WEBSITE PRIVACY

---

Nasrawy Ltd
Effective date: July 28, 2026

This Privacy Policy explains how Nasrawy Ltd collects, uses, stores, shares, and deletes personal information.

It applies when you:

• Visit www.znasrawy.com.
• Contact us by email, social media, a website form, or another method.
• Ask about our services.
• Apply for or purchase the Weight Loss & Nutrition Intensive.
• Complete prework or questionnaires.
• Take part in coaching calls or written support.
• Receive a personalized Nutrition Blueprint.
• Request a cancellation or refund.
• Make a complaint or exercise a privacy right.

This Privacy Policy should be read together with:

• Our Website Terms and Conditions.
• The Terms and Conditions for the Weight Loss & Nutrition Intensive.
• Any separate health-information consent form we give you.
• The cookie choices shown on our Website.

If there is a difference between this Privacy Policy and a separate consent request, the separate consent request will apply to the specific information and purpose described in it.

Nasrawy Ltd is responsible for deciding why and how your personal information is used.

Our details are:

Company: Nasrawy Ltd
Company number: 13209294
Registered office: 13 Russell Place, London, NW3 2BY, United Kingdom
Email: zaina@znasrawy.com
Website: www.znasrawy.com

Nasrawy Ltd is the company providing the Weight Loss & Nutrition Intensive.

The Services are personally delivered on behalf of Nasrawy Ltd by Zainab Nasrawy, who works professionally under the name Zaina Nasrawy.

References to “we,” “us,” and “our” in this Privacy Policy mean Nasrawy Ltd.

“Personal information” means information that identifies you or could reasonably be connected with you.

Some information we collect is especially sensitive under data-protection law. This includes information about your physical or mental health.

We refer to this as “health information” in this Privacy Policy.

The information we collect depends on how you interact with us.

This may include:

• Your name.
• Email address.
• Postal address.
• Telephone number.
• Country, state, province, or general location.
• Social media name or profile.
• Age or confirmation that you are at least 18.
• Preferred name and communication details.

This may include:

• Information you provide when asking about the Program.
• Your reasons for contacting us.
• Your weight-loss or nutrition goals.
• Information about previous approaches you have tried.
• Information used to decide whether the Program may be suitable for you.
• Your questions about the Program.
• Communications exchanged before you purchase.

This may include:

• Your Order.
• The Terms you accepted.
• The date you accepted them.
• Your Order Confirmation.
• Your invoice and invoice number.
• The Program price and currency.
• Your payment status.
• Your Program Start Date.
• Call dates and scheduling information.
• Cancellation and refund information.
• Records showing which parts of the Program were provided.

Because payment is made by bank transfer, we may receive:

• The payer’s name.
• The paying bank account name.
• Limited bank account or transaction details shown on the transfer.
• The amount, currency, date, and reference of the payment.
• Information needed to confirm cleared payment.
• Information needed to return a refund to the original payer.
• Records of bank charges or exchange-rate issues you ask us to investigate.

We do not normally receive your online banking password, security codes, or full banking login information.

You should never send us your banking password or security codes.

If you purchase the Weight Loss & Nutrition Intensive, we may ask for detailed information needed to personalize the Services.

This may include information about:

• Your weight and weight history.
• Your dieting and weight-loss history.
• Your current way of eating.
• Your appetite, fullness, cravings, and eating patterns.
• Foods you eat, avoid, prefer, dislike, or fear.
• Allergies and intolerances.
• Your daily routines and meal schedule.
• Your personality, habits, and behavior patterns.
• Your home, family, work, travel, and social environment.
• Your previous experiences with tracking, fasting, portion control, or other weight-loss methods.
• Your goals, concerns, expectations, and personal circumstances.
• Other information you choose to include in your answers.

To personalize the Program safely and appropriately, we may ask for information about:

• Medical conditions.
• Symptoms.
• Physical or mental health history.
• Medications.
• Supplements.
• Allergies and food intolerances.
• Pregnancy or breastfeeding.
• Previous or current eating disorders.
• Digestive, metabolic, hormonal, or other health concerns.
• Information about advice or treatment you receive from healthcare professionals.
• Other health information you voluntarily provide.

Nasrawy Ltd is not a medical practice. We collect this information to understand your circumstances, personalize the educational coaching Services, identify when you should seek medical advice, and avoid making recommendations without relevant context.

We do not collect health information for medical diagnosis, medical treatment, or emergency care.

During the Program, we may create or receive:

• Coaching notes.
• Written questions and answers.
• Messages exchanged during the Program Period.
• Notes about your eating patterns, challenges, and progress.
• Personalized observations and analysis.
• Your Nutrition Blueprint.
• Revisions or refinements to your Blueprint.
• Records of agreed actions or recommendations.
• Information you provide during calls.
• Records showing when Services were delivered.

A video coaching call may be recorded for purposes such as:

• Keeping an accurate record.
• Reviewing what was discussed.
• Preparing or refining your Nutrition Blueprint.
• Maintaining quality and documentation.
• Resolving a question about what was discussed.

We will tell you before recording a call.

Where we rely on your consent, the call will not be recorded unless you clearly agree.

We will not publish a recording or use it in advertising, testimonials, social media, training, or marketing without separate written permission.

We may keep records of communications sent through:

• Email.
• Website forms.
• Social media.
• Video-call platforms.
• Scheduling systems.
• Written coaching platforms.
• Other communication methods agreed with you.

When you use our Website, we may automatically receive information such as:

• Your internet protocol address.
• Browser and device type.
• Operating system.
• The pages you visit.
• The date and time of your visit.
• How you arrived at the Website.
• How you move through and interact with the Website.
• General location information derived from your internet connection.
• Cookie preferences.
• Information needed to keep the Website secure and working properly.

More information about cookies appears below.

We may record:

• Whether you agreed to receive marketing.
• What type of communication you agreed to receive.
• The date and method of your agreement.
• Whether you unsubscribed or objected.
• Information needed to make sure we do not contact you after you opt out.

This may include:

• Complaints and our responses.
• Cancellation notices.
• Refund calculations.
• Evidence relating to the delivery of the Program.
• Communications concerning a dispute.
• Information needed for insurance, legal advice, fraud prevention, or court proceedings.
• Records required by a regulator or government authority.

We may collect information directly from you when you:

• Visit or use the Website.
• Complete a contact or application form.
• Contact us by email or social media.
• Ask for information about the Program.
• Place an Order.
• Accept our Terms and Conditions.
• Make a bank transfer.
• Complete prework or questionnaires.
• Join a coaching call.
• Send written questions or messages.
• Request a cancellation or refund.
• Make a complaint.
• Exercise a privacy right.

We may also receive limited information from:

• Your bank or a banking service involved in a payment or refund.
• Website, email, scheduling, form, video-call, or document-storage providers.
• A person who refers you to us, where it is reasonable and lawful for them to do so.
• Social media platforms when you contact us through those platforms.
• Professional advisers, insurers, courts, regulators, or government bodies when necessary.

If another person gives us information about you, we will use it only where we have a lawful reason to do so.

We only use personal information when we have a lawful reason.

The main reasons are explained below.

We may use your contact, inquiry, and application information to:

• Answer questions.
• Explain the Program.
• Arrange a fit-check or introductory conversation.
• Provide pricing and payment information.
• Take steps you ask us to take before entering into a Contract.
• Decide whether we are able to offer the Program.

Our legal reason is that the information is needed to take steps at your request before entering into a Contract. We may also rely on our legitimate interest in responding to genuine business inquiries and operating our business.

We use identity, contact, purchase, payment, and scheduling information to:

• Process your Order.
• Confirm payment.
• Send your Order Confirmation.
• Agree on your Program Start Date.
• Provide contractual documents.
• Schedule coaching calls.
• Deliver the Program.
• Communicate about the Services.
• Manage cancellations and refunds.

Our legal reason is that this information is needed to enter into and perform our Contract with you.

We use questionnaire answers, coaching information, lifestyle information, eating history, and related personal information to:

• Understand your circumstances.
• Review why previous approaches may not have worked for you.
• Prepare for coaching calls.
• Personalize the educational nutrition and behavior guidance.
• Prepare and refine your Nutrition Blueprint.
• Answer questions during the Program Period.
• Keep an appropriate record of the Services provided.

For ordinary personal information, our legal reason is that the use is necessary to perform our Contract with you.

Health information receives special legal protection.

We normally rely on both:

1. The need to use the information to deliver the personalized Program you purchased; and
2. Your separate, explicit consent to our collection and use of the health information you voluntarily provide.

Accepting the Program Terms and Conditions does not replace any separate health-information consent that is required.

You may withdraw your health-information consent by contacting zaina@znasrawy.com.

Withdrawing consent does not make earlier lawful use of your information unlawful.

However, because the Program is personalized, we may be unable to begin or continue providing it if we cannot lawfully use the information reasonably needed to understand your circumstances.

We may also keep and use limited health information where this is necessary to establish, exercise, or defend a legal claim, comply with the law, protect someone from a serious and immediate risk of harm, or meet an insurance or regulatory requirement.

We use payment and limited banking information to:

• Match a payment to your Order.
• Confirm cleared funds.
• Maintain financial records.
• Investigate a missing or incorrect payment.
• Return an agreed refund.
• Confirm that a refund is being returned to the original payer.
• Prevent fraud or misdirected payments.

Our legal reasons may include performing the Contract, complying with tax and accounting law, and protecting our legitimate interests in maintaining accurate financial records and preventing fraud.

We may keep and use information to:

• Maintain company and accounting records.
• Prepare tax returns.
• Respond to lawful requests.
• Meet data-protection duties.
• Respond to regulators or government authorities.
• Establish, exercise, or defend legal claims.

Our legal reason is compliance with legal duties and, where appropriate, our legitimate interest in protecting our legal position.

We use relevant information to:

• Review a complaint.
• Confirm when a cancellation notice was sent.
• Calculate a refund.
• Establish which Services were delivered.
• Respond to a bank, insurer, lawyer, regulator, court, or other authorized body.
• Resolve a disagreement fairly.

Our legal reasons may include performing the Contract, complying with the law, and protecting the legal rights of you or Nasrawy Ltd.

We may use technical and communication information to:

• Keep our Website, email, documents, and accounts secure.
• Detect suspicious activity.
• Prevent fraud, misuse, or unauthorized access.
• Investigate a security incident.
• Protect confidential information and intellectual property.
• Maintain reliable business systems.

Our legal reason is our legitimate interest in operating a safe, secure, and reliable business.

We may use limited information to:

• Understand common questions.
• Improve Website navigation and content.
• Improve forms, instructions, and Program administration.
• Review the quality of our service.
• Identify technical problems.

Where possible, we use information that has been combined or anonymized so it no longer identifies a particular person.

Our legal reason is our legitimate interest in improving our Website and services without unfairly affecting your privacy.

We may send information about our services, content, or offers only when:

• You have clearly agreed to receive it; or
• The law allows us to contact an existing customer about similar services and we gave that person a clear opportunity to opt out.

You may unsubscribe at any time by using the unsubscribe method in the communication or emailing zaina@znasrawy.com.

Service messages are not marketing. We may still send messages needed to manage an inquiry, payment, Contract, Program, cancellation, refund, complaint, or privacy request.

We will not publish your name, photograph, story, results, messages, health information, or other identifying information as a testimonial or case study without separate, clear permission.

Any permission request will explain:

• What information we want to use.
• Where it may be published.
• Whether your name or image will appear.
• Whether the material may be used in advertising.
• How you may withdraw permission for future use.

After the Contract is formed, we may give you access to educational Prework and questionnaires during your 14-day Cooling-Off Period.

You may choose to complete and submit the questionnaires during that period.

If you submit them during the Cooling-Off Period:

• We may securely receive and store them.
• We will not review or analyze your answers.
• We will not use them to give personalized advice.
• We will not begin preparing your Nutrition Blueprint.
• We will not begin personalized coaching or written support.
• We will not use them to make a personalized assessment before the Cooling-Off Period has ended.

Accessing, reading, downloading, completing, or submitting the Prework does not remove your right to cancel during the Cooling-Off Period.

If you cancel during the Cooling-Off Period:

• We will not use your questionnaire answers to provide personalized coaching or analysis.
• We will stop using the information for delivery of the Program.
• We will process the information needed to confirm the cancellation and issue your refund.
• We will delete questionnaire answers and health information that we no longer need.
• We may keep limited records where reasonably necessary for tax, accounting, fraud prevention, insurance, legal claims, data-protection compliance, or dispute resolution.

We will normally delete unreviewed questionnaire answers and health information within 30 days after the cancellation and refund process has been completed, unless there is a lawful reason to keep a limited part for longer.

Information showing that you purchased, cancelled, and received a refund may be retained as part of our legal and financial records.

You are not required to provide personal information merely to browse the Website, apart from limited technical information that may be needed for the Website to operate.

However, some information is necessary if you ask us to:

• Respond to an inquiry.
• Process an Order.
• Confirm payment.
• Deliver the Program.
• Personalize the Services.
• Return a refund.
• Respond to a complaint or privacy request.

You may choose not to provide information, but we may be unable to provide the relevant service without it.

Health information is provided voluntarily. However, if relevant information is withheld, we may be unable to personalize the Program appropriately or may need to decline, pause, or limit the Services.

We do not sell your personal information.

We may share limited information only where reasonably necessary with the following types of recipients:

Zainab Nasrawy, professionally known as Zaina Nasrawy, personally delivers the Services as the representative of Nasrawy Ltd.

She may access the information needed to:

• Communicate with you.
• Review your questionnaires after the Cooling-Off Period.
• Deliver coaching.
• Prepare your Nutrition Blueprint.
• Provide written support.
• Manage the Contract and Program.

This does not make the Program a personal contract between you and Zainab Nasrawy. The Contract remains with Nasrawy Ltd.

We may use carefully selected service providers for:

• Website hosting.
• Website forms.
• Email.
• Video calls.
• Call recording, where applicable.
• Scheduling.
• Document creation and storage.
• Secure file sharing.
• Business administration.
• Banking and bank transfers.
• Bookkeeping and accounting.
• Information technology and security.
• Data backup and recovery.

They may use your information only to provide the agreed service to us or where the law separately requires them to act.

We may share relevant information with:

• Accountants.
• Lawyers.
• Insurers.
• Tax advisers.
• Information-security advisers.
• Other professional advisers.

We will limit what we share to what is reasonably necessary.

Information may be shared with banks or banking providers to:

• Receive payment.
• Confirm a transaction.
• Return a refund.
• Investigate fraud.
• Correct a payment problem.
• Meet financial or regulatory requirements.

We may disclose information where reasonably necessary or legally required to:

• A court or tribunal.
• The Information Commissioner’s Office.
• HM Revenue & Customs.
• The police or another law-enforcement body.
• A regulator.
• A government authority.
• Another person where disclosure is necessary to establish, exercise, or defend a legal claim.

We may disclose limited information where we reasonably believe disclosure is necessary to protect you or another person from a serious and immediate risk of harm.

Nasrawy Ltd is based in the United Kingdom, but:

• You may live outside the United Kingdom.
• Some service providers may operate or store information outside the United Kingdom.
• A provider’s support team or computer systems may be located in another country.

Where personal information is transferred from the United Kingdom to another country, we will take reasonable steps to make sure the transfer is lawful.

Depending on the country and provider, this may include:

• Using a country recognized by the United Kingdom as providing adequate protection.
• Using an approved data-transfer agreement.
• Adding approved UK data-protection terms to a contract.
• Checking the provider’s security and privacy arrangements.
• Using another protection or legal exception allowed by law.

You may contact zaina@znasrawy.com for more information about the protections used for a particular transfer.

We take reasonable technical and organizational steps to protect personal information from:

• Loss.
• Unauthorized access.
• Accidental disclosure.
• Improper alteration.
• Destruction.
• Misuse.

These measures may include:

• Limiting access to people who reasonably need it.
• Password protection.
• Multi-factor authentication where available.
• Secure providers and storage systems.
• Encrypted connections where available.
• Secure backup arrangements.
• Confidentiality duties.
• Procedures for handling suspected security incidents.
• Regular review of access and stored information.

No internet, email, video-call, or storage system can be guaranteed to be completely secure.

You should use a private email account, protect your passwords, and avoid sending highly sensitive information through an insecure or shared device.

If you believe your information has been lost, misused, or accessed without permission, contact zaina@znasrawy.com as soon as possible.

We do not keep personal information for longer than reasonably necessary.

The retention periods below are our normal starting points. We may keep information for a shorter or longer period where required by law, needed for an active complaint or legal claim, requested by you, or necessary for another lawful reason.

We normally keep routine inquiry and fit-check communications for up to 24 months after the last meaningful contact.

We may delete them sooner if they are no longer needed.

We normally keep basic application and communication records for up to 24 months after the application ends.

Health information that is not needed will be deleted sooner.

We normally keep contracts, Order Confirmations, invoices, payment records, refund records, and related accounting information for at least six years after the relevant financial or contractual period, or longer where the law requires.

We normally keep the client file needed to show what information was provided, how the Program was personalized, what Services were delivered, and what guidance was given for up to six years after the Program ends.

We will not keep information merely because it may be useful someday. We may remove information sooner where it is no longer reasonably needed for service records, insurance, complaints, or legal claims.

We normally keep relevant coaching records, written communications, and copies of the Nutrition Blueprint for up to six years after the Program ends.

Unless a longer period is reasonably necessary, we normally delete call recordings within 90 days after the Program ends.

A recording may be kept for longer where:

• You ask us to keep it.
• It is needed to complete or correct the Blueprint.
• There is an active complaint or dispute.
• It is reasonably needed for insurance or a legal claim.
• The law requires it.

A recording kept for one of these reasons will be deleted when that reason no longer applies, subject to any required legal retention period.

We keep marketing contact information until you unsubscribe, withdraw consent, or object.

We may keep a minimal suppression record after you opt out so that we remember not to send further marketing.

We may keep relevant information until the complaint or claim has been resolved and any applicable legal period for bringing or defending a claim has ended.

Retention depends on the type of cookie or technical record. The Website’s cookie settings or cookie notice should state the duration of each non-essential cookie.

Deleted information may remain temporarily in secure backup systems until the relevant backup is safely overwritten or deleted.

We will not restore deleted information from a backup for ordinary business use unless it is necessary for security, disaster recovery, or a legal requirement.

Cookies are small files or pieces of information placed on your device when you use a website.

We may use:

These are needed for the Website to work, remain secure, remember essential choices, or provide a feature you requested.

These cookies may be used without consent where the law allows.

These remember choices such as language, region, or display preferences.

These help us understand how visitors use the Website so we can improve its content and operation.

These may be used to measure advertising or show content based on browsing activity.

We will not place non-essential cookies unless you have made the required choice through the Website’s cookie banner or settings tool.

You can change your cookie choices through the Website’s cookie settings and may also control cookies through your browser.

Blocking some cookies may affect how parts of the Website work.

The exact cookies in use, their providers, purposes, and durations should be listed in the Website’s cookie settings or separate Cookie Notice.

You can ask us to stop sending marketing at any time.

You may:

• Use the unsubscribe option in the message.
• Reply asking us to stop.
• Email zaina@znasrawy.com.

Stopping marketing will not prevent us from sending necessary service messages about:

• An inquiry you made.
• Your Order.
• Payment.
• The Cooling-Off Period.
• Program delivery.
• Calls or scheduling.
• A cancellation.
• A refund.
• A complaint.
• A privacy request.

Depending on the circumstances, you may have the right to:

You may ask whether we hold personal information about you and request a copy.

You may ask us to correct information that is inaccurate or complete information that is incomplete.

You may ask us to delete personal information in certain circumstances.

This right is not absolute. We may need to keep some information for legal, tax, accounting, fraud-prevention, insurance, complaint, or legal-claim purposes.

You may ask us to temporarily restrict the use of information in certain circumstances.

Where the right applies, you may ask to receive certain information you gave us in a commonly used electronic format or ask us to send it to another organization.

You may object when we rely on legitimate interests.

We will consider your objection and stop using the information unless we have a lawful reason to continue.

You have an absolute right to object to direct marketing.

Where we rely on consent, you may withdraw it at any time.

Withdrawal does not affect lawful use that took place before withdrawal.

You may complain directly to us about how your information has been handled.

You may also complain to the Information Commissioner’s Office, which is the United Kingdom’s data-protection regulator.

If you live outside the United Kingdom, you may also have the right to contact a regulator where you live.

You may have rights where an important decision is made about you solely by an automated system.

Nasrawy Ltd does not currently use solely automated decision-making to decide:

• Whether to accept you into the Program.
• What personalized guidance you receive.
• Whether you receive a refund.
• How a complaint is resolved.

These decisions involve human judgment.

To make a privacy request, email:

zaina@znasrawy.com

Please explain:

• Your name.
• The right you want to exercise.
• The information or issue concerned.
• Any details that will help us locate the relevant records.

We may ask for reasonable proof of identity before releasing or changing personal information.

We will respond within the period required by law.

We do not normally charge for a privacy request. The law may allow a reasonable fee or refusal where a request is clearly unfounded, excessive, or repeatedly made without a reasonable basis.

You may send a privacy complaint to zaina@znasrawy.com.

Please explain:

• What happened.
• Which information is affected.
• When it happened.
• What outcome you are seeking.
• Any relevant documents or communications.

We will:

• Acknowledge the complaint within a reasonable time.
• Investigate it fairly.
• Consider the information available.
• Explain our response in writing.
• Tell you about further complaint rights where required.

Making a complaint to us does not remove your right to contact the Information Commissioner’s Office or another regulator with authority over the matter.

Please do not provide personal or health information about another person unless:

• It is genuinely relevant.
• You are legally allowed to provide it.
• You have told the person where appropriate.
• You have their permission where permission is required.

If you provide information about a family member, partner, healthcare professional, or another person, we will use it only where reasonably necessary for the purpose for which it was provided.

The Weight Loss & Nutrition Intensive is available only to people aged 18 or over.

The Website and Program are not directed toward children, and we do not knowingly collect Program information from a person under 18.

If you believe a child has provided personal information to us, contact zaina@znasrawy.com.

Our Website or communications may contain links to third-party websites, social media platforms, books, studies, services, or other resources.

Those third parties control their own privacy practices.

This Privacy Policy does not control how another website, social media platform, bank, video-call provider, or service uses information you give directly to it.

You should review the privacy information provided by the relevant third party.

If Nasrawy Ltd is sold, reorganized, merged, or transferred, relevant personal information may be shared with professional advisers and a genuine prospective buyer.

We will take reasonable steps to protect the information during the process.

A new owner may use the information only for the purposes described in this Privacy Policy, unless another lawful basis applies and the people affected are properly informed.

We may update this Privacy Policy when:

• Our services or systems change.
• We use a new provider.
• Our information practices change.
• The law or official guidance changes.
• A change is needed to make the policy clearer.

The latest version will be posted on the Website with a new effective date.

If a change significantly affects how we use existing client information, we will take reasonable steps to bring it to the attention of the people affected before the new use begins.

We will not treat silence or continued Website use as health-information consent or as consent to a new use where the law requires a clear choice.

Questions, privacy requests, consent withdrawals, and complaints may be sent to:

Nasrawy Ltd
13 Russell Place
London
NW3 2BY
United Kingdom

Email: zaina@znasrawy.com
Website: www.znasrawy.com
Company number: 13209294

The Services are personally delivered on behalf of Nasrawy Ltd by Zainab Nasrawy, professionally known as Zaina Nasrawy.