Privacy Notice

Who we are

Nutrigirls is currently operated by Vitality Strategies Ltd.

For the purposes of UK data-protection law, Vitality Strategies Ltd is the data controller for the personal information described in this notice.

Information we collect

Website enquiries

When someone submits an enquiry through our website, we may collect:

• Name
• Role
• School or academy trust
• Email address
• Telephone number, if provided
• School location
• Approximate number of Year 6 girls, if provided
• Preferred timeframe
• Information included in the enquiry message

We may also receive similar information when someone contacts us directly by email.

School and programme contacts

When arranging or delivering a programme, we may collect professional contact information relating to school staff and other programme partners, including names, roles, work contact details and relevant correspondence.

Pupil questionnaires

Pupils may complete questionnaires before and after the programme so that we can evaluate its impact and improve our educational content.

Nutrigirls does not collect pupils’ names, dates of birth or contact details through these questionnaires.

Questionnaires:

• use non-identifying codes solely to compare before-and-after responses;
• do not have an identifying key;
• cannot be traced back to individual pupils;
• do not contain free-text questions; and
• are analysed and reported only in an anonymous or aggregated form.

Because pupils cannot be identified from this information, these questionnaire responses are intended to constitute anonymous information rather than personal data.

Schools are responsible for managing and retaining their own pupil attendance registers. Nutrigirls does not retain these registers.

Photographs videos and testimonials

We may take or use photographs, videos or pupil testimonials only where express permission has been obtained from both the pupil and their parent or guardian.

Pupils’ names and other identifying information are not published alongside photographs or videos. Pupil testimonials are published anonymously.

Permission can be withdrawn by contacting privacy@nutrigirls.co.uk. Withdrawal will apply to future use wherever reasonably possible, but it may not be possible to recall materials that have already been printed, distributed or published by third parties.

Website technical information

When someone visits our website, limited technical information may be processed automatically by our website-hosting provider. This may include an IP address, browser type, device information and basic security or access logs.

If we introduce analytics, marketing cookies or similar technologies in the future, we will update this notice and provide any necessary cookie information or choices.

How we use personal information

We may use personal information to:

• respond to enquiries and provide requested programme information;
• arrange and deliver school programmes;
• communicate with schools and programme partners;
• manage our professional relationships;
• evaluate and improve our educational content;
• produce anonymous and aggregated impact information;
• use approved photographs, videos and testimonials;
• maintain the security and proper operation of our website;
• meet our legal, safeguarding and administrative responsibilities; and
• establish, exercise or defend legal claims where necessary.

We do not use pupil information for direct marketing.

Our lawful bases

UK data-protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we may rely on:

• Legitimate interests: to respond to enquiries, communicate with schools, administer our work and improve our services.
• Contract: when processing is necessary to take steps towards, enter into or fulfil an agreement.
• Consent: for photography, video, testimonials and any optional marketing communications.
• Legal obligation: where we must use or retain information to comply with the law.
• Vital interests or safeguarding responsibilities: in exceptional circumstances where information must be shared to protect someone from serious harm.

Where we rely on consent, it may be withdrawn at any time.

Children’s information and safeguarding

We take particular care when working with children.

Nutrigirls does not ordinarily receive pupils’ names, dates of birth or contact details. Programme questionnaires are designed so that individual pupils cannot be identified.

A member of school staff is required to be present when Nutrigirls delivers a session. The school remains responsible for pupil attendance information.

If a pupil makes a safeguarding disclosure, Nutrigirls will report it promptly to the school’s Designated Safeguarding Lead or another appropriate member of staff, in accordance with our safeguarding procedure. Nutrigirls does not ordinarily retain a separate copy of the disclosure.

If information must be shared to protect a child or another person, it may be shared without consent where the law permits or requires this.

Sharing information

We do not sell personal information.

We may share relevant information with:

• schools and academy trusts;
• people working with Nutrigirls to arrange or deliver programmes;
• trusted service providers that support our website, email, document storage or other business operations;
• professional advisers, insurers or regulators where necessary; and
• safeguarding leads, local authorities, emergency services or other relevant bodies where needed to protect a child or comply with the law.

Service providers may process personal information only for the agreed purpose and must protect it appropriately.

International transfers

Some technology providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is in place, such as an adequacy decision or approved contractual protections.

How long we retain information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including any legal, accounting, safeguarding or insurance requirements.

As a general approach:

• unsuccessful or one-off website enquiries will normally be retained for no longer than two years after the last meaningful contact;
• information connected with a programme or business relationship will normally be retained for six years after the relationship or programme ends;
• photography, video and testimonial permissions will be retained while the material remains in use and for a reasonable period afterwards; and
• anonymous questionnaire results and aggregated impact information may be retained indefinitely because they do not identify individual pupils.

Information may be retained for longer where there is a legal, safeguarding, insurance or dispute-related reason to do so.

How we protect information

We use reasonable organisational and technical measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people who need the information for their work.

Marketing communications

If we introduce a Nutrigirls mailing list, people will be added only where they have actively chosen to subscribe.

Subscribers will be able to unsubscribe at any time by using the link included in each email or by contacting us. Submitting a programme enquiry will not automatically add someone to the mailing list.

Your rights

Depending on the circumstances, individuals may have the right to:

• ask for access to their personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to delete their information;
• ask us to restrict how their information is used;
• object to certain uses of their information;
• ask to receive or transfer information in a portable format;
• withdraw consent where consent is the lawful basis; and
• complain about how their information has been handled.

Not every right applies in every circumstance.

To make a request, contact privacy@nutrigirls.co.uk. We may need to verify the requester’s identity before responding.

Complaints

Please contact us first if you have a concern about how we have handled personal information. We will do our best to resolve it.

You also have the right to complain to the Information Commissioner’s Office:

Website: ico.org.uk
Telephone: 0303 123 1113

Changes to this notice

We may update this notice when our services, business structure or data-processing practices change. The latest version will always be published on this website, together with the date it was last updated.