Privacy Policy
Last updated: July 5, 2026
Data controller
The controller of the personal data collected on this site is Lauri Bauduin, certified dietitian (INAMI license no. 5-63672-92-601), practising in Soignies, Bernissart and Overijse. As a healthcare professional, she is bound by professional secrecy (Article 458 of the Belgian Criminal Code). For any question about this policy or the processing of your data, you can contact her by email at contact@laurisfoodadvice.com.
Data we collect
When you use a form on this site (contact or appointment booking), we collect the data you voluntarily provide: your name, email address, the subject of your request, and the content of your message. Depending on what you choose to write in it, the free-text message field may contain health-related data (for example, a condition, a treatment, or a nutritional goal). This site does not collect any browsing data automatically: it uses no cookies, no audience measurement tools, and no advertising trackers.
Purposes of processing
Your data is processed solely to respond to your contact request, to organize and follow up on your appointments and, where applicable, to provide your dietary care. It is never used for commercial or advertising purposes and is never resold.
Legal basis
The processing of your identification and contact data is based on your consent (Article 6.1.a GDPR), freely given when you submit a form. The processing of any health data you provide is based on your explicit consent (Article 9.2.a GDPR) and, within the context of care, on the necessity relating to the provision of healthcare by a professional bound by professional secrecy (Articles 9.2.h and 9.3 GDPR).
Health data and professional secrecy
Health-related data constitutes a special category of data benefiting from enhanced protection. It is used only to follow up on your request or your care, is accessible only to Lauri Bauduin, and is never disclosed to third parties without your consent, except where legally required. We invite you to mention such information only to the extent necessary for your request.
Recipients and processors
Your data is accessible only to Lauri Bauduin. Messages sent via the forms are processed directly by the website host's mail server (LWS, a French company), with no third-party intermediary. The booking links lead to external platforms (Rosa, MYA Agenda) which process your data under their own responsibility and their own privacy policy once you use them.
Transfers outside the European Union
Contact form messages are processed and hosted in France, at the website's hosting provider, with no transfer outside the European Union. External booking platforms (Rosa, MYA Agenda) may have their own processing practices; we invite you to review their respective privacy policies before using them.
Data retention
Contact requests that do not lead to care are kept for as long as necessary to handle them, then deleted. When care is provided, the data relating to your file is kept for the legal retention period applicable to patient records. Accounting documents (invoices) are kept for the 7-year legal period required by Belgian law.
Data security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration or disclosure, in accordance with Article 32 GDPR. To prevent abuse of the forms (spam, automated submissions), the number of submissions per IP address is limited: this IP address is never stored in plain text, it is irreversibly transformed (hashed) and automatically deleted after one hour. This processing is based on our legitimate interest in ensuring the security of the service (Article 6.1.f and Recital 49 GDPR).
No automated decision-making
Your data is not subject to any solely automated decision-making or profiling.
Cookies
This site does not use any cookies or tracking tools. No consent banner is therefore required.
Your rights
In accordance with the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability and the right to withdraw your consent at any time. The right to erasure may, however, be limited by the legal retention obligations applicable to healthcare records. To exercise your rights, contact us at contact@laurisfoodadvice.com; proof of identity may be requested.
Right to lodge a complaint
If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — www.dataprotectionauthority.be.
Changes to this policy
This privacy policy may be updated to reflect legal developments or changes in our practices. The date of the latest update appears at the top of this page.