Privacy Policy
Last reviewed: August 2026
1. Who We Are
This Privacy Policy applies to Iwona Meyer (“we”, “us”, “our”). We provide Functional Medicine and Nutritional Therapy services, including consultations, functional laboratory testing support, laboratory test interpretation, and personalised nutrition, lifestyle and supplement recommendations.
We are committed to protecting your privacy and handling your personal information securely and in accordance with UK data protection law.
If you have any questions about how we handle your personal information, please contact us at:
2. What Information We Collect
We collect personal and health information that you provide through our website, test order forms, health questionnaires, consultations and communications with us.
This may include:
- Basic details such as your name, address, email address, telephone number and date of birth
• Information relating to appointments and services you have requested or purchased
• Health information including your medical history, symptoms, dietary and lifestyle information, medication and supplement use, laboratory and blood test results
• Information provided through health and metabolic questionnaires
• Consultation notes and personalised recommendations
• Payment and transaction information relating to services purchased through our website
We may also receive health information, including laboratory test results, from testing companies where you have requested a functional laboratory test.
Health information is classed as special category personal data under UK GDPR and is handled with additional care and protection.
3. How We Use Your Information
We use your information to:
- Provide Functional Medicine and Nutritional Therapy consultations and personalised recommendations
• Arrange functional laboratory testing and provide test interpretation services
• Manage appointments and client records
• Process purchases and payments for our services
• Communicate with you about your appointments, tests and services
• Respond to enquiries
• Meet professional, insurance, accounting and legal requirements
• Send marketing communications where you have given consent
4. Legal Basis for Processing
We process your personal information where necessary to provide the services you have requested or purchased, to administer our business and services, to comply with legal and professional obligations, or where you have given consent.
Because our work involves health information, which is classed as special category personal data, we also require an additional condition under UK data protection law for processing this information. Where we rely on explicit consent, we will ask you to provide this through a clear statement or consent process.
You can withdraw your consent at any time by contacting us. Where you have authorised us to share information with your GP or another healthcare professional, that sharing is also based on your consent.
5. Functional Laboratory Testing
When you request a functional laboratory test through our website, we collect the information required to arrange the test with the relevant laboratory.
We currently work with testing providers including Regenerus Laboratories and Nordic Laboratories. Information shared with the relevant laboratory may include your:
- Name
• Address
• Date of birth
• Gender
• Email address
• Telephone number
This information is shared for the purpose of registering and arranging your test, delivering the test kit and allowing the laboratory to contact you regarding payment and fulfilment.
Payment for the laboratory test is made directly to the laboratory.
We may receive your laboratory results directly from the testing provider. Where you have purchased an interpretation or consultation, these results may be reviewed as part of that service.
6. Who We Share Your Information With
We keep your personal and health information confidential and do not sell your personal data.
Where necessary to provide our services, your information may be processed by or shared with:
- Penocchio, which we use for client questionnaires, forms and relevant client records
• Regenerus Laboratories and Nordic Laboratories, for functional laboratory testing
• Stripe, for secure payment processing
• WooCommerce, for online orders and purchases through our website
• Google Workspace/Gmail, for business communications
• Zoom, for online consultations
• Amrita Nutrition, Natural Dispensary and Pure & Natural, where we arrange a supplement basket or registration
• Professional advisers such as accountants, insurers or legal advisers where necessary
• Authorities where disclosure is required by law
Where we arrange a supplement basket or registration with a supplement supplier, we may provide your name and email address so the supplier can contact you with your basket or registration details.
Your GP or other healthcare professionals: We will only share your information with your GP or other healthcare professionals with your prior consent, unless we believe your life or safety is at serious risk, or where disclosure is required by law.
Some third-party providers may process information outside the UK. Where this occurs, appropriate safeguards are required in accordance with UK data protection law.
7. Payments
Payments for services purchased through our website are processed securely by Stripe. We do not store your full card details on our systems.
Stripe processes payment information in accordance with its own privacy policy and security standards. Relevant transaction information may be retained where required for accounting, tax and legal purposes.
Payment for functional laboratory tests is made directly to the relevant laboratory, as explained above.
8. Marketing Communications
You may choose to sign up to receive email news and updates from us.
Marketing communications are optional and you will not be automatically added to a marketing list simply because you request a laboratory test or purchase a service.
You can unsubscribe or withdraw your consent at any time.
9. Cookies and Analytics
Our website uses cookies and Google Analytics to help us understand how visitors use the website and improve our services.
Where consent is required, non-essential cookies will only be used after you have made your choice.
Further information about the cookies used on our website and how to manage your preferences is available in our separate Cookie Policy.
10. How Long We Keep Your Information
We retain your personal information for as long as necessary to provide our services and in accordance with applicable professional, insurance, accounting and legal requirements.
Clinical records are retained in accordance with relevant professional guidance and professional insurance requirements.
Marketing information is retained until you unsubscribe or withdraw your consent.
When information is no longer required, it will be securely deleted or anonymised where appropriate.
11. Data Security
We take appropriate technical and organisational measures to protect your personal and health information against unauthorised access, loss, misuse or disclosure.
Access to personal and health information is restricted, and the third-party providers we use are expected to maintain appropriate security arrangements.
12. Your Rights
Under UK data protection law, you may have the right to:
- Access the personal information we hold about you
• Have inaccurate information corrected
• Request deletion of your information in certain circumstances
• Restrict or object to certain processing
• Request data portability where applicable
• Withdraw consent at any time where processing is based on consent
These rights are not absolute, and we may need to retain certain information to meet professional, legal or regulatory requirements.
To exercise any of these rights, please contact us at:
We will respond within the timeframe required by applicable data protection law.
13. Complaints
If you have a concern about how we handle your personal information, please contact us first at contact@iwonameyer.com and we will do our best to resolve it.
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The date of the most recent review will be shown at the top of this page.
