Contact form privacy notice
How I process information submitted through the secure contact form on nataliacorvo.com.
Data controller: Natalia Corvo. Contact: Dietolozki@gmail.com. Last updated: 26.07.2026.
Scope of this notice
This notice applies only to the initial contact form on this website. The form does not accept attachments, medical records or test results and is not intended for urgent situations.
Information collected
- name and email address;
- optional phone number;
- whether the enquiry concerns an adult, teenager, child or is not consultation-related;
- the selected enquiry topic and a short message;
- parent or legal guardian confirmation for a minor;
- the consents selected in the form and technical security data needed for spam protection.
Health information
Please do not enter diagnoses, results or a detailed health history. If the short message nevertheless reveals health information, I process it only after separate explicit consent is selected and solely to answer the enquiry. Consent can be withdrawn by emailing the address above; withdrawal does not affect prior lawful processing.
Purpose and legal basis
The information is used to read the enquiry, assess whether I can help, reply and, where relevant, arrange a consultation. Contact details are processed to take steps requested before entering into a contract and, depending on the enquiry, on the legitimate interest of handling correspondence. Health information relies on explicit consent.
Cloudflare and message delivery
The website, Turnstile protection and message delivery operate in Natalia's dedicated Cloudflare account. The message is delivered only to Dietolozki@gmail.com. The form does not store leads in a database and does not use Supabase, Vercel or Resend.
Cloudflare and Google may process technical information under their own terms and international transfer mechanisms. Access is limited to services needed to protect and deliver the form.
Retention
If no consultation begins, I delete or anonymise initial enquiry correspondence within 12 months unless earlier deletion is appropriate or the law requires longer retention. Records connected with a service that begins are subject to separate information provided to the client.
Minors
A form concerning a child or teenager may be submitted only by a parent or legal guardian. I do not ask minors to submit information through the website themselves.
Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability, or object to processing. You may also withdraw consent and complain to the relevant supervisory authority.
- Data Protection Commission, Ireland
- Information Commissioner's Office, UK
- Urząd Ochrony Danych Osobowych, Polska
No advertising tracking
At present, the website does not use Google Analytics, advertising pixels, remarketing or profiling based on health information. If measurement is added later, it will be implemented only after an appropriate consent mechanism and an update to this notice.