Privacy Policy

Last updated: October 13, 2026

The short version

This website tells you about my nutrition and lifestyle coaching and lets you book a consultation. When you book, I collect your first name, surname, email address and phone number. I then contact you to arrange the $50 consultation deposit, which you pay directly to me by Zelle. This website does not take payments.

If you go on to become a client, you will share health information with me, such as bloodwork results, so that I can build your plan. That information is never shared with anyone else unless you ask me to share it.

Google Analytics tells me how many people visit and which pages they read, and it only runs if you accept analytics cookies. I do not sell information about you, and I do not share it for advertising.

Who is responsible for this website

This website and the coaching it describes are run by Alpa Mistry, an independent nutrition and lifestyle coach based in New Jersey, United States. The website was designed and built by Wikid, an independent web development studio, which also provides ongoing technical support.

If you have any question about this policy, or about information I hold about you, email me at alpanij@gmail.com.

What I collect, and why

Booking a consultation

The booking form asks for your first name, surname, email address and phone number. I use these to confirm your appointment, send you the video call link, remind you before the call, reach you if a time needs to move, and arrange your deposit. Bookings are handled by Google Calendar appointment scheduling, and online consultations run on Google Meet.

Paying the deposit and the programme fee

After you book, I contact you by WhatsApp or email to arrange the $50 consultation deposit. If you join the Comprehensive Plan, the $299 fee is arranged the same way. Payments are made by Zelle, directly from your bank to mine, and are never taken through this website. I see your name, the contact details linked to your Zelle account, the amount and whether the payment went through. I never see your bank account or card details.

I keep a record of payments because tax and accounting rules require it.

If you become a client

Coaching only works if I understand your health and your routine. As a client, you may share with me:

  • your health history and any conditions you are managing
  • medications and supplements you take
  • bloodwork or other lab results
  • weight, measurements and progress photos
  • what you eat, how you sleep, how active you are, and what you want to change

You decide what to share, and I ask for your agreement before you share any of it. I use it only to build and adjust your plan and to support you during the programme. I do not use it for marketing, and I do not share it with anyone unless you ask me to, for example with your doctor, or unless the law requires it.

I am a coach, not a medical provider. I do not diagnose or treat conditions, and my coaching does not replace care from your doctor.

This information is not collected through this website. It is shared with me directly during the programme, usually by WhatsApp and email.

Testimonials and transformation photos

Testimonials on this site are published with each client's permission, using first names only. I never publish a client's photo or any detail of their health without their written permission. If you gave a testimonial and would like it changed or removed, email me and I will take it down.

Contacting me

If you email, call or message me, I will have your contact details and whatever you choose to send. I use it to reply to you and for nothing else.

Analytics

If you accept analytics cookies, I use Google Analytics 4 to understand how the site is used. This tells me things like how many people visited, which sections they read, whether they arrived from a search engine, Instagram or a link, the general region their internet connection is associated with, and whether they were on a phone or a computer.

Google Analytics collects this using cookies and similar technologies, and it processes a shortened version of your IP address. I use it to see which parts of the site help people decide whether coaching is right for them. I do not use it for advertising. Google Signals, ads personalisation and advertising data sharing are all switched off.

If you decline analytics cookies in the banner, Google Analytics does not run and none of this is collected.

Server logs

Like almost every website, the server that hosts this site keeps automatic technical logs. These record things like the IP address a request came from, the date and time, the page requested and the browser used. They exist so that the site can be kept running and secure. They are generated by the hosting provider, are not linked to anything else on this site, and are not used to identify individual visitors.

Young clients

I coach clients from age 12. Anyone under 18 must be booked by a parent or guardian, who joins the consultation and agrees to the programme on their behalf.

This website is written for adults. I do not knowingly collect personal information directly from anyone under 13. If you are a parent or guardian and believe your child has sent me information through this site, email me and I will delete it.

Things this website does not do

  • It does not have user accounts, logins or passwords for visitors.
  • It does not take payments or handle any payment information. Payments are made directly to me by Zelle.
  • It does not ask for health information. That is only shared once you are a client, directly with me.
  • It does not run advertising, and no advertising network is present on the site.
  • It does not sell, rent or trade information about visitors or clients.
  • It does not send marketing emails and has no mailing list.
  • It does not use tracking pixels from social media platforms.

Other companies involved

A small number of third parties help run this site and my bookings. Each has its own privacy policy.

  • Google Calendar and Google Meet, provided by Google, handle bookings and online consultations. Google's privacy policy is at policies.google.com/privacy.
  • Gmail, also provided by Google, handles my email.
  • WhatsApp, provided by Meta, is how I usually message clients. Messages are end-to-end encrypted. WhatsApp's privacy policy is at whatsapp.com/legal/privacy-policy.
  • Zelle is used for deposit and programme payments. Payments pass between your bank and mine through the Zelle network and are covered by your bank's privacy policy and Zelle's own.
  • Google Analytics, provided by Google, gives me the visitor statistics described above. It runs only with your consent.
  • CookieYes provides the cookie banner and stores a record of your choice.
  • Google Fonts supplies some of the typefaces on the site. When a page loads, your browser requests those font files from Google, so Google receives your IP address as part of that request. No cookies are set by this.
  • Network Solutions, my hosting provider in the United States, stores the website files and generates the server logs described above.

If you are outside the United States

I am based in the United States, this website is hosted there, and most of the companies above are based there. If you are in India, the UK, the European Economic Area or anywhere else, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live. I only use well-established providers, and I only transfer what is needed for your booking and coaching.

How long information is kept

  • Booking details are kept for as long as the appointment and any follow-up need them, and are then deleted.
  • Payment records are kept for as long as tax and accounting rules require.
  • Testimonials stay on the site until you ask me to remove them.
  • Emails and messages are kept for as long as I need them to deal with your query.
  • Google Analytics data is retained for 14 months and is then deleted automatically.
  • Server logs are kept by my hosting provider according to their own schedule, typically a few weeks.

How information is protected

The site is served over an encrypted HTTPS connection, runs a security firewall, and its software is kept up to date. Access to the website's administration area is limited to me and the people who maintain the site, and is protected by strong passwords.

Client information is never stored on this website. No system is perfectly secure, but I keep only what I need and delete it when I no longer do.

Your rights

Wherever you live, you can ask me:

  • what information I hold about you, and for a copy of it
  • to correct anything that is wrong
  • to delete it
  • to stop using it for a particular purpose
  • to withdraw any consent you have given, including for analytics cookies and for holding your health information

Some laws give you these rights formally, depending on where you live. Whether or not a particular law applies to a business my size, I honour these requests from anyone.

If you are in India, the Digital Personal Data Protection Act 2023 gives you the right to access, correct and erase your personal data, to withdraw your consent, and to nominate someone to act for you if you are unable to. I collect your information with your consent, for the purposes described in this policy.

If you are in the UK or the European Economic Area, the UK GDPR and EU GDPR apply. I rely on:

  • your explicit consent for the health information you share as a client, and your consent for analytics cookies
  • what is needed to arrange and deliver the coaching you ask for, for your booking and contact details
  • legal obligations, for payment records
  • legitimate interests, for keeping the website running securely

You can withdraw consent at any time, as easily as you gave it, and you can object to uses based on legitimate interests. You also have the right to complain to your data protection regulator: the Information Commissioner's Office in the UK, or the supervisory authority in your EU country.

If you are in the United States, some states, including Washington, have specific laws on consumer health data. I only hold health information that you choose to share as a client, with your consent, and I never sell it.

To make a request, email me at alpanij@gmail.com. There is no charge, and I will respond as quickly as I can, normally within 30 days. If you withdraw consent for your health information during a programme, I may not be able to continue coaching you, and I will tell you if that is the case.

This site links to other websites, including my Instagram profile. Once you follow a link you are on someone else's website and this policy no longer applies. I would encourage you to read the privacy policy of any site you visit.

Changes to this policy

If the site or my coaching changes in a way that affects this policy, I will update it and change the date at the top. If the change is significant, I will say so on the home page, and I will tell current clients directly.

Contact

Alpa Mistry, New Jersey, United States. Email: alpanij@gmail.com