Privacy Policy
Last updated: 12 October 2026.
1. Who we are
Brooke Odun John is the trading name of Brooke Odun Ltd (company number 16437525), registered at Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom ('we', 'us', 'our'). We are the data controller for personal information collected through our website and services, except where a separate organisation acts as an independent controller.
Privacy enquiries and requests: hello@brookeodunjohn.com. Website: www.brookeodunjohn.com.
2. What information we collect
- Identity and contact: name, email, telephone number, billing and delivery address, and correspondence.
- Website forms: information you send through our contact form, coaching enquiry form, speaking enquiry form (including any files you choose to upload), partnership enquiries and media kit requests.
- Orders and transactions: items purchased, transaction references, payment status, refund information and fulfilment details. Card details are handled by our payment provider, Stripe, rather than stored by us.
- Coaching and wellbeing: goals, activity levels, dietary preferences and requirements, allergies, injuries, medication disclosures, relevant medical history, pregnancy/postnatal information, progress measurements, photographs and questionnaire responses, where requested and supplied. Much of this is collected through our onboarding questionnaire, which can include health information, injuries, medication, pregnancy or postnatal status, dietary requirements and optional progress photos.
- Testing: orders for gut health and fertility-related kits, specimen and report administration details, and test reports/results you choose to share for coaching. Genetic data and health information require additional protection.
- Events and enquiries: masterclass registrations (your name, email address and, if you tick the optional box, your marketing consent), consultation bookings, bespoke coaching enquiries, attendance records and communications.
- Website chat assistant: the messages you type into the chat assistant on our website, and the replies it generates.
- Website and marketing: device/browser data, IP address, cookies and similar technologies, your cookie choices, marketing preferences, and interactions with our emails or website where applicable.
3. How and why we use your information
We use personal data to respond to enquiries, assess service suitability, arrange consultations, deliver coaching and digital materials, process purchases, dispatch goods and testing kits, administer sessions and bookings, register you for events, provide customer support, manage accounts, maintain security, comply with legal obligations and, where permitted, send marketing.
We may use coaching information to personalise fitness and nutrition plans and track progress. We do not use health or genetic information for advertising targeting or sell it to advertisers.
We use messages typed into the website chat assistant only to generate replies during your conversation. If you choose to send your question on to Brooke from the chat, we treat it as a contact message and use it to reply to you.
We may use de-identified or aggregated information to improve our services where individuals cannot reasonably be identified.
4. Lawful bases for processing
Under UK GDPR, we rely on the lawful basis appropriate to the purpose: contract (to provide services and fulfil orders), legal obligation (for example tax records and consumer rights), legitimate interests (reasonable business administration, fraud prevention and service improvement, balanced against your rights), and consent (for optional marketing, non-essential cookies and certain other uses).
Special category data: Information concerning health, and genetic data where applicable, receives additional protection. Where we request this information to personalise coaching or discuss reports, including through our onboarding questionnaire, our UK GDPR Article 9 condition is your explicit consent, obtained separately from acceptance of general terms. You may withdraw this consent at any time; this may mean we cannot safely continue some services. We will not treat a general website checkbox as sufficient explicit consent for health or genetic data.
Where a different Article 9 condition is needed for a particular activity, it will be identified and documented before that processing begins.
5. Health screening, photos and sensitive records
Only provide health information relevant to your enquiry or service. We will seek to limit access to staff or providers who need it. Progress photographs and body measurements are used to deliver or monitor your programme, not for public promotion. Progress photos are optional.
We will request separate, specific permission before using identifiable client photos, testimonials, health stories or before-and-after images in marketing. Refusing promotional consent does not prevent you from receiving coaching.
We do not offer medical diagnosis or treatment; privacy protection applies regardless of the educational or recreational nature of a service.
6. Third-party testing and laboratory partners
When you purchase a gut health or fertility-related test, relevant information may be shared with the kit supplier, fulfilment provider and testing laboratory to arrange the kit, analyse the sample and provide a report. Our testing partner is GutMapDx, working with its partner laboratory. To order your kit, we share your name and delivery address with GutMapDx, and the kit is posted to you directly.
GutMapDx's own terms and privacy notice apply to the analysis of your sample. A laboratory may also process data as an independent controller under its own privacy notice. We do not own or control the laboratory's underlying samples, reports or retention arrangements.
7. Payment, booking, hosting and communications providers
We use the following service providers to run the website and our services. Each provider receives only the information reasonably required for its function, subject to applicable contracts and its role as processor or independent controller.
| Provider | What it does for us |
|---|---|
| Netlify | Hosts our website and runs the server functions that handle forms, orders and other website features. |
| Supabase | Stores our database and private files (such as form submissions and uploaded files), and provides the secure login for the site owner's admin page. |
| Stripe | Processes payments. Stripe is also an independent controller for payment data, under its own privacy notice. |
| Resend | Sends our emails, such as order confirmations, enquiry replies and masterclass joining details. |
| Cal.com | Lets you book discovery calls and sessions. |
| Zoom | Runs our online masterclasses and video sessions. |
| Royal Mail Click & Drop | Prepares and delivers orders of physical products. |
| GutMapDx and its partner laboratory | Supply test kits and analyse samples. Your name and delivery address are shared to order a kit. GutMapDx's own terms and privacy notice apply to sample analysis. |
| Anthropic | Processes the messages you type into our website chat assistant in order to generate replies. |
| Google Fonts | Serves the fonts used on our website. Your IP address is sent to Google when the fonts load. |
No analytics or advertising tools are active on our website. If we add them in future, they will only run after you give consent through our cookie choices.
8. Masterclass registration and marketing
For free masterclasses, we collect registration details (your name and email address) to confirm attendance and send essential event communications, including the joining link. Joining details are emailed 48 hours before the event (or straight away if you register later than that) and again 1 hour before it starts.
Registration and essential joining emails do not require agreement to promotional marketing. Marketing subscription is optional and separately indicated. If you tick the optional marketing box when you register, you may receive occasional emails about Brooke's programmes, events and offers. You may unsubscribe at any time by replying to any of those emails or by emailing hello@brookeodunjohn.com.
9. Cookies and analytics
Essential cookies and similar technologies are used for security, checkout and basic site operation. We will ask for your consent before setting non-essential analytics or advertising cookies or similar technologies where required by UK privacy rules. You can change your preferences using the Change cookie settings button on our Cookie Policy page (/cookies/). For more detail, see our Cookie Policy.
10. International transfers
Some service providers may process personal data outside the UK. Several of our providers (for example Stripe, Netlify, Anthropic, Zoom, Cal.com and Resend) may process data in the United States or elsewhere outside the UK. Where UK data protection law requires it, we rely on an appropriate transfer mechanism, such as UK adequacy regulations (including the UK–US data bridge where applicable), the UK International Data Transfer Agreement or the UK Addendum to EU standard contractual clauses, together with relevant safeguards.
11. How long we keep information
We keep personal information only as long as reasonably necessary for the purpose collected, including delivery of services, responding to complaints, recordkeeping, safeguarding and legal requirements. Different records have different periods:
| Information | How long we keep it |
|---|---|
| Enquiries and contact messages | 2 years from your last contact with us |
| Client health records, questionnaires and test-related notes | 6 years after your last session or service |
| Progress photos | 12 months after your programme ends, unless you ask us to delete them sooner |
| Masterclass registrations | 12 months after the event |
| Orders, payment and accounting records | 6 years (HMRC requirement) |
| Marketing contacts | Until you unsubscribe or ask to be removed |
| Chat assistant messages | Not stored by our website after the conversation ends, except where you choose to send your question to Brooke, in which case it is kept as a contact message |
Once no longer needed, information will be securely deleted or anonymised.
12. Security
We use reasonable organisational and technical measures intended to protect personal data against unauthorised access, loss and misuse, including access controls and appropriate supplier arrangements. No online transmission or storage method is completely secure. Please avoid sending highly sensitive information by ordinary email unless necessary and use any secure forms provided. Please do not share health details in the website chat assistant.
13. Your data protection rights
Subject to applicable UK law, you may request access to your personal data, correction of inaccurate information, erasure, restriction, portability, or object to certain processing. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing. You may also object to direct marketing at any time.
To exercise your rights, email hello@brookeodunjohn.com. We may need to verify your identity. We will respond within the applicable statutory timeframe, usually one month, subject to lawful extensions and exceptions.
14. Complaints
Please contact us first so we can try to resolve concerns. You may also complain to the UK Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. You are not required to contact us before approaching the ICO.
15. Children
Our services are intended for adults aged 18 or over, and our website is not aimed at children. We do not knowingly seek children's personal information, including sensitive health or genetic information, through our website forms.
16. External websites and updates
Our website may link to third-party websites and services, which have their own privacy practices. We are not responsible for those third-party notices. We may update this policy when services, suppliers or legal requirements change; the current version will be posted on our website with an updated date.
17. Contact
Brooke Odun Ltd, trading as Brooke Odun John
Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom
Email: hello@brookeodunjohn.com