Last reviewed on 29 September 2026.
NNWA publishes the name and qualifications of everyone who writes and checks its material. You can see the full teaching team on the faculty page.
A consent form does two jobs that people tend to conflate. It establishes what the client is agreeing to receive, and it establishes what they are agreeing to let you do with their information. Both matter, and the first is the one that prevents most disputes.
The scope paragraph, which does most of the work
The single most valuable thing on the page is a plain statement of what the service is and is not. Something the client reads before the first consultation rather than after a disagreement.
It should say that you provide nutrition guidance, that this is not medical treatment, that you do not diagnose conditions and do not alter medicines, and that where something falls outside your scope you will refer them onward. Write it in the language the client actually speaks, not in legal register.
Almost every complaint in this field traces to a mismatch of expectation rather than to harm: a client who believed they were buying an outcome, or believed you were a clinician. A scope paragraph in the client's own hands on day one prevents more trouble than any other document.
What belongs on the page
What the service is
The scope paragraph above, plus what a client can actually expect: the number of sessions, what a plan looks like, what follow up is included, and what it costs.
What you will collect, and why
Name and contact details, dietary history, lifestyle information, relevant medical history, medication, and any measurements you take. Say why each category is needed rather than listing them bare. Data collected without a stated purpose is the shape of problem the DPDP framework is designed around.
Who else will see it
Usually nobody. Say so. Where anybody else is involved, whether a supervisor, an assistant or software that stores records, say that too, in the same sentence rather than buried.
How long you will keep it
A stated period, and what happens at the end of it. Indefinitely is not an answer, and it is the answer most small practices give by default simply because nobody ever deletes anything.
How they can change their mind
How to withdraw consent, how to ask for a copy of what you hold, and how to ask for deletion. These are the practical rights a data protection regime creates, and a form that omits them reads as though it was copied from somewhere.
Consent has to be meaningful, not merely obtained
A signature at the bottom of a page nobody read is a weak thing. The framework in India, like most modern ones, expects consent to be informed, specific and freely given, and expects it to be as easy to withdraw as it was to give.
In practice that means three habits. Give the form before the appointment rather than sliding it across a table while the client is already seated. Cover the scope paragraph verbally in the first two minutes, which takes thirty seconds and lands far better than the document alone. And make withdrawal genuinely possible rather than theoretical: an email address that works is sufficient.
The separate consents people forget
Two things are commonly bundled into a general consent when they should be asked for separately, because the client may reasonably want the service without them.
Photographs. Before and after images, or pictures of meals. Sensitive, frequently shared later, and deserving of their own tick box with its own explanation of where they might appear.
Marketing. Permission to advise is not permission to send offers. Bundling them is the practice most likely to irritate a client and the easiest to avoid.
Testimonials belong in this category too, and the ethics of asking are covered in getting your first testimonial ethically.
What to do with minors
If you see anyone under eighteen, consent comes from a parent or guardian, and the framework treats children's data with particular care. Record who gave consent and their relationship to the child. Practitioners working with families sometimes take the parent's consent verbally and never write down which parent; that is exactly the detail that matters later.
Where the form sits in the wider set up
The consent form pairs with the intake form, which collects the clinical information, and with your records practice, which governs what happens to it afterwards. Those are covered in the nutrition client intake form explained and storing client records safely. The whole sequence sits inside building a nutrition practice in India.
The version for online practice
Consultation by video changes two things. The form has to be signed electronically, and you are likely holding the data on somebody else's servers.
For the first, a typed name with a timestamp is common practice, and an emailed confirmation from the client's own address is stronger than a tick box. For the second, say in the form which tools you use to hold records or conduct sessions. Clients rarely object; what they object to is discovering it later.
Practitioners seeing clients in other states should also note that the consultation being remote does not make the scope question go away. What you may advise is set by your qualification, not by the medium.
The honest summary
Write one page in plain language. Lead with what the service is and is not, because that paragraph prevents most disputes. State what you collect and why, who sees it, how long you keep it and how to withdraw. Ask separately for photographs and for marketing. Give it before the appointment, talk through the scope paragraph out loud, and have a lawyer look at it once before you rely on it.