Legal

Privacy Policy

Last updated 1 August 2026. This policy explains how Inner Radiance handles personal data in line with the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

1. Who we are

Inner Radiance is the nutritional therapy practice of Laura Gasan, based in Malta ("we", "us"). We are the data controller for personal data collected through this website. Contact: info@innerradiance.eu.

2. What data we collect

Contact form: your name, email address and message. Newsletter: your email address. Bookings and client care: information you provide through our secure client portal (Practice Better), which may include health information you choose to share. Technical data: basic, non-identifying logs kept by our hosting provider for security.

3. Why we process it, and on what legal basis

To respond to your enquiries (legitimate interest / steps prior to a contract); to deliver consultations and programmes you book (performance of a contract); to send our newsletter (your consent - you can unsubscribe at any time via the link in every email); and to meet legal obligations. Health information shared in the course of nutritional therapy is processed only with your explicit consent (Article 9(2)(a) GDPR), and is treated with strict confidentiality.

4. Who we share it with

We do not sell personal data. We use carefully selected processors to run the practice: our website hosting provider, our email provider, Practice Better (client portal and bookings) and our newsletter platform. Where a provider is located outside the EU/EEA, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep it

Enquiries: up to 12 months after our last exchange. Newsletter data: until you unsubscribe. Client records: for the period required by professional and legal obligations, after which they are securely deleted.

6. Your rights

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time (without affecting processing carried out before withdrawal). To exercise any right, email info@innerradiance.eu. You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC), Malta - idpc.org.mt - or with your local supervisory authority.

7. Cookies

This website uses only technically necessary cookies. If we introduce analytics, we will do so with a consent banner and update this policy first.

8. Changes

We may update this policy from time to time; the latest version will always be available on this page.