Cookie Policy
Effective: 27 July 2026
Last updated: 27 July 2026 · Version 2.0
1. About this Cookie Policy
1.1. This website is operated by Klara Kisznyer, sole trader, trading as “Nutrition by Klara” (“we”, “us” or “our”). We are the data controller responsible for the personal data collected through cookies and similar technologies on this website.
1.2. Our details are:
- Trading address: 1 Milford Park, Ballinabrannagh, Co. Carlow, R93 K263, Ireland
- Email: info@nutritionbyklara.com
- Telephone: 085 203 4929 (or +353 85 203 4929 from outside Ireland)
1.3. This Cookie Policy explains what cookies and similar technologies are, which ones we use on www.nutritionbyklara.com (the “Website”), why we use them, the lawful basis on which we do so, and how you can control them.
1.4. This Cookie Policy should be read together with our Privacy Policy, which explains in more detail how we collect, use, store and protect your personal data and sets out your rights under data protection law. Where there is any overlap, the Privacy Policy governs our general handling of personal data and this Cookie Policy governs our use of cookies and similar technologies specifically.
1.5. Your choices. When you first visit our Website, you will be shown a cookie banner. We do not set any non-essential cookies (such as analytics cookies) until you have given your consent through that banner. Simply browsing the Website does not amount to consent. You can change or withdraw your consent at any time as described in section 8.
2. What are cookies and similar technologies?
2.1. Cookies are small text files that are placed on your computer, tablet, phone or other device when you visit a website. They are widely used to make websites work, to make them work more efficiently, and to provide information to the website operator.
2.2. We also use, or may use, other technologies that work in a similar way to cookies, including:
- Pixels and web beacons – small pieces of code that record certain activity, such as whether a page or email has been viewed;
- Local storage and session storage – mechanisms that allow information to be stored in your browser; and
In this Cookie Policy, references to “cookies” include these similar technologies unless we say otherwise.
2.3. Cookies can be categorised in the following ways:
- First-party cookies are set by us (the operator of the Website you are visiting).
- Third-party cookies are set by another organisation whose services we use, such as an analytics provider (see section 5).
- Session cookies are temporary and are deleted when you close your browser.
- Persistent cookies remain on your device for a set period of time, or until you delete them.
2.4. Technologies we do not use. For transparency, we do not use device fingerprinting, session-replay or screen-recording tools, Flash cookies (Local Shared Objects), or advertising, retargeting or cross-site tracking cookies. If we introduce any such technology in the future, we will update this Cookie Policy and, where the technology is non-essential, obtain your consent before it is used.
3. The law on cookies and our lawful basis
3.1. Our use of cookies is governed by two sets of rules that operate together:
- the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (S.I. No. 336 of 2011) (the “ePrivacy Regulations”); and
- the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Data Protection Act 2018, where cookies involve the processing of your personal data.
3.2. Under Regulation 5(3) of the ePrivacy Regulations, we may only store information on, or gain access to information stored on, your device with your consent, after providing you with clear and comprehensive information. This means we must obtain your consent before setting non-essential cookies.
3.3. Under Regulation 5(5) of the ePrivacy Regulations, consent is not required for cookies that are strictly necessary to provide a service that you have specifically requested (for example, a cookie needed to keep your session secure or to enable a payment). These are described in section 4 as “strictly necessary cookies”.
3.4. Standard of consent. Where consent is required, it meets the GDPR standard set out in Article 4(11). It is:
- freely given – you can use the core content of the Website whether or not you accept non-essential cookies;
- specific – you can choose analytics cookies separately from any other category;
- informed – this Cookie Policy and the cookie banner tell you what each category does; and
- unambiguous – given by a clear affirmative action, such as clicking “Accept” or actively selecting categories.
We do not use pre-ticked boxes, and we do not treat scrolling or continued browsing as consent.
3.5. Lawful basis under the GDPR. Where a cookie also involves the processing of your personal data:
- for strictly necessary cookies, our lawful basis is our legitimate interests (Article 6(1)(f)) in operating a secure and functioning website and in processing payments securely; and
- for functional and analytics cookies, our lawful basis is your consent (Article 6(1)(a)), which you may withdraw at any time.
3.6. Special category data. We do not use cookies to collect information about your health, diet, or any other special category data within the meaning of Article 9 of the GDPR. Any health-related information you choose to share with us is collected through our consultation and intake process, not through cookies, and is dealt with in our Privacy Policy.
4. The cookies we use
4.1. We use the following categories of cookies. The precise cookies that are set will depend on the pages you visit and the features you use. Our cookie banner always reflects the cookies actually in use and lets you accept or reject each non-essential category.
4.2. Strictly necessary cookies (no consent required)
These cookies are essential for the Website to function and to keep it secure, and they cannot be switched off in our systems. They include cookies that maintain your session, protect the Website and its forms against misuse and fraud, and remember your cookie preferences. The Website cannot function properly without them. They are not used to track you for marketing purposes.
4.3. Functional cookies (consent required)
These cookies allow the Website to remember choices you make (such as your language or region) and to provide enhanced features. Depending on the platform our Website runs on, some preference cookies may fall into this category. If you do not allow these cookies, some features may not work as smoothly.
4.4. Analytics cookies (consent required)
We use Google Analytics (GA4) to understand how visitors use our Website – for example, which pages are most popular and how visitors move around the site – so that we can improve it. The information collected is aggregated and is only used for statistical purposes. These cookies are only set after you have given your consent.
4.5. Marketing and advertising cookies
We do not currently use marketing, advertising, retargeting or cross-site tracking cookies. If this changes, we will update this Cookie Policy and ask for your consent before any such cookies are set.
4.6. Cookie table
The table below lists the cookies most commonly set on our Website, grouped by purpose.
| Cookie | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
nbk_cookie_consent | Nutrition by Klara | Strictly necessary | Stores your cookie choices, and the version you were given them against, so we do not ask you on every visit. Held in your browser’s local storage rather than as a cookie; it never leaves your device except as the pseudonymous record described in the Privacy Policy. | 180 days, then we ask again |
nbk_leadmagnet_popup_dismissed_v1 | Nutrition by Klara | Strictly necessary | Remembers that you closed the free-guide popup so it is not shown to you again. It holds no identifier and is never read for any other purpose. | 14 days after a dismissal; 180 days after a sign-up |
nbk_funnel_sid | Nutrition by Klara | Analytics (consent) | A randomly generated identifier that lets us count how many people reach each step of the booking process. It carries no name, email or health information, and is only set once you accept analytics cookies. | 365 days |
nbk_admin_session | Nutrition by Klara | Strictly necessary | Authenticates Klara’s administrator session. Never set for visitors. | 60 minutes |
nbk_google_oauth_state, nbk_calendar_oauth_state | Nutrition by Klara | Strictly necessary | Short-lived security tokens protecting the administrator’s Google Business Profile and Google Calendar connections. Never set for visitors. | 10 minutes |
| Checkout and measurement markers | Nutrition by Klara | Strictly necessary | A small number of short-lived markers held in session storage — one carries a chosen appointment slot into checkout, the others stop a single analytics event being counted twice if you refresh the page. | Cleared when the browser tab closes |
__cf_bm | Cloudflare | Strictly necessary | Distinguishes humans from automated traffic to protect the Website from bots and abuse. A separate cookie is generated for each site and it is not used to track you from site to site. | Approx. 30 minutes |
cf_clearance | Cloudflare | Strictly necessary | Records that you have passed a security challenge so you are not repeatedly challenged. Set only where a security challenge is presented. | Approx. 30 minutes (configurable) |
__stripe_mid | Stripe | Strictly necessary | Fraud prevention on pages that load our payment provider – identifies the browser/device to help detect and prevent fraudulent transactions | 1 year |
__stripe_sid | Stripe | Strictly necessary | Fraud prevention on pages that load our payment provider – a session identifier used to help detect fraudulent transactions | Approx. 30 minutes |
_ga | Google Analytics (GA4) | Analytics (consent) | Distinguishes individual users to compile aggregated statistics on how the Website is used | 2 years |
_ga_<container-id> | Google Analytics (GA4) | Analytics (consent) | Maintains Google Analytics session state | 2 years |
4.7. No tag manager. We do not use Google Tag Manager or any other tag-management container. The Google Analytics tag is loaded directly by the Website, and only after you have consented to analytics cookies, so its cookies (_ga and _ga_<container-id>) are never set before that.
4.8. The Stripe and Cloudflare cookies are set in connection with secure payment processing and Website security. They are treated as strictly necessary because they are required to provide the secure service you have requested.
5. Third-party cookies and international transfers
5.1. Some cookies on our Website are set by third parties who provide services to us. These providers process information in accordance with their own privacy and cookie notices, which we recommend you review:
- Cloudflare, Inc. – security and content delivery (protecting the Website from bots and malicious traffic): Cloudflare Privacy Policy
- Stripe, Inc. – payment processing and fraud prevention (where you pay online): Stripe Privacy Policy
- Google LLC – website analytics (Google Analytics): Google Privacy Policy
5.2. Where these cookies are non-essential (such as the Google Analytics cookies), they are only set on your device after you have given your consent through our cookie banner.
5.3. International transfers. Some of these providers – including Cloudflare, Stripe and Google – are established in, or process data in, the United States. Where cookie-related personal data is transferred outside the European Economic Area, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses and/or an adequacy decision (including the EU–US Data Privacy Framework, where the provider is certified). Further detail on international transfers is set out in our Privacy Policy.
6. Security of cookies
6.1. Cookies on our Website are transmitted over secure HTTPS connections. Where appropriate, our cookies and those of our providers use standard protective attributes:
- the Secure attribute, so the cookie is only sent over an encrypted HTTPS connection;
- the HttpOnly attribute on session cookies, so they cannot be read by scripts running in your browser; and
- the SameSite attribute, to help protect against cross-site request forgery.
6.2. We do not use techniques to restore or regenerate cookies after you have deleted them or after they have expired, and we will not set non-essential cookies again without obtaining your renewed consent.
7. How to manage your cookie preferences
7.1. Our cookie banner. You can accept or reject non-essential cookies, by category, using the cookie banner shown when you first visit the Website. You can return to your settings at any time by clicking the “Cookie Settings” link (or equivalent) on the Website to change or withdraw your consent.
7.2. Browser settings. Most browsers allow you to control cookies through their settings, including viewing, deleting and blocking cookies. The path varies by browser:
- Google Chrome: Settings → Privacy and security → Cookies and other site data (or Third-party cookies)
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Apple Safari: Settings (Preferences) → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data
On mobile devices, similar controls are available in the browser or device settings (for example, in Safari on iOS under Settings → Apps → Safari, or in Chrome on Android under Settings → Site settings → Cookies). General guidance on managing cookies is available at www.allaboutcookies.org.
7.3. Google Analytics opt-out. You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
7.4. What happens if you disable cookies. If you block or delete strictly necessary cookies, parts of the Website may not work as intended – for example, secure payment or session features may fail. Blocking functional or analytics cookies will not stop you from using the Website, but some features may be less personalised, and we will not be able to measure how the Website is used. Browser settings apply to all websites, not just ours.
8. Consent and withdrawal
8.1. We obtain your consent to non-essential cookies through our cookie banner before those cookies are set. You are free to accept all, reject all, or choose which categories you allow.
8.2. Consent records. Our consent tool keeps a record of the choices you make – including the date, the categories you accepted or rejected, and the version of this Cookie Policy in force at the time – so that we can honour your preferences and demonstrate that consent was obtained.
8.3. Withdrawing consent. Withdrawing your consent is as easy as giving it. You can withdraw or change your consent at any time through the “Cookie Settings” link on the Website, or by adjusting your browser settings. Withdrawing your consent does not affect the lawfulness of any processing carried out before you withdrew it.
8.4. Refreshing consent. In line with guidance from the Data Protection Commission, we will ask you to confirm your cookie preferences again periodically (and in any event no later than every six months), so that your choices remain current. We will also ask for fresh consent if we make a material change to the cookies we use.
9. Your rights in relation to cookies
9.1. Where cookies process your personal data, you have rights under the GDPR. In particular, in relation to cookies you may:
- withdraw your consent at any time for any cookies set on the basis of consent (see section 8);
- object to any processing we carry out on the basis of our legitimate interests, although we may not be able to disable cookies that are strictly necessary to provide the Website to you; and
- request information about the cookies we use, including their purpose, duration and whether they are first- or third-party (this Cookie Policy and our cookie banner provide that information).
9.2. You also have the broader rights of access, rectification, erasure, restriction, objection and data portability in respect of your personal data. These rights, and how to exercise them, are explained in full in our Privacy Policy. To exercise any of them, contact us at info@nutritionbyklara.com.
9.3. If you are unhappy with how we handle cookies or your personal data, you have the right to lodge a complaint with the Data Protection Commission (see section 11). We would welcome the chance to resolve your concerns first, so please contact us before approaching the Commission.
10. Do Not Track and browser signals
10.1. Some browsers can send a “Do Not Track” (DNT) or “Global Privacy Control” (GPC) signal. There is currently no agreed legal or industry standard requiring websites to respond to these signals in a particular way. Our Website responds to the choices you make through our cookie banner rather than to these browser signals. You can control all non-essential cookies through the banner and your browser settings at any time.
11. Changes to this Cookie Policy
11.1. We may update this Cookie Policy from time to time to reflect changes in the cookies we use, or for other operational, legal or regulatory reasons. When we make changes, we will update the “Last updated” date at the top of this Cookie Policy.
11.2. Where changes are material, we will take reasonable steps to bring them to your attention – for example, by displaying a notice on the Website or by asking you to review your cookie preferences again. We encourage you to review this Cookie Policy periodically.
12. Contact us and your right to complain
12.1. If you have any questions about this Cookie Policy or our use of cookies, please contact us:
- Klara Kisznyer, trading as Nutrition by Klara
- Email: info@nutritionbyklara.com
- Address: 1 Milford Park, Ballinabrannagh, Co. Carlow, R93 K263, Ireland
- Telephone: 085 203 4929
12.2. We would welcome the opportunity to deal with any concerns you may have before you approach the supervisory authority, so please contact us in the first instance.
12.3. You also have the right to lodge a complaint with the Irish supervisory authority:
- Data Protection Commission
- Address: 6 Pembroke Row, Dublin 2, D02 X963, Ireland (Portarlington office: Canal House, Station Road, Portarlington, R32 AP23, Co. Laois)
- Website: www.dataprotection.ie
- Telephone: +353 (0)1 765 0100 / +353 (0)57 868 4800
This Cookie Policy is provided in English, which is the governing language for all interpretations of its terms.