Privacy Policy
IP Sports Nutrition: www.ianperkins.com
Last updated: 19th June 2026
Who I am
This website is operated by Ian Perkins, a HCPC-registered Dietitian and SENr-registered Sports Nutritionist operating as a sole trader under the name IP Sports Nutrition.
Contact: hello@ianperkins.com
ICO Registration Number: ZB947827
I am the data controller for the personal information collected through this website and my nutrition services. This means I decide how and why your personal data is used, and I am responsible for protecting it.
What information I collect
I collect different types of information depending on how you interact with me:
When you book a consultation or use my services: your name, email address, phone number, date of birth, home address, GP details, emergency contact details, and health and nutrition information including age, sex, height, weight, body composition, training and activity data, dietary intake, medical history, medications, supplement use, and goals.
When you make a payment: your name, email address, and payment card details. Card details are processed securely by Stripe and are never seen or stored by me.
When you book an appointment: your name, email address, phone number, and appointment preferences. Bookings are managed through Acuity Scheduling, part of Squarespace.
When you visit this website: Squarespace automatically collects standard usage data such as pages visited, time on site, browser type, and referral source. This website uses only essential cookies required for the site to function. No marketing or analytics tracking cookies are used.
How I use your information
I use your information for the following purposes:
To provide dietetic and sports nutrition services, including conducting consultations, preparing nutrition reports and plans, and monitoring your progress
To schedule and manage your appointments
To process payments for my services
To communicate with you about your consultations, reports, and any queries
To maintain accurate clinical records as required by my professional obligations
To comply with legal, regulatory, and professional requirements
Legal basis for processing
Under UK GDPR, I must have a lawful reason for processing your personal data. The legal bases I rely on are:
For personal data, including name, contact details, booking and payment information: Article 6(1)(b) - processing is necessary to perform the contract between us by providing you with nutrition services.
For health and nutrition data, for UK clients receiving dietetic services: Article 9(2)(h) UK GDPR - processing is necessary for the provision of health care by a health professional bound by professional confidentiality, read with Schedule 1, Part 1(2) of the Data Protection Act 2018. I am registered with the Health and Care Professions Council (HCPC) and bound by its Standards of Conduct, Performance and Ethics.
For health-related data, for overseas clients receiving sports nutrition services: Article 9(2)(a) UK GDPR - your explicit consent, obtained before services begin.
For website usage data and essential cookies: Article 6(1)(f) - my legitimate interest in maintaining and improving this website.
Service providers who process data on my behalf
I use a small number of trusted service providers to deliver my services. Each acts as a data processor under contract and may only use your data for the purposes I instruct.
Microsoft (Microsoft 365)
What they do: Secure storage of client records, consultation scheduling via Teams, and document preparation.
Location: EU/UK data centres.
Safeguard: Microsoft Data Protection Agreement.
Stripe
What they do: Payment processing.
Location: USA.
Safeguard: Stripe Data Processing Agreement and Standard Contractual Clauses.
Squarespace, including Acuity Scheduling
What they do: Website hosting and appointment booking.
Location: USA.
Safeguard: Squarespace Data Processing Agreement and Standard Contractual Clauses.
Secure AI-assisted drafting software
What they do: Assists in preparing consultation reports using de-identified clinical data only.
Location: USA.
Safeguard: Data Processing Agreement with Standard Contractual Clauses and UK International Data Transfer Addendum.
Make.com (Celonis SE)
What they do: Secure workflow automation connecting my practice systems.
Location: EU (Czech Republic).
Safeguard: Make.com Data Processing Agreement and UK adequacy regulations.
In preparing consultation reports and plans, I use secure AI-assisted drafting software provided by a US-based technology provider acting as my data processor under contract. Before any information is processed by this software, all personal identifiers (name, date of birth, contact details) are removed. Only de-identified clinical and nutritional information is used, and it is not used to train any AI models. All report content is personally reviewed, edited, and approved by me. If you have any questions about this, or wish your report to be prepared without AI-assisted software, please contact me at hello@ianperkins.com.
Online consultations may use the secure transcription feature within Microsoft Teams to support accurate record keeping. Transcripts are stored within my secure practice systems and deleted once your records are complete. You may ask for transcription to be turned off at any time.
International data transfers
Some of my service providers are based in the United States. Where your data is transferred outside the UK, it is protected by Standard Contractual Clauses (and, where applicable, the UK International Data Transfer Addendum) incorporated into the relevant provider's data processing agreement. These mechanisms are approved under UK data protection law and provide a level of protection equivalent to UK standards.
If you are located outside the United Kingdom, your personal data is processed in the UK under UK data protection law (UK GDPR), which provides a high standard of protection. Where EU law also applies to you, I meet those obligations to the same standard.
How long I keep your information
Clinical and consultation records
Kept for 8 years from the date of your last consultation.
Financial and invoicing records
Kept for 6 years, to meet HMRC requirements for sole traders.
Appointment booking records
Deleted when no longer needed for scheduling purposes.
Website usage data
Managed by Squarespace in accordance with their privacy policy.
After these periods, your data is securely deleted.
Your rights
Under UK data protection law, you have the following rights:
Access: you can ask for a copy of the personal data I hold about you.
Rectification: you can ask me to correct any information that is inaccurate or incomplete.
Erasure: you can ask me to delete your data, where there is no ongoing legal or professional reason for me to keep it.
Restriction: you can ask me to limit how I use your data in certain circumstances.
Objection: you can object to my processing of your data, including to the use of AI-assisted software in preparing your reports.
Data portability: you can ask me to provide your data in a structured, commonly used format so you can transfer it to another provider.
Withdraw consent: where I process your data based on your consent, for example health-related data for overseas sports nutrition clients, you can withdraw that consent at any time by contacting me. Withdrawal does not affect any processing that has already taken place.
To exercise any of these rights, email me at hello@ianperkins.com. I will respond within one month.
Complaints
If you are unhappy with how I have handled your data, I would appreciate the chance to address your concerns directly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
Children
I do not knowingly provide services to, or collect personal data from, anyone under the age of 18 without parental or guardian consent. If you believe I hold data relating to a child without appropriate consent, please contact me immediately.
Changes to this policy
I may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date at the top. Where changes are significant, I will notify current clients directly.
Contact
If you have any questions about this Privacy Policy or how I handle your personal data, please contact me:
Ian Perkins
Email: hello@ianperkins.com
Website: www.ianperkins.com
ICO Registration: ZB947827
