Privacy Policy
​Last updated: 1 September 2025
​
This Privacy Policy explains how I collect, use, and protect your personal information when you use this website. I am committed to safeguarding your privacy and ensuring that your personal data is handled responsibly in compliance with the laws of England and Wales, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
​
1. Who I Am
​
This website is operated by Dr Rukia Baruti (“I”, “me”, or “my”), who is the data controller of the personal information collected through this website.
​
If you have any questions about this policy or how your data is handled, please get in touch using the contact form available on this website.
​
2. Information I Collect
​
When you fill in the contact form on this website, I may collect the following personal data:
​
-
Name
-
Email address
-
Any other information you choose to provide in the message field​
3. How I Use Your Information
I will only use your personal data for the following purposes:
​
-
To respond to your enquiries submitted through the contact form
-
To provide information you have requested
-
To maintain records of correspondence
I will not use your personal information for marketing purposes without your explicit consent.
​
4. Legal Basis for Processing
Under the UK GDPR, I rely on the following lawful basis for processing your personal data:
​
-
Legitimate Interests: To respond to your enquiry and manage my communications with you.
5. Data Sharing
​
I do not sell, rent, or trade your personal data. I may share your information only where necessary with:
​
-
Service providers who help operate this website (under strict data protection obligations)
-
Regulators or authorities where required by law
6. Data Retention
​
I will keep your personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations. Typically, I retain enquiry information for no longer than 12 months unless further correspondence requires otherwise.
​
7. Your Data Protection Rights
​
You have the following rights under the UK GDPR:
​
-
The right to access your personal data
-
The right to rectification of inaccurate data
-
The right to erasure of your data (“the right to be forgotten”)
-
The right to restrict processing
-
The right to object to processing
-
The right to data portability
To exercise these rights, please contact me using the website contact form.
​
If you are dissatisfied with how your data has been handled, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.
​
8. Security of Your Information
​
I take appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.
​
9. Changes to This Privacy Policy
​
I may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “last updated” date.