What we do with your data, and what we do not

In short

First Aid for Your Gut processes personal data because you visit our website, because you request or buy something from us, or because you are following a guidance programme with us. We never sell your data and we do not use it for purposes you could not see coming.

• We are a Dutch practice, our website and databases run on servers in the Netherlands, and we work under the European General Data Protection Regulation (GDPR), known in the Netherlands as the AVG.
• We only ask for what we need for the thing you came for.
• Data about your health is only processed with your explicit consent, or because you are following a guidance programme with us.
• We only share data with parties that help us deliver the service, and only what they need for it.
• You can always ask to see your data, have it corrected or have it deleted.
• What you are reading is fixed in a numbered version. We record which version applied at the moment you agreed.

Who is responsible for your data

First Aid for Your Gut is the English name of Eerste hulp bij Darmklachten, a practice established in the Netherlands. We are the data controller within the meaning of the General Data Protection Regulation (GDPR). That means we decide which data is processed and what for.

Because we are a Dutch organisation, Dutch and European law applies to everything we do with your data, wherever in the world you happen to live. Our website, our databases and our email run on servers in the Netherlands, within the European Economic Area. The Dutch Data Protection Authority supervises us.

We are not required to appoint a data protection officer and we have not appointed one. Privacy questions come straight to us, at the email address above.

Which data we process, and why

What we process depends on what you do. It is set out per situation below, so you can look up what applies to you.

You visit our website

General details are recorded for every visit: your IP address, the time, the pages you look at, the device and browser you use and the website you came from. We use that to see which articles are being read and to improve and protect the website. We look at statistics at group level, not to follow you personally.

You complete the Gut Scan

The Gut Scan asks about your symptoms, your food, your lifestyle and your stress levels, and it asks for your first name and your email address. Based on your answers we automatically put together a personal profile, which you receive by email as a PDF. Your answers are stored encrypted, and of your IP address we keep only an irreversible encrypted representation, not the address itself. We also record the moment you gave your consent.

Because you tell us about your symptoms in the Gut Scan, this is data about your health. See Data about your health.

You sign up for our newsletter

For The Poo Times we process your first name and your email address, along with the moment you signed up and the place where that happened. That way we can show later that you signed up yourself. Every email carries an unsubscribe link. If you unsubscribe, we keep only your email address on an unsubscribe list, so that you stop receiving our email.

You create an account

If you create an account on our website, we process your name, your email address, your username and an encrypted password. We also record what you have looked at and what you fill in, so you can pick up where you left off.

You book a free intro call

For an intro call we process your name, your email address, your phone number, your preference for how we speak and whatever you tell us about your situation in the booking. Those appointments run through Calendly and land in our calendar. We make notes of the conversation itself, which we use to help you properly.

You get in touch

If you send us an email, a WhatsApp message or a message through Facebook, Instagram or TikTok, we process your name, your contact details and the content of your message. If you write to us about your symptoms, we process that information too, purely so we can answer your question.

Of people who show interest we keep a simple record: name, contact details, what the question was about and when we last spoke. That is an overview of ongoing contacts, not a medical file.

You order something from our shop

When you place an order, for example the book or a laboratory test, we process your name, your address, your email address, your phone number and the details of your order and payment. The payment itself runs through our payment provider; we can see that you have paid, but not your full bank or card details.

You request a laboratory test

For a stool test, blood test or food intolerance test, the laboratory and we need more: your name, your address, your date of birth, your sex and the details that matter for the test. The result comes to you and to us, and is discussed in a consultation.

You follow a guidance programme

If you become a client, we keep a file. It holds your personal and contact details, your symptoms, your medical history as far as you share it with us, the medication and supplements you take, your food and lifestyle details, test results, the treatment plan and the reports of your consultations. Your file is only accessible to your own therapist or nutrition specialist and to the people within our organisation who need it in order to guide you.

You share your experience with us

We only publish client experiences on the website or on social media if you have given permission beforehand. You can withdraw that permission at any time and we will take your experience down.

You apply for a job or to join as a practitioner

From applicants and from practitioners who want to join us we process the details they send us themselves: name, contact details, training, diplomas, registrations and CV. We keep those details until four weeks after the end of the procedure, unless you give us permission to keep them longer.

Data about your health

Data about your health is a special category of personal data. Stricter rules apply to it, and rightly so. We only process that kind of data if one of these two applies:

• you give us your explicit consent, for example by completing the Gut Scan or by writing to us about your symptoms;
• the processing is necessary to deliver the guidance you agreed with us.

Everyone within our organisation who works with this data is bound by confidentiality. We do not discuss your situation with others without you knowing, and we share nothing with your GP, specialist, employer or insurer unless you ask us to.

The legal grounds we rely on

The GDPR only allows processing if there is a legal ground for it. These are the grounds we rely on.

How long we keep data

We do not keep data longer than we need it for the purpose it came to us for. If you ask us to delete it sooner, we will, except where the law requires us to keep it.

Who we share data with

We do not sell your data and we do not pass it on for other people's purposes. We do work with parties that help us deliver our service. We have agreements with them on confidentiality and security, set down in a data processing agreement. They may only use your data for the purpose we supply it for.

We may also be obliged to provide data to, for example, the Dutch tax authorities, a regulator or the police. We only do that where the law requires it.

Transfers outside the European Economic Area

Your data is stored in the Netherlands, so within the European Economic Area. A number of the services listed above are American, which means your data can also be processed outside that area. We only work with parties that have a valid basis for it: an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or the European Commission's standard contractual clauses with additional measures.

Do you live outside the European Union yourself? Then your data still travels to the Netherlands, and the same European rules keep applying to it.

Cookies and measurement on the website

Our website places cookies and similar techniques. Functional and necessary cookies are needed to make the site work, for example to keep you logged in or to remember your basket. Those are always on.

Analytical and advertising cookies are only placed after you have given permission in the cookie notice. We use them to measure how the website is used and how our advertising performs. You can change your choice at any time through the cookie settings at the bottom of the website, and you can delete cookies yourself in your browser settings.

Automatically generated profiles

The Gut Scan automatically puts together a profile from your answers. That is an informative outcome and not a diagnosis, and no decision with legal consequences for you hangs on it. We do not take decisions about people based solely on automated processing.

Children and young people

Our website and our services are aimed at adults. If you are under 16, you may only leave data with us with permission from your parent or guardian. Where parents sign up on behalf of their child, for example about a child's symptoms, we process the child's data on the basis of the parent's or guardian's consent. If you think we hold a child's data without that permission, get in touch and we will delete it.

How we protect your data

We take the protection of your data seriously and take appropriate technical and organisational measures against loss, misuse and unauthorised access. In practice that means, among other things:

• the website runs entirely over a secure connection with a valid certificate;
• everything is stored on servers in the Netherlands, within the European Economic Area;
• the answers you give in the Gut Scan are stored encrypted in our database;
• our own database holds no IP addresses in readable form, only an irreversible encrypted representation. Server logs do hold them temporarily, because those are needed to investigate faults and misuse;
• access to data is limited to the people who need it for their work, with personal accounts;
• we make regular backups and keep software and security updates up to date.

If you have the impression that your data is not properly protected, or you see any sign of misuse, tell us straight away at hello@firstaidforyourgut.com. If something does go wrong with data in a way that puts you at risk, we report it to the Dutch Data Protection Authority and we tell you.

Your rights

You have a number of rights over your own data. You can exercise all of them by emailing us.

• Access. You may ask which data we hold about you.
• Correction. If something is wrong, we will put it right.
• Deletion. You may ask us to erase your data, except where we are legally required to keep it.
• Restriction. You may ask us to pause the processing, for example while we look into a correction.
• Objection. You may object to processing based on our legitimate interest.
• Portability. You may receive the data you gave us yourself in a common file format, or have it sent on.
• Withdrawing consent. If you gave consent, you may withdraw it at any time. What we did before that remains lawful.

Send your request to hello@firstaidforyourgut.com. We respond within one month. If your request is complex we may extend that by two months, and we will let you know within the first month. To make sure we do not hand data to the wrong person, we may ask you to identify yourself.

Making a complaint

If you disagree with how we handle your data, please tell us first. If we cannot sort it out together, you have the right to lodge a complaint with the Dutch Data Protection Authority, the supervisory authority for our country, through autoriteitpersoonsgegevens.nl. If you live elsewhere in the European Union, you can also go to the supervisory authority in your own country.

Changes and version control

Our service changes, and this policy changes with it. Every version therefore carries its own number and a date it takes effect, both shown at the top of this page.

When you sign up for the newsletter, complete the Gut Scan or enter into an agreement with us, we record which version applied at that moment and when you agreed. That way we can always show exactly what you agreed to, even if the text has since been updated.

For small textual improvements we raise the number after the dot. If something material changes about what we process, why, or who we share it with, we raise the number before the dot and we let you know through the newsletter or by email. We keep all earlier versions and they are available on request.

Version history

Version 1.0, in effect from 13 September 2026