Data Protection

Last updated: 3 August 2026

About this notice

This notice explains how DOS Consulting Ltd collects, uses, stores and shares personal information when you use this website, make an enquiry, book or receive services, make a payment, join the newsletter, or work with Daniel O’Shaughnessy in a speaking, media, consultancy or brand capacity.

In this notice, “I” means Daniel O’Shaughnessy when acting on behalf of DOS Consulting Ltd, and “the company” means DOS Consulting Ltd.

Who is responsible for your information

DOS Consulting Ltd is the data controller.

Company number: 12216396

Trading name: Daniel O’Shaughnessy

Registered office: Apartment 60, 7 Thorney Street, London, SW1P 4FG, United Kingdom

Privacy enquiries: admin@thenakednutritionist.co.uk

The information I collect

Depending on how you interact with me, I may collect:

• Identity and contact information, including your name, email address, telephone number, location and organisation.

• Enquiry and booking information, including the service you are interested in, appointment details and our communications.

• Private client information, including health history, symptoms, medication, supplements, diet, lifestyle, sleep, stress, body image, mental wellbeing, relevant identity information, consultation notes, recommendations and test results.

• Information about your GP, other healthcare professionals or an emergency contact where this is relevant and you choose to provide it.

• Professional information connected with speaking, media, consultancy or brand work, including your role, organisation, brief, contract and event details.

• Transaction information, including invoices, amounts paid and the service or product purchased. Payment providers process your full payment-card information rather than the company storing it directly.

• Newsletter and marketing preferences, including your email address, subscription status and whether you have withdrawn consent.

• Technical information generated when you use the website, such as your IP address, browser, device and website activity. More detail is provided in the Cookie Policy.

How I collect information

Most information comes directly from you through the website, questionnaires, consultations, bookings, email, telephone, video calls, payments or newsletter sign-up.

With your permission, I may also receive relevant information from biochemical or genetic testing laboratories, your GP or another healthcare professional. Website, booking, payment and newsletter platforms may generate technical or transaction information when you use them.

Why I use your information

I use personal information to:

• Respond to enquiries and take steps towards providing a service.

• Assess whether private work is appropriate and provide nutrition, functional medicine, breathwork or related support.

• Arrange appointments, communicate with you and maintain appropriate client records.

• Review test results and coordinate with laboratories or healthcare professionals where agreed.

• Deliver speaking, consultancy, media, corporate and brand work.

• Process payments, maintain financial records and manage contracts.

• Operate, secure and improve the website and services.

• Send the newsletter when you have chosen to receive it.

• Meet legal, regulatory, accounting, insurance and safeguarding obligations.

• Establish, exercise or defend legal claims.

Lawful bases

The lawful basis depends on why the information is being used:

• Contract and steps before a contract when responding to a request, arranging work or providing a service you have commissioned.

• Legal obligation, when information must be retained or disclosed for tax, accounting, regulatory or other legal reasons.

• Legitimate interests, when reasonably necessary to administer and protect the business, respond to professional enquiries, improve services or maintain appropriate records, provided those interests do not override your rights.

• Consent, for the newsletter and for other optional uses where consent is requested.

Health and other sensitive information

Health information, genetic information, sexual orientation and information about a person’s sex life are treated as special-category data under UK data protection law.

Before private work begins, you will be asked to give explicit consent for the processing of relevant special-category information. You can withdraw that consent by contacting admin@thenakednutritionist.co.uk. Withdrawal does not affect processing that has already taken place, but it may mean that I can no longer provide a service safely or appropriately.

Special-category information may also be processed where this is necessary to protect someone’s vital interests, meet a legal or safeguarding obligation, or establish, exercise or defend legal claims, where the law allows.

Who I share information with

I do not sell personal information.

Where necessary, information may be shared with:

• Squarespace, which provides the website, contact forms and online store.

• Secure digital storage providers used to maintain clinical notes and related records.

• Calendly and related scheduling services used to arrange appointments.

• Zoom or another agreed platform used for online meetings.

• Substack, when you subscribe to the newsletter.

• Stripe, Klarna and other payment providers used to process transactions.

• Email, accounting, IT and professional advisers supporting the business.

• Biochemical or genetic testing laboratories and supplement providers, when this forms part of an agreed service.

• Your GP or another healthcare professional, with your permission or where disclosure is otherwise required by law.

• Insurers, legal advisers, regulators, courts, law-enforcement bodies or safeguarding authorities where necessary.

Only the information reasonably needed for the relevant purpose will be shared. Some providers act as processors under contract. Others, such as payment providers, laboratories or professional advisers, may act as separate data controllers and provide their own privacy information.

International transfers

Some service providers operate in, or store information in, countries outside the United Kingdom, including the United States.

Where personal information is transferred internationally, the transfer must be covered by an adequacy regulation or appropriate contractual safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum.

You can contact admin@thenakednutritionist.co.uk for more information about the safeguards used for a particular service.

Storage and security

Clinical notes and other personal information are stored using secure digital systems. Depending on how you interact with me, information may also be held by website, scheduling, newsletter, video-call, payment, email and accounting providers.

Reasonable technical and organisational measures are used to limit access, protect accounts and devices, and reduce the risk of unauthorised access, loss or disclosure. Access is limited to Daniel O’Shaughnessy and to service providers or professional advisers who need the information for an agreed purpose.

How long information is kept

Information is not kept for longer than reasonably necessary:

• Enquiries that do not lead to work are normally kept for up to 12 months after the last meaningful contact.

• Private client and clinical records are normally kept for five years after the work ends, unless a longer period is required by law, an insurer, a professional obligation, safeguarding needs or a legal claim.

• Contracts, invoices and accounting records are normally kept for six years from the end of the relevant company financial year, or longer where the law requires.

• Newsletter information is kept until you unsubscribe or withdraw consent. A minimal suppression record may be retained so that you are not contacted again by mistake.

• Cookie and website analytics information is kept according to the periods explained in the Cookie Policy and the settings of the relevant provider.

Information may be kept for longer where a dispute, complaint, safeguarding concern, regulatory requirement or legal claim makes this necessary.

Is providing information compulsory?

You do not have to provide information simply to browse the website or make a general enquiry.

Some information is necessary to enter into a contract, take payment or provide private health-related work safely. If relevant information is not provided, I may be unable to offer or continue the service.

Your rights

Depending on the circumstances, you may have the right to:

• Ask for access to the personal information held about you.

• Ask for inaccurate or incomplete information to be corrected.

• Ask for information to be deleted.

• Ask for the use of information to be restricted.

• Object to processing based on legitimate interests or to direct marketing.

• Receive certain information in a portable format.

• Withdraw consent at any time where processing relies on consent.

• Complain about how your information has been handled.

These rights are subject to legal limits and exemptions. Requests can be made verbally or in writing, although email is usually the clearest method.

Contact admin@thenakednutritionist.co.uk. I may need to confirm your identity before releasing information and will normally respond within one calendar month.

Automated decision-making

The company does not use personal information to make solely automated decisions that have legal or similarly significant effects on you.

Complaints

Please contact admin@thenakednutritionist.co.uk first if you have a question or complaint about the use of your information.

You also have the right to complain to the Information Commissioner’s Office. Further information is available at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.

Changes to this notice

This notice may be updated when services, providers or legal requirements change. The date at the top will show when it was last revised.