Type of Data | Retention Period | Reason/Legal Basis |
Client health records (adults) | 8 years from last contact | Recommended by British Dietetic Association (BDA) and CNHC (Complementary & Natural Healthcare Council) |
Client health records (children) | Until child is 25 years old (or 26 if aged 17 at last contact) | Aligns with NHS and legal guidance for minors |
Initial consultations & assessments | Included in health records (8 years) | Part of client medical history |
Nutritional plans & recommendations | Included in health records (8 years) | Clinical justification |
Emails, messages & appointment notes | 1–2 years after last contact | Business necessity, client follow-ups |
Financial records (invoices, receipts, payment details) | 6 years | Required by HMRC for tax purposes |
Marketing & mailing list consent | Until consent withdrawn | UK GDPR (must allow opt-out at any time) |