Legal

Privacy Notice

Last updated: 30 April 2026 Version 5 Haraya Health Ltd · UK

The short version: We collect your name and email when you sign up to our waitlist, newsletter, or download a free guide. We use it only to send you relevant content and updates. We never sell your data. You can unsubscribe at any time.

1. Who We Are

Haraya Health Ltd is a UK-registered company providing integrative nutrition and health coaching services online. In this Privacy Notice, ‘we’, ‘us’, and ‘our’ refer to Haraya Health Ltd.

We are the Data Controller for the personal data we collect. This means we are responsible for deciding how and why your data is used, and for keeping it safe.

We use Google Workspace (Google Drive, Gmail) for storing and communicating data. As a Google Workspace user, our data processing with Google is governed by Google’s Data Processing Agreement, which is compliant with UK GDPR.

2. What Data We Collect

General personal data

When you visit our website, sign up to our newsletter, purchase a programme, or enquire about coaching, we may collect:

Your name and email address
Contact details you provide (e.g. through enquiry forms or WhatsApp)
Payment information (processed securely by third-party payment providers — we do not store card details)
Communications you send us

Health data (special category data) — 1:1 coaching clients only

Health data is collected exclusively from clients enrolled in The Haraya Method 1:1 coaching programme. It is not collected from participants in group programmes or digital course purchases.

If you become a 1:1 coaching client, we will collect health-related information to provide your personalised programme. This includes information provided in your Health History Intake Form before your first session, and any health-related information shared during your coaching programme. Specifically, this may include:

Current health concerns, symptoms, and health history
Dietary patterns and nutritional information
Lifestyle information (sleep, stress, exercise, menstrual cycle)
Information about diagnosed conditions or medications

Health data is classified as ‘special category data’ under UK GDPR and is subject to additional protections. We only collect this data with your explicit written consent, and only to the extent necessary to deliver your coaching programme.

3. Why We Process Your Data (Lawful Basis)

Under UK GDPR, we must have a lawful basis for processing your data. We rely on the following:

Contractual necessity — to deliver coaching programmes, group programmes, and digital courses you have purchased
Legitimate interests — for website analytics (to improve our site) and general business administration
Consent — for marketing emails and newsletters. You can withdraw this at any time
Explicit consent — for health data (special category). You will be asked to sign a separate data consent form before we collect any health information

4. How We Store and Protect Your Data

We take the security of your data seriously. Here is where your data is stored:

Client health records and coaching notes are stored in Google Drive (Google Workspace), accessible only to us. Files are not publicly shared.
Email addresses and newsletter data are held in Kit (formerly ConvertKit), a GDPR-compliant email platform.
Website enquiry data is handled via our website contact form.

All third-party platforms we use operate under Data Processing Agreements (DPAs) that comply with UK GDPR. We do not sell your data. We do not share your personal data with third parties, except where required by law or with your explicit consent.

5. How Long We Keep Your Data

Client health and coaching records: retained for 7 years after your last coaching session, in line with standard professional practice, then securely deleted
Email marketing list: retained until you unsubscribe or request deletion
General enquiry data: retained for 12 months, then deleted

6. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (‘right to be forgotten’)
Withdraw consent at any time (this does not affect data already processed)
Object to processing, or request we restrict it
Data portability — receive your data in a portable format

To exercise any of these rights, email us at katie@harayahealth.com. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

7. Cookies

harayahealth.com is a static website and does not use tracking or analytics cookies. If you sign up to our newsletter or mailing list, the email platform (Kit) may set a strictly necessary functional cookie to manage your subscription. No marketing or advertising cookies are used on this website.

8. Changes to This Notice

We may update this Privacy Notice from time to time. The most current version will always be available on our website. Continued use of our services after changes have been posted constitutes your acceptance of the updated Notice.

Please note: Haraya Health provides integrative health coaching and nutritional guidance for educational and personal wellness purposes only. Nothing in our services, communications, or materials constitutes medical advice, diagnosis, or treatment. If you are seeking medical advice, please reach out to your doctor or a qualified medical professional.

9. Contact Us

If you have any questions about this Privacy Notice or how we handle your data, please contact us:

Haraya Health Ltd

Email: katie@harayahealth.com

Website: harayahealth.com

Haraya Health Ltd is registered in England and Wales. Haraya Health provides health coaching services only and is not a medical practice. Our services do not replace professional medical care.