Privacy Policy
Last updated: July 27, 2026
This Privacy Policy explains how Elena Cholovska (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit elenacholovska.com (the “Website”), book a call, become a client, or use the Client Area at clients.elenacholovska.com. It should be read together with our Terms & Conditions.
By using this website or booking a call, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Data Controller
The data controller responsible for your personal information is:
If you use this website from the UK, EU, or EEA, your personal data is processed in accordance with applicable data protection laws, including UK GDPR and EU GDPR where applicable.
2. Information We Collect
Information you give us directly
- Name, email address, and phone number
- Booking and intake information — once you become a client, this can include health information such as allergies and food intolerances, existing medical conditions and diagnoses, medications and supplements, pregnancy or breastfeeding status, and relevant medical or family history. This is “special category” data under GDPR, and we only collect it because you choose to share it with us in order to receive a consultation or recommendation.
- Payment-related information, processed by our payment provider, Stripe — we do not receive or store your full card number, only confirmation of what you purchased, the amount, currency, and payment status
- Referral payout details — if you request a referral-credit payout by bank transfer, we collect your SEPA IBAN and account holder name solely to arrange that transfer
- Quiz responses
- Messages sent through contact forms, email, or the Client Area
Information collected automatically
- Account and sign-in data when you use the passwordless (magic-link) login to the Client Area
- Booking and scheduling metadata from Cal.com (booking time, event type, cancellation or reschedule history)
- Acceptance records — when you accept our policies in the Client Area, we log the acceptance together with your IP address and browser user-agent, purely as an audit trail to prove consent was given
- IP address, browser type, device and operating system information
- Pages visited, time spent on pages, and general website interaction data
- Cookies and similar tracking technologies (see Section 4)
3. How We Use Your Data
- Respond to enquiries and contact requests
- Schedule discovery calls and consultations
- Provide and manage your purchased programmes and deliver nutritional therapy services
- Give you tailored nutrition recommendations based on the health information you disclose
- Process payments, discovery credits, coupons, and referral rewards through Stripe
- Operate your Client Area account and send transactional emails (booking confirmations, receipts, programme updates)
- Operate the referral and Google-review incentive programmes, including arranging SEPA payouts
- Maintain records required for accounting, tax, and legal compliance
- Detect and prevent fraud or abuse, and maintain website security
- Analyse website traffic and performance to improve our services
- Comply with legal obligations
We do not use your health information for advertising or marketing purposes, and we do not sell your personal data to third parties.
4. Cookies & Tracking Technologies
This website uses cookies and similar technologies to ensure proper functionality, measure performance, and understand how visitors use the site. Tools currently in use include Google Tag Manager, Vercel Analytics and Speed Insights, and the Meta (Facebook) Pixel.
Cookies may include:
- Essential cookies, required for the website to function
- Analytics cookies, to understand website traffic and usage
- Functional cookies, to remember your preferences
- Marketing/advertising cookies, used for the Meta Pixel
You can control or disable cookies at any time through your browser settings.
5. Who We Share Data With
We share personal data only with service providers who process it on our behalf, and only to the extent needed to provide our services:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing, coupons, subscriptions/instalments | Contact details, purchase amount/currency, payment status |
| Cal.com | Consultation scheduling | Name, email, booking form answers, appointment time |
| Vercel | Website hosting and performance analytics | Technical and usage data described in Section 2 |
| Email delivery provider | Sending transactional emails (bookings, receipts, magic-link sign-in) | Name, email address, email content |
We do not share your health or intake information with any of the above beyond what is structurally necessary — it is not sent to Stripe or Cal.com, and lives only in our own systems and the Client Area. We may also disclose personal data where required by law, regulation, or valid legal process.
6. International Transfers
Some providers listed above may process data outside your country of residence or the EEA/UK. Where that happens, we rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses, to keep your data protected.
7. Data Retention
- Client and purchase records, including health intake data tied to a programme, are kept for as long as you have an active Client Area account and for around 6 years afterwards, to meet accounting and tax obligations and to defend against potential claims.
- Lead records (people who booked a discovery call or contacted us but never became a client) are kept for around 12 months, after which they are deleted or anonymised if there has been no further contact.
- Referral payout details (IBAN and account holder name) are kept only as long as needed to process the transfer and meet accounting obligations, then deleted.
- Legal-acceptance and activity-log audit records are kept for the life of your account, plus around 6 years, as proof of consent and compliance.
8. Your Rights
Depending on your location and applicable law, you may have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data, including your intake information
- Request erasure of your data (“right to be forgotten”), subject to our legal obligation to retain certain records such as payment or tax records
- Restrict or object to certain processing
- Request portability of your data to another provider
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local data protection authority (for example, the ICO in the UK, or your national supervisory authority within the EU/EEA)
To exercise any of these rights, please contact: hello@elenacholovska.com. We may need to verify your identity before acting on a request.
9. Payments
Payments made through the website are processed securely via our third-party payment processor, Stripe. We do not store or have direct access to your full payment card details.
10. Health Information
Some services offered on this website relate to nutrition, thyroid health, hormones, and wellbeing.
Any health-related information you voluntarily provide is treated as sensitive personal data and handled with appropriate confidentiality. Nutritional therapy does not replace medical care, diagnosis, or treatment provided by a physician or qualified healthcare professional.
11. Security
We use reasonable technical and organisational measures to protect your data, including restricted, authenticated access to the Client Area via passwordless magic-link sign-in, encrypted connections (HTTPS), and access controls on our systems. No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security of information transmitted to us.
12. External Links
This website may contain links to external websites or services. We are not responsible for the privacy practices or content of third-party websites.
13. Children’s Privacy
This website and our services are intended for adults and are not directed at individuals under the age of 18. If you believe a child has provided us with personal data, please contact us at hello@elenacholovska.com and we will delete it.
14. Changes to This Privacy Policy
This Privacy Policy may be updated periodically, for example to reflect a new feature or a change in how an existing one works. Any updates will be posted on this page together with a revised “Last updated” date. If you have a Client Area account, we may ask you to re-accept an updated version before continuing to use certain features.
15. Contact
If you have any questions regarding this Privacy Policy or your personal data, you may contact: