version always applies. Last updated: July 2026.