Last updated: October 2026

Sanna Sumner Nutritional Therapy respects your privacy and is committed to protecting your personal data.

This privacy policy explains what information we collect, how and why we use it, who it may be shared with, how long it is kept and the rights you have in relation to your personal data.

This policy applies to:

• Nutritional therapy and related health services

• Consultations, testing and personalised programmes

• Website enquiries, forms and purchases

• Thrive Together memberships

• Online masterclasses, coaching sessions and member communications

• Workshops, educational events and corporate services

• Newsletter and marketing communications

• Use of the Sanna Sumner Nutritional Therapy website

If you have any questions about this policy or how your information is handled, please contact:

Sanna Sumner Nutritional Therapy
Reinier Claeszenstraat 106-HS
1056 WT Amsterdam
The Netherlands

Email: sanna@sannasumner.com
KvK number: 58849858

Who is responsible for your information?

Sanna Sumner Nutritional Therapy is the data controller for the personal information described in this policy. This means that we determine why and how your personal data is used.

Some services are delivered using third-party providers that process information on our behalf or act as separate data controllers for particular activities, such as processing payments.

What we do

Sanna Sumner Nutritional Therapy provides nutritional therapy services designed to support health through nutrition and lifestyle interventions.

This may include consultations, dietary and lifestyle analysis, biochemical testing, personalised nutrition plans, supplement recommendations and educational support.

We also provide workshops, educational seminars, corporate wellbeing services, digital resources and Thrive Together, an online nutrition and lifestyle membership offering live masterclasses, group coaching and member resources.

How we collect your personal data

We may collect information directly from you when you:

• Complete a nutritional therapy or enquiry form

• Sign a terms of engagement form

• Attend a consultation, workshop, masterclass or coaching session

• Purchase a product, programme or membership

• Create a customer or member account

• Register for an event or appointment

• Submit a question, comment or feedback

• Contact us by email, telephone, website form or post

• Subscribe to a newsletter

• Use our website

• Make an online payment

We may also receive information from:

• Biochemical testing companies

• Healthcare professionals, with your permission where required

• Appointment and event-booking platforms

• Payment providers

• Website, analytics and membership platforms

The information we may collect

Depending on the service you use, this may include:

• Your name and contact details

• Your address and billing details

• Your date of birth

• Emergency or next-of-kin details, where relevant

• Information about appointments, referrals and previous contact with us

• Membership and customer-account information

• Subscription, payment, renewal and cancellation information

• Event registrations and attendance

• Questions, messages, feedback and correspondence

• Newsletter and marketing preferences

• Technical information about how you use our website

• Health, medical, dietary and lifestyle information where relevant to a nutritional therapy service

• Medication and supplement information

• Biochemical test results

• Consultation notes and health improvement plans

• GP or other healthcare-provider information

We do not normally receive or store your complete payment-card details. Payments are processed by the payment provider used during checkout.

Health and special-category information

Information about your health is considered special-category personal data under the General Data Protection Regulation GDPR and receives additional protection.

We only collect and use health information where it is relevant to the service being provided and where an appropriate legal condition applies. This may include providing health or nutritional care subject to professional confidentiality obligations, fulfilling our contract with you, or obtaining explicit consent where required.

We may receive test results from biochemical testing providers or information from other healthcare professionals. Where your consent is required before this information is requested or shared, we will ask for it.

We will seek your express consent before sharing identifiable health information with your GP or another healthcare provider, unless disclosure is permitted or required by law or is necessary to protect someone’s vital interests.

How we use your information

We may use your personal data to:

• Respond to enquiries

• Arrange and provide consultations and programmes

• Assess your nutritional and lifestyle needs

• Prepare personalised recommendations

• Arrange and interpret biochemical testing

• Coordinate care with other professionals where authorised

• Create and administer customer or member accounts

• Process purchases, subscriptions and renewals

• Provide access to paid content and the Thrive Hub

• Register members for sessions

• Send service information, reminders, access links and recordings

• Respond to questions and provide membership support

• Improve our programmes, membership and website

• Maintain appropriate clinical, business and financial records

• Process complaints or legal claims

• Protect the security of our website, services and accounts

• Meet professional, regulatory and legal responsibilities

• Send marketing where valid consent has been provided

Our legal bases for using personal data

The legal basis depends on the information and the purpose for which it is being used.

Contract

We use personal data where it is necessary to provide a service you have requested or purchased. This includes:

• Providing nutritional therapy programmes

• Managing appointments

• Creating and administering a membership account

• Processing membership payments and renewals

• Providing access to Thrive Together and the Thrive Hub

• Sending essential information relating to a purchased service or membership

Legal obligations

We may retain and use information where required to meet tax, accounting, regulatory or other legal obligations.

Legitimate interests

We may use information where it is reasonably necessary to operate and improve our business, provided that these interests do not override your rights and freedoms.

This may include:

• Responding to enquiries

• Administering and improving our services

• Maintaining security

• Preventing misuse or fraud

• Managing complaints

• Keeping appropriate records

Consent

We rely on consent where this is required, including for:

• General newsletter and marketing communications

• Certain uses or sharing of health information

• Non-essential website cookies and analytics

• Any use of photographs, testimonials or identifiable case material where consent is required

You may withdraw your consent at any time. Withdrawing consent does not affect processing that took place before consent was withdrawn.

Vital interests and legal claims

In exceptional circumstances, we may use or disclose information to protect someone’s life or safety, safeguard a child or vulnerable person, prevent serious crime, comply with a court order or establish, exercise or defend a legal claim.

Thrive Together membership

When you join Thrive Together, we collect and use information needed to establish and administer your membership.

This may include:

• Your name and email address

• Customer-account information

• Membership status and access permissions

• Payment, renewal and cancellation information

• Session registrations and attendance

• Questions and feedback

• Communications relating to your membership

• Your newsletter preference, where separately provided

This information is used to:

• Process your membership

• Provide access to the Thrive Hub

• Provide masterclasses, coaching sessions and resources

• Send session dates, access links, reminders and service updates

• Provide recordings and follow-up materials

• Respond to questions

• Administer renewals and cancellations

• Improve the membership

Essential membership communications

Thrive Together members receive communications needed to deliver and administer the membership. These may include:

• Session schedules

• Registration and access links

• Reminders

• Requests for questions

• Recordings and resource notifications

• Important Hub or membership updates

• Payment, renewal and account information

These communications are part of the membership service and are separate from Sanna’s general nutrition newsletter.

Squarespace may technically classify members of paid pricing plans as email subscribers within its platform. We do not treat this technical classification as consent to receive Sanna’s general marketing newsletter.

We will only send the general newsletter or unrelated marketing where you have separately chosen to receive it. You may unsubscribe from marketing at any time without affecting your Thrive Together membership or essential membership communications.

Information shared during group sessions

Thrive Together includes group sessions. If you choose to speak, use your camera, post in a group chat or share information with the group, other participants may see or hear that information.

Members are required to respect the privacy of other participants through the Thrive Together Community and Privacy Agreement. However, you should avoid sharing information during a group session that you would not be comfortable sharing with the other participants.

Thrive Together provides general educational and behaviour-change support. Group sessions are not intended to replace individual medical or nutritional advice.

Masterclass recordings

The teaching section of Thrive Masterclasses may be recorded so that members can watch it afterwards.

Thrive Coaching sessions are not recorded.

We aim to avoid including members’ personal contributions, health information, faces or voices in published recordings. If member participation may be included, participants will be informed before recording begins and can keep their camera and microphone switched off.

Recordings are made available only through the protected member area or another controlled access method. Members must not download, copy, redistribute or share recordings except where this has been expressly permitted.

Marketing and newsletters

We may send newsletters, nutrition updates, information about services or offers where you have actively chosen to receive them.

Marketing consent is optional and is not required to purchase a product, book a consultation or join Thrive Together.

Every general marketing email will include an unsubscribe option. You may also withdraw your consent by emailing sanna@sannasumner.com.

Unsubscribing from general marketing does not automatically stop communications that are necessary to provide a service, programme or active membership.

Who we share information with

We do not sell your personal data.

Where necessary, information may be shared with:

• Our professional association, including BANT, in connection with professional obligations or complaints

• Biochemical testing providers

• Supplement providers, where needed to fulfil an order or recommendation

• Healthcare providers, with your permission where required

• Professional advisers, accountants and insurers

• Contractors or facilitators supporting our services

• Website, membership and hosting providers

• Payment processors

• Appointment, event and reminder providers

• Video-conferencing providers

• Email and cloud-storage providers

• Analytics and website technology providers

• Legal, regulatory, safeguarding or crime-prevention authorities where disclosure is required or permitted

The main platforms used may include:

• Squarespace for the website, shop, customer accounts, membership access and checkout

• Stripe and other enabled payment methods for payment processing

• Acuity Scheduling for appointments, session registrations and reminders

• Zoom for online consultations, masterclasses and coaching sessions

• Google services for email, documents, analytics and website-tag management

These providers receive only the information reasonably necessary to provide their services. Where they act as processors on our behalf, they are required to protect the information and process it only in accordance with appropriate instructions and contractual safeguards.

Some providers may also act as independent data controllers for limited purposes, such as fraud prevention or compliance with financial regulations. Their own privacy policies will apply to those activities.

Professional development and anonymised information

We may discuss anonymised case information with professional peers or clinical supervisors for professional development and quality assurance.

Information will be anonymised so that you cannot reasonably be identified. We will obtain additional consent before using identifiable information in a publication, presentation, testimonial or case study.

International data transfers

Some of the service providers we use may process or store personal data outside the European Economic Area.

Where personal data is transferred internationally, we take reasonable steps to ensure an appropriate transfer mechanism and safeguards are in place. These may include:

• A European Commission adequacy decision

• Participation in an approved data-transfer framework

• European Commission Standard Contractual Clauses

• Other safeguards permitted under data-protection law

Further information about relevant safeguards can be requested by emailing sanna@sannasumner.com.

How long we keep information

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet our professional, contractual and legal responsibilities.

Different retention periods apply to different information:

• Clinical and nutritional therapy records are retained in accordance with applicable legal requirements and guidance from our professional association, BANT.

• Financial and transaction records are generally retained for seven years where required under Dutch tax and accounting rules.

• Membership and account information is retained while the account or membership is active and afterwards for as long as reasonably required to handle enquiries, disputes, legal claims and administrative obligations.

• Questions, correspondence and feedback are retained only for as long as needed to provide the service and improve the membership, after which they may be deleted or anonymised.

• Marketing consent records are retained for as long as necessary to demonstrate your subscription preference, including where you have unsubscribed.

• Masterclass recordings are retained for as long as they form part of the membership content. Recordings containing identifiable member information will be reviewed and edited, deleted or anonymised when that information is no longer necessary.

• Website analytics data is retained according to the settings applied in the relevant analytics platform.

Information may be kept for longer where required by law, professional obligations, safeguarding requirements or the establishment, exercise or defence of legal claims.

Security

We use appropriate organisational and technical measures to protect personal data from accidental loss, misuse, unauthorised access, alteration or disclosure.

These measures may include:

• Password-protected systems and accounts

• Encryption on relevant devices and services

• Restricted access to confidential information

• Secure third-party providers

• Confidentiality obligations

• Software and account-security controls

• Procedures for responding to suspected data incidents

No online system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature and sensitivity of the information being processed.

Your data-protection rights

Subject to applicable limitations and exemptions, you may have the right to:

• Request access to the personal data we hold about you

• Ask us to correct inaccurate or incomplete information

• Ask us to delete your personal data

• Ask us to restrict how your information is used

• Object to processing based on legitimate interests

• Receive certain information in a structured, commonly used and machine-readable format

• Ask for eligible information to be transferred to another controller

• Withdraw consent at any time where processing is based on consent

• Complain to a data-protection authority

To exercise any of these rights, email sanna@sannasumner.com.

We may need to confirm your identity before fulfilling a request. We will respond without undue delay and normally within one month of receiving your request. In certain circumstances permitted by law, this period may be extended, and we will explain the reason for the extension.

Some information cannot be deleted immediately where we have a legal, professional or contractual obligation to retain it.

Automated decision-making

We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

Website forms

Our website uses electronic forms to collect enquiries, registrations and other information.

Please avoid entering confidential medical information into a general website or contact form unless the form specifically asks for it and is intended for that purpose.

Information submitted through the website is processed through the website platform and any connected services used to respond to or administer the submission.

Cookies

Our website uses cookies and similar technologies.

Some cookies are essential for:

• Website security

• Customer and member accounts

• Checkout and payments

• Remembering cookie preferences

• Providing requested website functions

These essential cookies may be used without consent where they are strictly necessary to provide the website or service requested.

Other cookies, including analytics or marketing cookies, are used only in accordance with the choices made through the website’s cookie banner.

You can accept, reject or manage non-essential cookies through the cookie-preference controls. You can also manage or delete cookies through your browser settings, although disabling essential cookies may affect account, checkout or website functionality.

Analytics and tag management

We may use Google Analytics to understand how visitors use the website, including which pages are visited and how people arrive at the site.

We use Google Tag Manager to manage website tags. Google Tag Manager may activate other services that process information.

Analytics and advertising technologies are controlled according to the choices made through the website’s cookie banner and Google Consent Mode settings, where applicable.

Analytics information is used to understand website performance and improve our services. We do not use analytics reports to provide nutritional or healthcare advice about individual visitors.

You can review or change your cookie choices at any time using the Cookie Preferences option on the website.

External links

Our website and member area may contain links to other websites and services.

We are not responsible for the privacy practices of third-party websites. You should review the privacy policy of the relevant service before providing personal information.

Complaints

If you have concerns about how your personal data has been used, please contact us first so that we can try to resolve the matter:

sanna@sannasumner.com

You also have the right to lodge a complaint with the Dutch data-protection authority:

Autoriteit Persoonsgegevens
www.autoriteitpersoonsgegevens.nl

You may also contact the data-protection authority in the country where you live or work, where applicable.

Changes to this policy

We may update this privacy policy when our services, technology or legal responsibilities change.

The latest version will be published on this page with the date of the most recent update.