Last updated: 12/10/23
1. Purpose of This Notice
2. Who We Are
This website is owned by Dietary Assessment Ltd and our registered office is at Nexus, Discovery Way, University of Leeds, Leeds, LS2 3AA (“We” or “Us”).
3. The myfood24 Tool
We are primarily a data processor for the purposes of the General Data Protection Regulation ‘GDPR’ (the “Legislation”).
We will only be a data controller in respect of your personal information if you:
– are a researcher, teacher, dietitian / clinician, general practitioner (GP) or other healthcare professional (i.e. a customer of Dietary Assessment Ltd and the registered “Administrator” for your organisation’s use of myfood24) and are accessing this website or our app, in which case you / your organisation will have a contract in place with Dietary Assessment Ltd.
– contact us via this website or our app through the ‘Contact Us’ form or via registering to use the ‘Demo’ facility.
For customers contracted to use myfood24, we are the data processor where you, acting in your capacity as an Administrator, are using myfood24 to collect dietary information from participants and patients (“End Users”).
Each End User has a designated Administrator who will be managing a research, health or teaching project/study for such purposes as set out in the agreement between the customer and us. The Administrator will have obtained consent (the legal basis of our processing) from the individual End User to collect their dietary information. Where required, the Administrator will also have received approval for their study from the relevant ethics committee of their respective institution or similar.
Whether acting as a data processor or a data controller, we will take all reasonable steps to ensure we comply with the Legislation.
4. Personal Information is Collected
In order to create a project/study in myfood24 you will have provided us with your name and email address and consented to us holding your personal information.
Please note: An End User is not under a statutory or contractual obligation to provide personal data to us although you may have signed an end user licence agreement (“EULA”) in respect of personal data that you choose to provide.
In order to have received a myfood24 invitation communication and gained access to the myfood24 tool you will have already provided your Administrator with some of your personal information (including but not limited to your name, email address and date of birth) and consented to them and to us holding and processing this personal information. Any further personal information that you are prompted to provide when using our website or our app (e.g. sex, dietary information) is optional.
If you received an invitation but you had not consented to this please contact the Administrator who originally contacted you, or if you are unable to contact them please use the contact information at the end of this privacy notice.
We may use your personal information to contact you whilst you are an End User in order to: communicate with you in relation to supporting your use of the myfood24 tool; inform you of any changes to the myfood24 tool; or to ask you to provide feedback on certain elements of the myfood24 tool.
We may use your personal information to produce aggregated and anonymised results for our administrative purposes; our other services; and for the purpose of ongoing development and improvement of myfood24. No personal data identifying you shall be retained within these results.
In some circumstance children under the age of 18 are given access to the myfood24 tool and therefore in some circumstance we process their data. Please note that we have assessed our data processing activities further to the operation of the myfood24 tool and deem that such processing is compliant with the Children’s Code (Age appropriate design code).
5. Third-Party Access and Transfer
Your personal information that you have provided will not be sent to other third-parties unless you are first notified and give your further consent and we do not transfer it outside the EEA without your prior written consent.
Cookies are small text files that are placed on your device by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
7. Automated Collection of Personal Information
As with most other web servers, when you access these web pages certain information you provide will automatically be recorded. This will include your IP address, browser type, and information relating to the page you last visited. This information is processed to estimate how much usage of the server is made by different categories of users and in the event of a breach of security may be used to aid detection.
8. Opting Out (Withdrawing Consent)
If you no longer wish to participate in the research, health or teaching project/study you may opt out by contacting the Administrator in charge of the project/study or by choosing the relevant option in this website (located at the bottom of the help section). If you are part of a research study, you may opt out but allow your personal information provided to date to remain in the system and still be used in the study/project or you may opt out and request that your information is not used in the study/project.
9. Changes to This Notice
This notice and therefore the ways in which your personal information may be processed can be changed from time to time. Any changes will only be notified via this web page.
10. Your Rights as a Data Subject
Under the Legislation you have the right to:
- withdraw consent;
- access your personal data that we process;
- rectify inaccuracies in personal data that we hold about you;
- be forgotten, that is your details to be removed from systems that we use to process your personal data;
- restrict the processing in certain ways (we are permitted to store the personal data, but not use it);
- obtain a copy of your data in a commonly used electronic form; and
- object to certain processing of your personal data by us:
- processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority
- direct marketing
- processing for purposes of scientific/historical research and statistics
Please see https://ico.org.uk/ for further information on the above rights. You may also contact the Data Protection contact below for further information.
You have a right to complain to the following supervisory authorities about the way in which we process your personal data:
11. Retention Periods
On expiry of your licence to use myfood24, your account will be made inactive, but your name, email address and work organisation will be kept for a period of 6 years from the expiry of your licence for HMRC purposes.
Administrators are responsible for the deletion of End User name and email addresses on completion of the project/study and before the expiry of your licence (when access to the myfood24 tool will cease). In any event, even if the Administrator fails to delete the End User personally identifiable data, it will be deleted by the myfood24 system after a maximum of six years from the expiry of your licence.
12. Further Information and Contact
As part of our UKAS certified ISO 27001 programme we have completed a data classification exercise. As we do not process any special categories of data (as defined by the General Data Protection Regulation (EU) 2016/679 (GDPR)) we are not required to have a Data Protection Officer. However, in order to provide support and oversight of personally identifiable information (PII) held on our systems, we have a Data Protection Office, which consists of stakeholders from across the business and external information security and privacy experts.
If you have any queries relating to this privacy notice or the way your personal information is being processed through this website or our app then please contact the Administrator who originally granted you access to this website or our app, or if you are unable to contact them please contact our data protection contact: firstname.lastname@example.org
To make a general enquiry click here.
Our postal address is:
Dietary Assessment Ltd
University of Leeds
Why Not Get In Touch or Try Our Free Demo