Privacy policy

Last updated: 10 June 2026

This policy explains what personal information we collect when you use this website or work with Dr Rebecca Hiscutt PhD, how we use it, and the rights you have over it. We handle your information in line with the UK GDPR and the Data Protection Act 2018.

1. Who is responsible for your information

The data controller is Dr Rebecca Hiscutt PhD, registered dietitian. If you have any questions about this policy or about how your information is handled, email hello@drrebeccahiscutt.com.

2. The information we collect

What we collect depends on how you use our services:

• Enquiries: If you send a message through the enquiry form or by email, we receive your name, email address, and whatever you choose to tell us.
• Bookings and appointments: When you book a clinic appointment we collect your contact details, appointment information, payment confirmation, and your answers to the questionnaire we send before your appointment.
• Clinical information: During consultations we record relevant health history, symptoms, and goals. Appointments may include a body composition scan (InBody), and some programmes include blood glucose readings from a continuous glucose monitor you wear.
• Email updates: If you have agreed to receive them, we hold your name and email address so we can send occasional updates. Every email includes an unsubscribe link.
• Website logs: Our hosting provider keeps standard server logs, including IP address and browser type, for security and to keep the site running reliably.

3. Health information

Much of what we discuss in clinic is health information, which the law treats as special category data and protects more strictly. We only process your health information with your explicit consent, and you can withdraw that consent at any time by emailing us. Withdrawing consent does not affect anything we did with your permission beforehand.

4. How we use your information

We use your personal information to:

• Respond to your enquiries.
• Provide your appointments, build your personalised health action plan, and review your progress over time.
• Manage bookings, payments, and appointment reminders.
• Send email updates, where you have agreed to receive them.

Our lawful bases under the UK GDPR are: your consent (including explicit consent for health information), the contract between us when you book an appointment or programme, our legitimate interest in running and securing the website and the practice, and our legal obligations as a regulated healthcare professional.

5. Your results dashboard

If you have body composition scans with us, you may be given a private online dashboard showing your results over time. Each dashboard sits at a unique web address and is protected by a PIN we give you in person. The dashboard does not display your name or contact details. Please keep your PIN private, and let us know if you would like your dashboard taken down at any point.

6. Who we share your information with

We never sell your information. We share it only with the services we need to run the practice:

• Practice Better: our practice management platform, which handles bookings, questionnaires, clinical records, payments, and client emails.
• Formspree: which delivers enquiry form messages to our inbox.
• Vercel: which hosts this website.

Each provider is contractually required to protect your information and to use it only on our instructions. We may also disclose information where the law requires it, for example in response to a court order.

7. Transfers outside the UK

Some of our providers store information outside the UK. Where that happens, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum or an adequacy decision.

8. How long we keep your information

We keep personal information only as long as we need it. Enquiry messages are deleted once the conversation has ended and no booking has followed. Clinical records are kept in line with professional record-keeping requirements for dietetic practice, then securely deleted. If you unsubscribe from email updates, we stop sending them straight away.

9. Your rights

Under the UK GDPR you have the right to:

• Access: request a copy of the personal information we hold about you.
• Rectification: ask us to correct information that is inaccurate or incomplete.
• Erasure: ask us to delete your information in certain circumstances.
• Restriction: ask us to limit how we use your information in certain circumstances.
• Portability: receive the information you gave us in a structured, machine-readable format.
• Objection: object to processing based on our legitimate interests, and to any direct marketing.
• Withdrawal of consent: withdraw consent at any time where consent is our basis for processing.

To exercise any of these rights, email hello@drrebeccahiscutt.com. We will respond within one month.

10. Complaints

If you are unhappy with how we have handled your personal information, please tell us first by emailing hello@drrebeccahiscutt.com. We will acknowledge your complaint within 30 days, look into it without undue delay, and keep you updated on progress and the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

11. Cookies

This website does not use advertising or analytics cookies, and we do not track you across other websites. If you open a results dashboard, your browser stores a small token for that visit so you do not have to re-enter your PIN on every page. It is removed when you close your browser.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed, and we will flag significant changes prominently on the website.

13. Contact

Questions about this policy, or about your information? Contact us or email hello@drrebeccahiscutt.com.