Privacy Policy

Last updated: 12 May 2026.

This Privacy Policy explains how we collect, use, disclose and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Italian Codice in materia di protezione dei dati personali (D.lgs. 196/2003 as amended).

1. Data Controller

The data controller for the personal data collected through this website is Vanessa Balestra.

2. Personal data we collect

• Identification & contact data: name, surname, postal address, email address, telephone number.
• Order data: products purchased, quantities, prices, delivery address, invoice information.
• Payment data: processed directly by our payment service provider; we do not store full card details.
• Technical & usage data: IP address, browser type, device information, pages visited, time spent on the site (via cookies — see our Cookie Policy).
• Marketing data: subscription preferences for newsletters or SMS notifications, where you have given consent.

3. Purposes and lawful bases of processing (Art. 6 UK GDPR)

• To execute your order and provide customer service — Art. 6(1)(b), performance of a contract.
• To comply with legal obligations (accounting, tax records, distance-selling information) — Art. 6(1)(c).
• To send marketing communications — Art. 6(1)(a), your explicit consent. You may withdraw consent at any time.
• To prevent fraud and ensure website security — Art. 6(1)(f), legitimate interests of the data controller.

4. Recipients of your data

Your personal data may be shared with the following categories of recipients, acting as data processors under written agreements:

• Hosting & infrastructure provider: Vercel Inc. (USA) — website hosting and content delivery.
• E-commerce platform: Shopify Inc. (Canada/USA) — product catalogue, checkout and order management.
• Payment processor: as selected at checkout (e.g., Shopify Payments, PayPal, Stripe) — payment authorisation and settlement.
• Shipping carrier: communicated to you in the order confirmation.
• Email service provider: for transactional emails and (with your consent) marketing newsletters.
• Herbalife International, Inc. and its affiliates: where required under the distributor agreement, in limited and occasional circumstances.

Personal data will not be sold, traded or rented to third parties for their own marketing purposes.

5. International transfers

Some processors (Vercel, Shopify, certain email providers) are located outside the UK/EEA. Transfers take place on the basis of (i) the European Commission's Standard Contractual Clauses, (ii) the UK International Data Transfer Addendum, or (iii) an applicable adequacy decision.

6. Retention

• Order and tax records: 10 years (Italian fiscal law).
• Customer account data: until you request deletion or the account is inactive for 36 months.
• Marketing data: until you withdraw consent or 24 months from last interaction.
• Server logs and cookies: see our Cookie Policy.

7. Your rights as a data subject

You have the right to: access your data, request rectification, request erasure ("right to be forgotten"), restrict processing, data portability, object to processing (including marketing), and withdraw any consent at any time. To exercise these rights, contact us at vanessa.vb0901@gmail.com. We will respond within one month.

8. Right to lodge a complaint

If you believe your data has been processed unlawfully, you may complain to:

• UK: Information Commissioner's Office (ICO) — ico.org.uk.
• Italy: Garante per la Protezione dei Dati Personali — garanteprivacy.it.

9. Cookies

This website uses cookies. Please see our separate Cookie Policy for full details and to manage your preferences.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review it periodically.