PRIVACY POLICY

This Privacy Policy is served by Rick Miller Limited, Office 2 The Reach, 687–693 London Road, Westcliff-On-Sea, Essex, United Kingdom, SS0 9PA.

​

• Websites covered: www.rickmillerdietitian.co.uk and www.millerhealth.london

• Company registration number: 08309040

• ICO registration number: ZA104889

​

The purpose of this policy is to explain how we collect, process, handle, and protect your personal information through our business, in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

​

By using our websites or services, you agree to the terms set out in this policy. If you do not agree, please refrain from using our sites or submitting personal data.

​

Key Definitions

​

• “We”, “us”, “our” = Rick Miller Limited (practising as Rick Miller, Consultant Dietitian & Expert Witness, and Miller Health).

• “You” = the person using our websites or services.

• GDPR = General Data Protection Regulation.

• PECR = Privacy and Electronic Communications Regulations.

• ICO = Information Commissioner’s Office.

• Cookies = small files stored on your computer/device.

​

Our Data Protection Principles

​

We follow the core principles of UK GDPR:

• Lawfulness, fairness, transparency

• Purpose limitation

• Data minimisation

• Accuracy

• Storage limitation

• Integrity and confidentiality

• Accountability

​

Processing of Personal Data

​

We collect and process your personal data under the following lawful bases:

​

1. Consent

​

• Purpose: To obtain your agreement before starting dietetic treatment or processing data for marketing.

• Why: Ensures you understand treatment risks, terms of service, and data use.

• Data retention: Until you withdraw consent.

• Sharing: With your GP, consultant, or other healthcare professionals where you have expressly agreed.

​

2. Legal Obligation

​

• Purpose: Compliance with healthcare regulations, HCPC standards, and medico-legal obligations.

• Why: Required by UK law, safeguarding legislation, and healthcare regulators.

• Examples: Creating secure medical records, maintaining medico-legal case files.

• Sharing: With regulators, courts, or insurers where legally required.

​

3. Vital Interests

​

• Purpose: Protect your health and safety in line with HCPC guidance.

• Examples: Referrals to other clinicians, insurance claims processing.

• Sharing: With medical colleagues or insurers, only with your consent.

​

4. Special Category Data (Health Data)

​

• Purpose: To provide safe and effective dietetic care.

• Processing: Secure notes, encrypted emails, referral letters.

• Sharing: With your GP, consultants, or relevant third-party clinicians (with explicit consent).

​

5. Criminal Offence Data

​

• Purpose: Where we become aware of a legal obligation (e.g. safeguarding, police requests, court orders).

• Sharing: Only with HM Courts & Tribunals Service, police, or other authorities where required by law.

​

Data Retention

​

• Clinical records: Minimum of 8 years after the last treatment (or until age 25 if seen as a child), in line with NHS and HCPC standards.

• Medico-legal records: As required by court direction and insurance purposes.

• Marketing data: Until you unsubscribe.

​

Your Rights

​

Under UK GDPR you have the right to:

• Be informed

• Access your data

• Rectification (correction of inaccuracies)

• Erasure (where legally permitted)

• Restrict processing

• Data portability

• Object to processing

• Not be subject to automated decision-making or profiling

​

You may complain to the ICO (www.ico.org.uk) if you are unhappy with how we handle your data.

​

Data Security

​

• Clinical records are stored securely, offline and/or encrypted.

• Electronic correspondence (including sensitive health data) is sent via encrypted email systems.

• Access to personal data is restricted to authorised personnel only.

​

Marketing & Communications

​

• We use consent as the lawful basis for marketing communications (e.g. newsletters).

• Marketing emails are sent through our provider GoDaddy.com (EMS).

• Messages may include tracking features (open/click rates) for service improvement.

• You may unsubscribe at any time using the link in emails or by contacting us directly.

​

Website & Cookies

​

• Our websites may use cookies to improve user experience.

• Partner or third-party links (e.g. booking software, payment providers) may use their own cookies, which are outside our control.

​

Updates to this Policy

​

We may update this Privacy Policy periodically. Any significant changes will be communicated on our website.

​

Contact

​

For any data protection queries, please contact:
Rick Miller Limited
Email: hello@millerhealth.london