Privacy Policy

PRIVACY POLICY Kathleen Karius – Functional Nutrition and Wellbeing Contact: kathleen@karius.ch · Egg bei Zürich, Switzerland This policy explains how I collect, use, store, and protect your personal information when you work with me. I am the controller responsible for your data under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU GDPR. 1. What I collect • Name, contact details, and date of birth • Health information: medical history, symptoms, diet, lifestyle, test results, and session notes • Appointment and payment information • Your signed consents and form answers I collect this directly from you, through this client portal, email, phone, or when you book. I do not collect data about you from other sources, unless you ask me to contact your doctor. 2. Why I use it, and the legal basis • To provide nutrition and wellbeing services (our contract, and your explicit consent for health data) • To meet legal and professional record-keeping obligations • To send newsletters only if you have opted in (your consent, which you may withdraw at any time) I do not use automated decision-making or profiling. 3. Who can see it Only you and I. Your data is never sold. I share it only with your written permission (for example with your doctor) or where legally required. I use carefully selected service providers who process data on my behalf under data processing agreements: secure cloud hosting for this portal, Wix for bookings and payments, Zoom for video sessions, and Heidi Health as an AI medical scribe (only with your consent). Some providers may store data outside Switzerland; where this happens, it is protected by adequacy decisions or standard contractual clauses. 4. How long I keep it Only as long as necessary for your care and to meet legal and professional obligations (health records are generally kept for 10 years after our last contact), after which they are securely deleted. 5. How I protect it Encrypted connections and storage, password-protected access, strict access rules so that each client can only see their own records, private file storage with time-limited links, and regular review of what I hold. 6. Your rights You have the right to see the data I hold about you (you can download it from your portal at any time), to ask for corrections or deletion, to restrict or object to processing, to data portability, and to withdraw consent at any time. Withdrawing consent does not affect processing before the withdrawal. To exercise your rights, email kathleen@karius.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority. 7. Cookies This portal uses only the essential storage needed to keep you signed in. No advertising or tracking cookies. Version 2 – October 2026