Last updated: July 2026
1. Who we are
This website, Kids Gut and Nutrition (kidsgutandnutrition.com), provides educational information about children’s gut health for parents and caregivers.
The website is operated by an individual data controller. For correspondence and data protection enquiries, the operator can be contacted via the contact form on this website or by post at:
c/o SwissMailBox 167
12 Rue Le Corbusier
1208 Geneva
If you wish to exercise your data protection rights, the contact form is the correct channel. You will receive a response within one calendar month.
2. What personal data we collect and why
We collect only the minimum data necessary to operate this website.
Contact form submissions
Data collected: your name, email address, and message content.
Purpose: to read and respond to your message.
Legal basis: consent – Article 6(1)(a) GDPR. You actively choose to submit the form.
Retention: messages are deleted once the enquiry is resolved, and in any case within 12 months.
Checklist download and email delivery
Data collected: your first name (optional) and email address.
Purpose: to deliver the requested PDF checklist to you by email.
Legal basis: consent – Article 6(1)(a) GDPR. You actively choose to submit the form and tick the consent checkbox.
Email service provider: Mailerlite UAB, based in the European Union. Your email address is stored on Mailerlite’s EU servers and used solely to deliver the checklist you requested. No marketing emails are sent without separate consent. You may withdraw consent and request deletion of your data at any time by clicking the unsubscribe link in any email or by contacting us via the contact form.
Retention: your email address is retained until you unsubscribe, after which it is deleted within 30 days.
Website analytics
Data collected: page views, session duration, referral source, device type, and approximate geographic location at country level. No personal data is collected. No cookies are used. Visitor counts are calculated using a non-reversible encrypted identifier that cannot be linked to any individual.
Purpose: to understand which educational content is most useful to parents and to improve the website.
Tool used: Independent Analytics – a self-hosted WordPress plugin. All analytics data is stored exclusively in this website’s own database. No data is transmitted to or from any external server at any point. Independent Analytics has no access to your data.
Legal basis: legitimate interest – Article 6(1)(f) GDPR. The specific interest is understanding how parents engage with educational content so it can be improved. Because no personal data is collected and no cookies are used, the impact on visitor privacy is negligible.
Retention: analytics data is stored on this website’s server and automatically deleted after 24 months.
Technical server data
Data collected: IP address, browser type, and device information, collected automatically by the web server for standard technical operation.
Purpose: website security and technical function.
Legal basis: legitimate interest – Article 6(1)(f) GDPR.
Retention: standard server logs are retained for a maximum of 30 days.
3. Third-party service providers
Website hosting
Provider: Hostinger, based in the European Union.
Role: stores and serves the website files and database, including analytics data.
Data location: European Union servers.
No personal data from visitors is shared with Hostinger beyond what is technically necessary for hosting.
Email delivery
Provider: Mailerlite UAB, based in the European Union.
Role: stores subscriber email addresses and delivers automated emails containing requested downloads.
Data location: European Union servers.
Mailerlite operates under a data processing agreement and processes data only as instructed.
Analytics
Provider: Independent Analytics (self-hosted WordPress plugin).
Role: records anonymised website usage data stored exclusively within this website’s own database. Independent Analytics does not operate external servers and never receives, accesses, or processes visitor data. No data processing agreement is required.
We do not use Google Analytics, Meta Pixel, or any other analytics tool that transfers data to third parties.
We do not sell, rent, share, or trade your personal data with any third party for any commercial purpose.
4. International data transfers
All service providers used by this website are based within the European Union. No personal data is transferred outside the European Economic Area. If this changes in the future, this policy will be updated and appropriate transfer safeguards – such as Standard Contractual Clauses approved by the European Commission – will be in place before any transfer occurs.
5. Cookies
This website does not use tracking cookies or advertising cookies.
The Independent Analytics plugin uses cookieless tracking, meaning no cookies are placed on your device for analytics purposes. Strictly necessary cookies required for the website to function technically may be set by WordPress and your hosting provider. These do not require consent under GDPR.
You can manage or delete cookies at any time through your browser settings.
6. Use of artificial intelligence tools
In the operation of this website, AI-assisted tools may be used for tasks such as drafting, editing, research support, or structural planning. All medical and clinical content published on this website is written, reviewed, and verified by a qualified paediatric gastroenterologist. AI tools do not make clinical judgements and are not used to generate medical advice.
Where any article has been substantially drafted with AI assistance, this is disclosed at the foot of that article in accordance with EU AI Act Article 50 transparency obligations (applicable from 2 August 2026).
This website does not use AI systems that interact directly with users, make automated decisions about individuals, or process biometric or sensitive personal data.
7. Your rights under GDPR
As a visitor based in Europe, you have the following rights regarding your personal data:
- Right of access – you can request a copy of any personal data we hold about you.
- Right to rectification – you can ask us to correct inaccurate data.
- Right to erasure – you can ask us to delete your data, subject to legal retention obligations.
- Right to restriction – you can ask us to limit how we use your data in certain circumstances.
- Right to data portability – you can request your data in a structured, machine-readable format where technically applicable.
- Right to object – you can object to processing based on legitimate interest at any time.
- Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint – you have the right to complain to the data protection supervisory authority in your country of residence within the European Union.
To exercise any of these rights, please use the contact form on this website. We will respond within one calendar month.
8. Children’s data
This website is directed at parents and caregivers, not at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has submitted personal data through this website, please contact us via the contact form and we will delete it without delay.
9. Data security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. These include encrypted data transmission via HTTPS, EU-based hosting, and use of processors operating under data processing agreements. Because analytics data never leaves our own server, it is not exposed to third-party risk.
No internet transmission is completely secure. If you have concerns about your data, please contact us via the contact form.
10. Changes to this policy
This policy will be updated whenever our data processing practices change, and reviewed at minimum annually. The date at the top of this page reflects the most recent update. Material changes will be noted clearly.