Privacy Policy

1. Data controller

Annalisa Viale — Herbalife Independent Distributor, Via Comano 10, 54033 Carrara (MS), Italy. Privacy contact: personalnutritionbq@gmail.com.

2. What data we process

• Contact and shipping data: first name, last name, address, email, phone, delivery country.
• Wellness Assessment answers: these include health-related information (special category data, Art. 9 GDPR).
• Order and payment data: selected plan, amounts, payment outcome. Card details are handled exclusively by Stripe: they never pass through or get stored on our systems.
• Essential technical data required for the operation and security of the site (see Cookie Policy).

3. Why we process it and on what legal basis

• To generate your personalised formula and manage your order — performance of the contract; for health-related information: your explicit consent (Art. 9.2.a GDPR), collected before the questionnaire.
• Service communications (order confirmation, delivery updates) — performance of the contract.
• Email reminders and updates, including resuming an interrupted questionnaire — optional consent, revocable at any time.
• Legal obligations (tax, accounting) — legal obligation.

4. How we protect health data

Your questionnaire answers are encrypted in the database (AES-GCM encryption), accessed only to configure your formula, and never used for marketing purposes or shared with third parties for such purposes.

5. Who may receive your data

Exclusively for the purposes above: Herbalife (order fulfilment and product invoicing in your name), Stripe (payments), the site's hosting and database providers, Resend (service emails). Some providers are based in the United States: transfers take place with the safeguards required by the GDPR (standard contractual clauses and/or the EU-U.S. Data Privacy Framework).

6. How long we keep it

Questionnaire answers: 24 months from your last order, then deleted. Order data and documents: for the period required by law. Optional email consent: until revoked. You can request early deletion at any time by writing to personalnutritionbq@gmail.com.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, receive it in a portable format, object to processing and withdraw any consent given, by writing to personalnutritionbq@gmail.com. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

8. Other information

The service is reserved for adults aged 18 or over. Your formula is selected on the basis of the answers you provide, solely to deliver the service you request; we carry out no automated decision-making producing legal effects on you and no marketing profiling.