Privacy policy

Last updated: 15 July 2026

1. Who we are

Summ is provided by CONSULTBLUE LIMITED, a company registered in England and Wales, based in Manchester, United Kingdom. Company number 08528647.

We are the data controller for personal data collected through this platform. We are registered with the Information Commissioner's Office (ICO). Registration number: C1910715.

Contact: hello@summnutrition.co.uk. Our registered postal address is available on request.

2. What Summ is and is not

Summ is an educational and research tool for women in perimenopause. Summ Pattern is a rules-based symptom classifier. It groups your self-reported symptoms into a pattern using published clinical frameworks. It does not diagnose any medical condition.

Summ is not a substitute for a GP or other qualified healthcare professional. Nothing on this platform constitutes medical advice, diagnosis, or treatment. Always speak to a GP or qualified clinician about how you are feeling.

Because the information you give us relates to your physical and mental health, we treat it as health data, a special category of personal data under UK GDPR, and apply the additional protections described in this policy.

3. The data we collect

Account and contact data

• Email address, used to sign you in and to send you your results and account communications.
• First name (optional), used to personalise the platform.
• Sign-in method: we use passwordless magic-link sign-in. We do not store a password.

Symptom and health data (special category data)

• Summ Pattern checker answers, your responses to the symptom questions, including any free text or voice description you choose to give.
• Daily tracking entries, sleep, energy, mood, and other symptoms you log over time.
• Pattern results, the pattern classification, staging, and scores generated from your answers.

Communications

Records of correspondence if you contact us, and your marketing preferences if you opt in to receive emails from us.

Technical and usage data

General analytics about how the platform is used, for example pages visited and session duration. Analytics is excluded from the daily symptom tracker and admin areas, so it never receives your symptom answers or tracking entries. See section 11.

4. Our lawful basis for processing your data

Health data is special category data under Article 9 of UK GDPR, so we rely on your explicit consent to process it. Before any symptom or tracking data is saved against your account, you are asked to give explicit consent by ticking a clear checkbox at account creation. Anonymous checker use before that point is described in section 6.

We rely on your consent under Article 6(1)(a) to send you emails and, where you opt in, to use optional analytics.

Where we ask to use your data for research, for example to help validate or improve Summ Pattern, we ask for a separate, optional research consent. This is distinct from the consent needed to use the platform itself, and declining it does not affect your access to Summ.

We rely on our legitimate interests under Article 6(1)(f) to keep the platform secure and to make general improvements that do not depend on your individual health data.

Where you have given research consent, we use aggregated and de-identified answers to improve and validate the accuracy of the pattern classifier.

5. How we use your data

• To create and sign you into your account
• To generate your Summ Pattern result from your answers
• To power daily tracking and generate your GP report
• To send you emails you have opted in to receive
• To improve, validate, and maintain the platform and the classifier, in line with any research consent you have given
• To meet our legal and regulatory obligations

6. Using the checker without an account

You can answer the Summ Pattern questions and see your result before creating an account. While you do this, your answers are processed in your browser to show you a pattern and are not saved to our servers.

Your answers are only saved once you enter your email and create an account, at which point you are asked for the explicit consent described in section 4 before anything is stored.

7. Who we share your data with

We share data with the following processors only, each acting under our instructions:

We do not sell your personal data. We do not share your health data with any advertiser or advertising network.

8. Where your data is processed

Your account, symptom, and tracking data, including your health data, is stored and processed in the United Kingdom via Cloudflare.

Your email data is processed by Klaviyo, a United States provider, and may therefore be transferred to and processed in the United States. Where this happens, it is protected by appropriate safeguards, including the UK Addendum to the EU Standard Contractual Clauses.

9. How long we keep your data

We keep your account and health data for as long as your account remains active. If your account has been inactive for 24 months, we delete or anonymise this data.

Where you have given research consent, de-identified data is retained for the duration of the relevant research programme, after which it is anonymised.

Where you have opted in to emails, we keep your email data until you unsubscribe.

If you delete your account, we remove your symptom answers, tracking entries, and pattern results from our systems.

10. Your rights under UK GDPR

You have the right to:

• Be informed about how your data is used, as set out in this policy
• Access the personal data we hold about you
• Rectification of inaccurate data
• Erasure of your data, including deleting your account directly from your account settings at any time
• Withdraw consent for processing your health data at any time. Withdrawing consent is as easy as giving it, is available from your account settings, and does not affect the lawfulness of processing carried out before you withdrew it
• Restrict or object to certain processing
• Data portability, a copy of your data in a machine-readable format

To exercise any of these rights, email hello@summnutrition.co.uk. We will respond within one month.

11. Analytics and cookies

We use Google Analytics 4 and Microsoft Clarity, and no other analytics tools. Both are excluded from the daily symptom tracker and admin areas, so neither ever receives your symptom answers, tracking entries, or pattern results.

We use essential storage to run the platform, plus consented analytics storage where you have agreed to it. See our Cookie policy for the full list of what we store and why.

12. Security

We use passwordless magic-link sign-in, so no password is stored that could be leaked or guessed.

We apply access controls to limit who can reach your data, and we enforce your consent at the point any health data is saved, not only at sign-up.

No system can be guaranteed fully secure. If we become aware of a data breach affecting your data, we will notify you and the ICO as required by law.

13. Children

Summ is built for adults and is not directed at anyone under 18. We do not knowingly collect data from anyone under 18.

14. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

15. Complaints

If you have concerns about how we handle your data, please contact us first at hello@summnutrition.co.uk so we can try to resolve it.

You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or by phone on 0303 123 1113.