GDPR

GDPR Compliance Policy

1. Introduction

At Nutrition Herbal, we are committed to protecting your personal data and respecting your privacy. This GDPR Compliance Policy explains how we collect, process, and safeguard personal information in accordance with the General Data Protection Regulation (EU) 2016/679.

2. Lawful Basis for Processing

We process personal data only when we have a lawful basis, including:

- Consent: When you voluntarily provide information (e.g., subscribing to newsletters).

- Contractual necessity: To fulfill transactions, affiliate commissions, or service agreements.

- Legal obligations: To comply with applicable laws and regulations.

- Legitimate interests: For business operations such as analytics, marketing, and fraud prevention, provided these do not override your rights.

3. Data We Collect

We may collect:

- Identity Data: Name, email address, contact details.

- Transaction Data: Purchases, affiliate commissions, billing information.

- Technical Data: IP address, browser type, device information, and website usage.

- Marketing Data: Preferences for receiving communications and promotions.

4. How We Use Your Data

Your personal data may be used for:

- Delivering products, services, and affiliate commissions.

- Communicating updates, promotions, and relevant information.

- Improving website functionality and user experience.

- Ensuring compliance with legal and regulatory requirements.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once data is no longer needed, it will be securely deleted or anonymized.

6. Your GDPR Rights

Under GDPR, you have the following rights:

- Right of Access: Request a copy of your personal data.

- Right to Rectification: Correct inaccurate or incomplete data.

- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data.

- Right to Restrict Processing: Limit how we use your data.

- Right to Data Portability: Receive your data in a structured, machine-readable format.

- Right to Object: Opt out of certain processing activities, including direct marketing.

- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, please contact us at Email: support@nutritionherbal.com.

7. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms.

8. Data Security

We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no system is completely secure, and we cannot guarantee absolute protection.

9. Third-Party Services

Our website may use third-party services (e.g., payment processors, affiliate networks). These providers have their own privacy policies, and we encourage you to review them.