Privacy policy
How Shoreline Nutrition collects, uses and protects your information. Last updated 30 August 2026.
Shoreline Nutrition is a sole practitioner business operated by Mellissa Wallace, RHN, in Kelowna, British Columbia. This policy explains what information is collected, why, where it goes, and what you can do about it. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
Who is responsible
Mellissa Wallace is the person accountable for personal information at Shoreline Nutrition. Any question, request or complaint about privacy goes to her directly:
melliswallace@gmail.com
Shoreline Nutrition, Kelowna, British Columbia, Canada
What is collected
When you contact me
Your name, email address, phone number if you give it, and whatever you write in the message.
When you complete the assessment intake
Sensitive personal health information, including your eating patterns, digestion, sleep, energy, stress, movement, medications, supplements, pregnancy or breastfeeding status, and anything you choose to tell me about care you are receiving. This is treated as sensitive information and handled accordingly.
When you become a client
Your account email address and name, session notes, any plan prepared for you, and a record of any products you request through the client dispensary.
Automatically
This site does not use advertising trackers, analytics cookies, social media pixels or third-party marketing tools. The web host records standard server logs, including IP addresses, for security and reliability. The client area sets a login session in your browser so that you stay signed in; that is required for the client area to work at all.
Why it is collected
- To reply to your enquiry
- To prepare and deliver the nutrition service you have asked for
- To keep an accurate professional record of our work together
- To process product requests you choose to make through the client area
- To meet legal, tax and professional record-keeping obligations
Your information is never sold, rented, or shared for anyone else's marketing. You will not be added to a mailing list because you filled in a form.
Consent
You give consent by choosing to send a form, book a session, or use the client area. For the assessment intake, which collects health information, consent is expressly confirmed by tick box before submission and that confirmation is recorded with your submission.
You may withdraw consent at any time by emailing melliswallace@gmail.com. Withdrawing consent may mean I can no longer provide the service, and some records must be retained for the periods described below regardless.
Who else can see it — and where
I use a small number of service providers to run this business. Each one only receives what it needs to do its job.
| Provider | What it handles | Where data is processed |
|---|---|---|
| Netlify | Website hosting, form submissions, client login accounts | United States |
| Email provider | Correspondence with you | United States |
| Payment processor | Invoices and payments. Card details go directly to the processor and are never seen or stored by Shoreline Nutrition. | Canada / United States |
| Scheduling provider | Appointment booking | United States |
Beyond those providers, your information is disclosed to a third party only with your written permission — for example if you ask me to share notes with your physician — or where I am legally required to disclose it.
Artificial intelligence
This website does not use an AI chatbot and does not send anything you type into it to any AI service. If that ever changes, this policy will be updated first and it will be clearly disclosed on the page where it happens.
How it is protected
The site is served over HTTPS. Client accounts are password protected and the client area is enforced on the server, not just hidden in the browser. Health information is stored in access-controlled systems and is only accessible to Mellissa. The assessment form does not save your answers into your browser as you type, so an unfinished form does not leave your health information sitting on a shared computer.
No system is perfectly secure. If a breach occurs that creates a real risk of significant harm to you, you will be notified and the Office of the Privacy Commissioner of Canada will be notified, as the law requires.
How long it is kept
- General enquiries that don't become client relationships: up to 12 months, then deleted.
- Client records, including intake forms and session notes: seven years from your last appointment, which is the standard professional record-keeping period. Records for clients who were minors are kept for seven years past the age of majority.
- Financial records: as required by the Canada Revenue Agency, currently six years.
- Client area accounts: for as long as you remain a client. Closed on request.
Your rights
You may, at any time:
- Ask what personal information is held about you and receive a copy
- Ask for anything inaccurate to be corrected
- Ask for your information to be deleted, subject to the retention periods above
- Withdraw consent to future use
- Ask a question or make a complaint about how your information has been handled
Email melliswallace@gmail.com. I will respond within 30 days. If you are not satisfied with my response, you may contact the Office of the Information and Privacy Commissioner for British Columbia, or the Office of the Privacy Commissioner of Canada.
Cookies
This site sets no advertising or analytics cookies. The only browser storage used is the login session in the client area, which is strictly necessary for that area to function and is cleared when you sign out.
Children
Services are not offered directly to anyone under 16 without a parent or guardian involved, and this website is not directed at children.
Changes
If this policy changes, the date at the top will change with it. Material changes affecting existing clients will be communicated by email.