Privacy Policy

Nutrition by MD

1. Who We Are

Nutrition by MD is a nutrition counseling practice providing nutrition counseling services, personalized meal planning, nutrition education, online consultations, workshops, lectures, digital products, and other services related to healthy eating, nutrition, and healthy lifestyles.

Data Controller:

Nutrition by MD
Registered Office: Ive Andrića 5, 71000 Sarajevo, Bosnia and Herzegovina
Email: info@nutritionbymd.com
Website: www.nutritionbymd.com

Hereinafter referred to as “Nutrition by MD,” “we,” “us,” or “the Practice.”

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we retain it, with whom we may share it, and what rights you have regarding your personal data.

2. What Personal Data We Collect

Depending on the type of service provided, we may collect the following personal data:

  • Full name;
  • Date of birth or age;
  • Gender;
  • Contact details, including your phone number, email address, and social media username if you contact us through social media;
  • Information necessary for scheduling appointments and communicating with you;
  • Information about your dietary habits, food diary, food intake, fluid intake, supplements, and lifestyle;
  • Information about your body weight, height, Body Mass Index (BMI), body measurements, and other indicators relevant to nutrition counseling;
  • Information about your physical activity, sleep, work schedule, family habits, and meal planning;
  • Information regarding allergies, intolerances, medical diagnoses, medications, laboratory test results, medical records, and other health-related information that you voluntarily provide to us;
  • Information regarding pregnancy, breastfeeding, children’s nutrition, or special dietary requirements, where relevant to the service;
  • Payment, invoicing, and service-related information;
  • Communications via email, telephone, contact forms, social media, or other communication channels;
  • Photographs of meals, food labels, products, or other materials voluntarily provided for counseling purposes;
  • Technical information relating to the use of our website, where cookies, analytics, or similar technologies are used.

We do not collect personal data that is not necessary for providing our services, communicating with you, fulfilling our legal obligations, or other clearly defined purposes.

3. Special Categories of Personal Data

As part of our nutrition counseling services, we may process personal data relating to your health, laboratory test results, medical diagnoses, medications, allergies, intolerances, pregnancy, breastfeeding, children’s nutrition, and other sensitive health-related information.

We process such data only where necessary for providing nutrition counseling services, preparing recommendations, protecting the client’s interests, and ensuring safe and professional practice. Such data is processed with special care, restricted access, and appropriate security measures.

Nutrition by MD does not diagnose medical conditions, treat illnesses, prescribe medication, or modify medical treatment. Nutrition counseling is intended as nutritional and educational support and does not replace medical examinations, diagnoses, treatment, or supervision by a qualified healthcare professional.

4. Purposes of Processing Personal Data

We process your personal data for the following purposes:

  • Responding to your inquiries and communicating with you;
  • Scheduling and organizing appointments;
  • Providing nutrition counseling services;
  • Preparing individualized or family meal plans;
  • Analyzing dietary habits, food diaries, and other information you provide;
  • Monitoring your progress and conducting follow-up consultations;
  • Sending recommendations, educational materials, invoices, and service-related notifications;
  • Maintaining records of clients and services provided;
  • Complying with legal, tax, accounting, and other statutory obligations;
  • Protecting our legal rights in the event of complaints, claims, disputes, or other legal proceedings;
  • Sending newsletters, educational updates, or promotional communications only where you have given your consent or where another appropriate legal basis exists;
  • Improving the quality of our services, business operations, and overall customer experience.

5. Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

  • Your consent;
  • The performance of a contract or taking steps prior to entering into a contract;
  • Compliance with legal obligations, particularly tax, accounting, and other statutory obligations;
  • Our legitimate interest in managing our business, protecting our legal rights, communicating with clients, and preventing misuse;
  • Your explicit consent for processing special categories of personal data, including health-related data, where necessary for the provision of nutrition counseling services.

6. Are You Required to Provide Personal Data?

Providing the basic information necessary for appointment scheduling, communication, invoicing, and the provision of our services is required in order to establish our professional relationship.

Providing health-related, nutritional, and other professional information is not a legal requirement. However, without such information, our services may be incomplete, less personalized, or we may be unable to provide them safely and professionally.

The client is responsible for providing accurate, complete, and up-to-date information that is relevant to nutrition counseling.

7. Who We May Share Your Personal Data With

We do not sell or disclose your personal data to third parties for commercial purposes.

Your personal data may only be accessible to individuals and entities that require access for the provision of our services or to comply with legal obligations, including:

  • Members of the Nutrition by MD team involved in providing the services;
  • Accountants, banks, tax authorities, and other competent public authorities where required by law;
  • Providers of technical services such as email services, cloud storage, web hosting, online forms, video conferencing tools, payment systems, and similar service providers;
  • External collaborators, only where they are involved in a specific service and there is an appropriate legal basis;
  • Competent authorities, courts, or other public bodies where required by law or necessary for the protection of our legal rights.

All persons with access to personal data are required to maintain confidentiality and use the data solely for the purposes for which it has been made available.

8. Online Tools and International Data Transfers

As we also provide our services online, we may use digital tools for communication, appointment scheduling, document storage, video consultations, sharing educational materials, and payment processing. These tools may include email services, cloud storage, video conferencing platforms, online forms, payment platforms, and social media platforms.

Some of these service providers may operate servers or be located outside Bosnia and Herzegovina. In such cases, we strive to use service providers that implement appropriate safeguards for data protection and security.

The client acknowledges and agrees that online communication may take place via email, telephone, WhatsApp, social media platforms, video calls, or other agreed digital communication channels, understanding that no electronic communication system is entirely free from security risks.

9. Social Media

If you contact us through Instagram, Facebook, LinkedIn, WhatsApp, or other social media platforms, we process the information that you voluntarily provide through those channels.

We kindly ask that you do not send sensitive medical information, laboratory results, photographs of medical records, or detailed health information via social media unless it is strictly necessary and you understand the potential risks associated with this method of communication.

The operators of these social media platforms are independently responsible for their own processing of personal data in accordance with their respective privacy policies.

10. Newsletter and Promotional Communications

If you subscribe to our newsletter or consent to receiving educational and promotional communications, we may send you information about new services, educational programs, workshops, products, articles, recipes, and other Nutrition by MD content.

You may withdraw your consent to receive newsletters or promotional communications at any time by sending us a request via email or by using the unsubscribe option where available.

Withdrawal of consent does not affect the lawfulness of any processing carried out before the consent was withdrawn.

11. Cookies and Website Analytics

Our website may use cookies and similar technologies to ensure the proper functioning of the website, analyze website traffic, improve the user experience, and, where applicable, support marketing activities.

If we use analytical or marketing cookies that are not strictly necessary for the operation of the website, visitors will be informed and given the opportunity to manage their preferences through the available settings.

12. How Long We Retain Your Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable legal, tax, accounting, and other regulatory obligations.

Indicative retention periods include:

  • Inquiries from individuals who do not become clients: up to 12 months;
  • Client documentation and nutrition counseling records: up to 5 years after the end of our professional relationship, unless a longer retention period is required by law or necessary to protect legal rights or resolve disputes;
  • Invoices, financial, and accounting records: for the periods required under applicable law;
  • Newsletter subscription data: until consent is withdrawn or the user unsubscribes;
  • Data necessary for the protection of legal rights: until the expiration of applicable limitation periods or the conclusion of legal proceedings.

After the applicable retention period expires, personal data is securely deleted, anonymized, or archived in accordance with the purpose of processing and applicable legal requirements.

13. How We Protect Your Personal Data

We implement reasonable technical and organizational measures to protect your personal data, including:

  • Restricting access to personal data to authorized persons who require it;
  • Storing data in secure electronic systems and protected folders;
  • Using passwords and, where possible, two-factor authentication;
  • Separating business and personal communication channels whenever feasible;
  • Maintaining the confidentiality of personal data;
  • Exercising caution when transmitting laboratory results, nutrition plans, and other sensitive documents;
  • Regularly deleting or securely archiving personal data that is no longer required.

However, no electronic communication or storage system can be guaranteed to be completely secure. Therefore, we encourage clients to share sensitive information carefully and only through agreed communication channels.

14. Your Rights

In accordance with applicable data protection laws, you have the right to:

  • Obtain confirmation as to whether we process your personal data;
  • Access your personal data;
  • Request the correction of inaccurate or incomplete personal data;
  • Request the deletion of your personal data where the legal requirements are met;
  • Request the restriction of processing;
  • Object to the processing of your personal data;
  • Request data portability where applicable;
  • Withdraw your consent at any time where processing is based on consent;
  • Lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina or seek protection before the competent court.

To exercise your rights, please contact us at:

Email: info@nutritionbymd.com

We will respond to your request without undue delay and within the time limits prescribed by applicable law.

15. Children’s Personal Data

Services relating to children are provided only with the involvement of a parent, legal guardian, or other authorized representative.

Processing a child’s personal data requires the consent of the parent or legal guardian unless applicable law provides otherwise in a specific situation.

The parent or legal guardian is responsible for ensuring that the information provided on behalf of the child is accurate, complete, and up to date.

16. Publication of Testimonials, Photographs, and Results

Client testimonials, photographs, statements, results, meal photographs, before-and-after photographs, or other materials may only be published with the client’s separate and explicit consent.

The client may consent to anonymous publication, publication using initials, or publication under their full name, depending on the agreed terms.

Without specific consent, we will not publish any information that could identify the client.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to comply with changes in applicable laws, changes in our business operations, or changes in the way we process personal data.

The current version of this Privacy Policy will always be available on our website at www.nutritionbymd.com or upon request.

18. Contact

If you have any questions regarding the processing of your personal data, you may contact us at:

Nutrition by MD
Ive Andrića 5
71000 Sarajevo
Bosnia and Herzegovina

Email: info@nutritionbymd.com
Website: www.nutritionbymd.com