Applications and administration
To respond to enquiries, take steps at request, administer agreements, deliver services and maintain accurate records.
Privacy notice
How the Association handles personal information
The World Nutrition Association is the controller of personal information processed for its institutional activities, except where another arrangement is expressly identified.
Scope
Information covered by this notice
This notice applies to information submitted through the website or processed in connection with enquiries, applications, certification, mark licensing, membership, professional recognition, education, events, consultations, partnerships, complaints, appeals and other Association activities.
Information may include contact and identity details; professional, education and employment information; organisation and product records; correspondence; payment and transaction records; declarations and conflicts; attendance and learning records; complaint or appeal information; and technical information necessary for security and service operation.
Special-category or similarly sensitive information is collected only where necessary, lawful and subject to additional safeguards. It should not be included in an initial website enquiry unless specifically requested through an appropriate controlled route.
Purposes and lawful bases
Why information is used
The applicable lawful basis depends on the activity, relationship and jurisdiction.
Standards and assurance
To assess eligibility and conformity, make controlled decisions, maintain registers and protect programme integrity.
Membership and education
To assess applications, administer status, support learning, monitor conduct and maintain professional records.
Complaints and legal duties
To consider concerns, appeals, safeguarding, disputes, legal obligations and the establishment or defence of claims.
Research and service quality
To evaluate programmes, understand participation, improve services and produce appropriately aggregated analysis.
Security and misuse prevention
To authenticate access, limit abuse, investigate incidents and protect people, records and digital services.
Sharing and international processing
Access is limited by purpose
Information may be shared with authorised Association personnel, committee or panel participants, assessors, professional advisers, secure service providers, laboratories or technical specialists where required for the stated purpose and subject to appropriate duties.
Information may also be disclosed where required by law, to competent authorities, or where necessary to protect rights, safety or programme integrity. Certification and professional status information is published only to the extent authorised by the applicable programme and privacy framework.
International processing is protected through an applicable legal transfer mechanism, contractual safeguards, due diligence and access controls. The location and sensitivity of processing are considered before information is transferred.
Retention and security
Records are kept only for a defined purpose
Retention is determined by the nature of the record, contractual and certification cycles, legal obligations, limitation periods, professional-accountability needs and the continuing value of an authoritative record. Records are securely deleted, anonymised or restricted when the applicable period ends, subject to legal hold or archival obligations.
Controls include information classification, least-privilege access, strong authentication, encryption where appropriate, protected evidence storage, logging, review of privileged activity, secure development and tested incident procedures. No method of processing is entirely without risk, and controls are reviewed in proportion to changing threats and consequences.
Individual rights
Requests are considered under applicable law
Depending on the law that applies, an individual may have rights to be informed, obtain access, correct inaccurate information, request erasure or restriction, object to certain processing, receive portable information, and withdraw consent where consent is the basis used.
Rights may be subject to lawful limitations, including the rights of others, confidentiality, legal obligations, privilege and the integrity of certification, complaint or appeal records. Requests may be submitted through the official contact route and may require proportionate identity verification.
Concerns may also be raised with the Information Commissioner’s Office in the United Kingdom or another competent supervisory authority.
Website operation
Cookies and technical information
The public website is designed to operate without advertising or cross-site behavioural tracking. Essential technical processing may be used for security, routing, rate limiting, availability and fraud prevention. Browser and network information is handled only to the extent necessary for those purposes.
Material changes to this notice are published on this page. Processing remains governed by the notice and controlled terms applicable when the relevant information is collected or the activity occurs.