Privacy Policy

1. Who We Are

Tarelova is a behavioural nutrition resource operating from 15 Exmouth Market, EC1R 4QE London, United Kingdom. Enquiries regarding data handling may be directed to [email protected].

2. Data We Collect

Tarelova collects personal data through the following channels:

• Enquiry form: name, email address, and message content submitted via the contact form on contact.php.
• Programme enrolment: name, email address, and programme selection where applicable.
• Cookies and analytics: session identifiers, browser type, pages visited, and duration — collected through functional cookies where consent is given. See the Cookie Policy for full details.
• Correspondence: any information you provide when corresponding with us by email or telephone.

Tarelova does not collect payment card data directly. Any financial transactions are handled by third-party payment processors under their own privacy terms.

3. Why We Collect Data

Personal data is collected and processed for the following purposes:

• To respond to enquiries submitted through the contact form.
• To confirm and administer programme enrolments.
• To send programme materials and session documentation to participants who have enrolled.
• To understand how visitors use the website and improve its content (analytics, where consent is provided).
• To comply with legal obligations applicable to the United Kingdom.

4. Legal Basis for Processing

Tarelova processes personal data under the following legal bases as defined by the UK General Data Protection Regulation (UK GDPR):

• Consent: where you have actively provided data via the contact form or opted in to analytics cookies.
• Contract: where data is required to fulfil a programme enrolment you have entered into.
• Legitimate interests: where we have a reasonable, proportionate interest in processing data to operate and improve the resource, and where this interest does not override your rights.

5. Data Retention

Tarelova retains personal data for no longer than is necessary for the purpose it was collected. Enquiry data is held for up to 12 months from the date of last contact. Programme participant data is retained for the duration of the programme and up to 24 months thereafter. Analytics data (where cookies are accepted) is retained in accordance with the analytics provider's retention policy, typically 14 months.

You may request deletion of your personal data at any time by writing to [email protected].

6. Sharing of Data

Tarelova does not sell personal data. Data is not shared with third parties for the purposes of direct marketing by those third parties. Data may be shared in the following limited circumstances:

• With service providers who assist in operating the website or delivering programmes (for example, email hosting, analytics platforms), under data processing agreements that prohibit those providers from using data for any purpose other than providing the service.
• Where required by law or in response to a lawful request from a regulatory or law enforcement authority in the United Kingdom.

7. Your Rights

Under UK GDPR you have the following rights in relation to personal data held by Tarelova:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate data.
• Right to erasure: to request deletion of your data where there is no compelling reason for continued processing.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format where technically feasible.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, write to [email protected]. We will respond within 30 days.

8. Data Security

Tarelova implements appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. The website is served over HTTPS. Form submissions are transmitted securely. Access to stored enquiry data is restricted to authorised personnel.

No system is entirely without risk. In the event of a data breach that is likely to result in risk to individuals, Tarelova will notify the Information Commissioner's Office (ICO) within 72 hours, and affected individuals where required.

9. Cookies

This website uses cookies. Full details of the cookies used, their purpose, and how to manage or withdraw consent are provided in the Cookie Policy.

10. Changes to This Policy

This privacy policy may be updated from time to time to reflect changes in our practices or applicable law. The date at the top of the page indicates when the policy was last reviewed. Continued use of the website after any change constitutes acceptance of the updated policy.

11. Contact and Complaints

For any privacy-related enquiry, contact Tarelova at [email protected] or by post at 15 Exmouth Market, EC1R 4QE London, United Kingdom.

If you are not satisfied with how we have handled a data matter, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk.