GDPR Compliance
At Nutri Health Foundation, we are committed to protecting the privacy and personal data of our website users. This GDPR Compliance Policy outlines how we collect, process, store, and protect personal information in compliance with the General Data Protection Regulation (GDPR).
- Data Controller
Nutri Health Foundation, located at [Insert Address], is the data controller responsible for the collection, processing, and storage of personal data on our website.
- Personal Data Collection
We collect personal data from users on our website for the following purposes:
– Providing information about our services and products.
– Handling inquiries and communication.
– Processing orders and delivering products.
– Sending newsletters or promotional materials (with user consent).
– Improving website functionality and user experience.
– Complying with legal obligations.
The types of personal data we may collect include:
– Name and contact information (e.g., email address, phone number).
– Payment and billing information.
– IP address and browsing information.
– Cookies and usage data.
– Any other information voluntarily provided by users.
- Legal Basis for Data Processing
We will only process personal data when we have a legal basis to do so, which includes:
– The user’s consent.
– The necessity for the performance of a contract.
– Compliance with a legal obligation.
– Protection of vital interests.
– Legitimate interests pursued by Nutri Health Foundation or a third party.
- Data Processing and Storage
We will process and store personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Personal data will be processed in a manner that ensures appropriate security, confidentiality, and integrity.
- Data Sharing and Transfer
We may share personal data with third parties under the following circumstances:
– Service providers: We may engage trusted third-party service providers to assist in website operations, such as hosting, payment processing, and analytics. These providers will have access to personal data solely for the purpose of providing their services and will be bound by confidentiality obligations.
– Legal requirements: We may disclose personal data if required to do so by law or in response to valid legal requests, such as government authorities or law enforcement agencies.
– Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction. We will ensure appropriate safeguards are in place to protect personal data during such transfers.
- User Rights
As a user of our website, you have the following rights regarding your personal data:
– Right to access: You have the right to request access to the personal data we hold about you.
– Right to rectification: You can request the correction or updating of any inaccurate or incomplete personal data.
– Right to erasure: You have the right to request the deletion of your personal data under certain circumstances.
– Right to restrict processing: You can request the restriction of processing your personal data in certain situations.
– Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another data controller.
– Right to object: You can object to the processing of your personal data under certain conditions.
To exercise these rights or for any inquiries regarding your personal data, please contact us using the information provided at the end of this policy.
- Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance user experience and gather information about website usage. By using our website, you consent to the use of cookies as described in our separate Cookie Policy.
- Data Security
We take data security seriously and implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of data transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
- Updates to the Policy
We may update this GDPR Compliance Policy from time to time to reflect changes in legal or regulatory requirements, our data processing practices, or technological advancements. The updated policy will be posted on our website with a revised effective date.
Contact Information
If you have any questions, concerns, or requests regarding this GDPR Compliance Policy or our data processing practices, please contact us at:
info@nutrihealth.foundation
By using our website, you acknowledge that you have read and understood this GDPR Compliance Policy and consent to the collection, processing, and storage of your personal data as described herein.