Privacy policy

Last updated: 16 October 2026

Yiangou Nutrition ("we", "us") is the data controller for personal data collected through this website and our client portal.

What we collect

• Consultation requests: your name, email, phone number, your main goal, your sport or activity, your biggest nutrition challenge, how and when you would like us to contact you, and any package you are interested in.
• Client accounts: your contact details, date of birth, sport, height and weight, daily and weekly check-ins, progress entries, form answers, event support requests, messages, documents and photos you upload, and your signed data and privacy agreement.
• Security data: sign-in times, IP address, approximate country, browser and device type, used to keep your account safe and spot unusual sign-ins.
• Bug reports: if you send one, the page you were on, your browser details and, if you choose, a screenshot of that page.

Why we use it

• To reply to your enquiry and provide coaching (contract, or steps before entering a contract).
• To keep accounts secure and prevent fraud (legitimate interests).
• Health-related information such as weight and wellbeing check-ins is only processed with your explicit consent, given when you set up your account.

Who we share it with

We do not sell your data. We use a small number of service providers to run the service: our web host (which stores the database), our email provider, and if enabled, a country-lookup service for sign-in security. They only process data on our instructions.

Where your data is stored and how we protect it

Your information is stored in a secure database through our website's online system, hosted on the Cybrancee platform. It is sent over encrypted connections (HTTPS), accounts are protected by two-step sign in, backups are encrypted, and only your coach and authorised Yiangou Nutrition staff can access client information. Access to the staff system is logged.

When you become a client you are asked to read and sign our data and privacy agreement, which summarises this. We record the date, time and version you signed.

If there is a data breach

If a data breach affects your personal information, we aim to tell you within 24 hours of discovering it, where possible. We will explain what happened, what information was affected, what we are doing about it and what you can do to protect yourself. Where the law requires, we will also report it to the Information Commissioner's Office (ICO) within 72 hours.

How long we keep it

Consultation requests that do not become clients are deleted after 12 months. Client records are kept while you are a client and for up to 6 years afterwards for legal and accounting reasons, unless you ask us to delete them sooner where the law allows. Security logs are kept for 12 months.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and withdraw consent at any time. Contact us at [email protected]. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

See our cookie policy.