1. Who we are
Nutrient Warrior is a trading name of Stuart James Rex, a sole trader in the United Kingdom. We are the "controller" of your personal data, which means we decide how it is used and are responsible for protecting it.
- Address: 119 Harnham Road, Salisbury, SP2 8JN
- Email: [email protected]
- ICO registration number: registration pending (application reference C2061787)
This notice explains what personal data we collect when you visit our website, ask for a free guide, or buy a meal plan or subscription; how we use it; who we share it with; and your rights. It applies whether you find us through Instagram, our website or a coach.
2. What we collect
| Where | What we collect |
|---|---|
| Our website | Your cookie choices, and, only if you accept analytics cookies, how you use the site (pages viewed, device and browser type, approximate location from your IP address). Our hosting provider also processes your IP address to deliver the site and protect it from attacks. |
| Free guides | If you ask for a guide on Instagram, your Instagram username and messages. If you ask by email, your name and email address. |
| Coach enquiries | Your name, email, business name and anything you tell us about your coaching business. |
| Checkout (Stripe) | Your name, email address, billing address, and your answers to the "start now" and health-screening questions. Your card details go straight to Stripe; we never see or store them. |
| Intake form | Your full name, email, age, sex, height, current weight, nutrition goal (for example lose weight, maintain, build muscle), average daily steps, how often you do resistance training, HIIT and cardio, food preferences, allergies and intolerances, and the name of your coach or personal trainer if you have one. |
| Your plan | The figures we calculate from your answers (ideal body-weight range, calorie and protein targets) and the plans we send you. |
| Emails and messages | Anything you tell us by email or Instagram direct message, such as questions, feedback or changes to your details. |
| Subscriptions | Your subscription status, payment history and invoices. |
Health data. Your weight, height, activity, goals, allergies and screening answers are information about your health. UK law treats this as "special category" data, which needs extra protection and your explicit consent (see section 3).
We do not knowingly collect data from anyone under 18. Our plans are for adults only.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Take payment, deliver your plans, run your subscription, send receipts and service emails | Performing our contract with you |
| Use your health data to calculate your targets and build your plans | Your explicit consent (UK GDPR Article 9(2)(a)), given in the intake form |
| Check you are suitable for our plans (age, pregnancy, medical conditions) | Your explicit consent, and our legitimate interest in keeping customers safe |
| Run and secure the website, and block spam on our forms | Legitimate interests |
| Measure how the website is used (analytics cookies) | Your consent, through our cookie banner |
| Send you a free guide you asked for | Performing your request; your consent for any follow-up emails |
| Reply to coach enquiries | Legitimate interests |
| Keep accounting and tax records | Legal obligation |
| Answer questions, handle complaints and refunds, prevent fraud | Legitimate interests |
| Send news and offers by email | Your consent, or for existing customers our legitimate interest in telling you about similar plans. You can unsubscribe at any time. |
We do not sell your data, and we do not use it for advertising profiles.
Automated calculations. Your calorie and protein targets are worked out by a formula from your answers, and every plan is reviewed by a person before it is sent. We do not make decisions with legal or similarly significant effects about you by automated means alone.
4. Who we share it with
We only share your data with service providers who help us run Nutrient Warrior, and only what they need. They act on our instructions and must keep it secure.
| Provider | What for | Data they handle |
|---|---|---|
| Cloudflare | Hosting the website, security and spam protection (Turnstile) on forms | IP address, browser details, form submissions |
| Google Analytics | Website analytics, only if you accept analytics cookies | Pages viewed, device, approximate location |
| Stripe Payments UK Ltd | Payments, subscriptions, receipts, invoices | Name, email, billing address, payment details, checkout answers |
| Google (Forms, Sheets, Drive, Gmail) | Intake form, storing answers, sending plans | Intake answers, including health data |
| Anthropic (Claude), an AI assistant | Helping us build and check your plan from your targets | Your calculated targets, goals, food preferences and allergies, and your name to label your plan. We do not send your email address or other contact details. Every plan is reviewed by a person before it is sent. |
| Meta (Instagram) | Messages you send us there | Whatever you include in a message |
| ManyChat | Automated replies when you ask for a free guide on Instagram | Instagram username, messages, and your email if you give it |
| MailerLite | Sending free guides by email, and newsletters if you opt in | Name and email |
| Our accountant | Tax and bookkeeping | Payment records |
If you named a coach or personal trainer, we will only share your plan with them if you ask us to.
We may also share data if the law requires it, for example with HMRC, or to protect our rights in a dispute.
Transfers outside the UK. Some providers, including Cloudflare, Google, Stripe, Anthropic, Meta, ManyChat and MailerLite, may store or process data in the United States, the EU or elsewhere. Where they do, they protect it with UK-approved safeguards such as the UK International Data Transfer Addendum or the UK–US "data bridge".
5. How long we keep it and how we protect it
| Data | How long |
|---|---|
| Intake answers and health data | 12 months after your last plan, then deleted. Sooner if you withdraw consent or ask us to delete it. |
| Plans we have sent you | 12 months after your last plan |
| Payment and invoice records | 6 years after the end of the tax year, as HMRC requires |
| Emails and messages | 2 years after our last contact |
| Free-guide requests and coach enquiries | 2 years after our last contact |
| Website analytics | 14 months, then deleted by Google |
| Marketing list | Until you unsubscribe |
Security. We use two-factor authentication on our Google, Stripe and email accounts, keep data only in those services, limit access to ourselves, and do not store customer data on unlocked or shared devices. Our website is served only over an encrypted connection (HTTPS). If a breach puts your rights at risk, we will tell you and the ICO as the law requires.
6. Cookies
We only set analytics cookies if you accept them in our cookie banner, and you can change your choice at any time with the "Cookie settings" link at the bottom of every page. Our cookie policy lists each cookie and what it does.
7. Your rights
Under UK data protection law you have the right to:
- access a copy of the personal data we hold about you
- correct data that is wrong or incomplete
- delete your data, where we no longer need it or you withdraw consent
- restrict or object to how we use it, including any marketing
- take your data to another provider in a common format
- withdraw consent for us to use your health data, or for cookies, at any time
To use any of these rights, email [email protected]. It is free, and we will reply within one month.
Withdrawing consent. If you withdraw consent for your health data, we will stop using it and delete it. We will not be able to build further plans for you, so any subscription will be cancelled and we will refund any plans not yet delivered. This does not affect plans already made with your consent.
Complaints. If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
8. Changes to this notice
We will update this notice if the way we use your data changes, and email subscribers about any significant change.