Privacy Policy

1. Who We Are

HerNutrea provides microbiome testing and personalised nutrition plans to help you achieve better health and well-being. For any questions or concerns about this Privacy Policy, you can contact us at:

Email: contact@hernutrea.com

For data protection inquiries specifically, please contact: privacy@hernutrea.com

2. What Data We Collect

We collect the following types of personal data:

a. Personal Information

• Name
• Email address
• Phone number
• Shipping and billing address
• Payment information (processed securely by third-party payment providers)

b. Health-Related Data

• Information provided in questionnaires (e.g., dietary preferences, allergies, symptoms, health conditions)
• Microbiome test results
• Health-related information necessary for personalized nutrition recommendations

c. Technical Data

• IP address
• Browser type and version
• Device information
• Cookies and usage data (see Section 8)

3. How We Collect Your Data

We collect data in the following ways:

• When you purchase a product or service on our website.
• When you activate your microbiome test kit.
• When you complete questionnaires for personalised nutrition plans.
• Through cookies and tracking technologies, when you use our website.

4. Why We Collect Your Data and Legal Basis

We collect and process your data for the following purposes:

• To process your orders and deliver products or services (based on contract fulfilment – Article 6(1)(b) GDPR).
• To analyse microbiome samples and provide test results (based on your explicit consent – Article 9(2)(a) GDPR).
• To create personalized nutrition plans based on your preferences and health data (based on your explicit consent – Article 9(2)(a) GDPR).
• To communicate with you about your orders, results, and updates (based on legitimate interest – Article 6(1)(f) GDPR).
• To improve our services and website functionality (based on legitimate interest – Article 6(1)(f) GDPR).
• To comply with legal obligations (based on legal obligation – Article 6(1)(c) GDPR).

5. Data Sharing

• We only share your data with trusted third parties when necessary to provide our services:
• Partner Laboratory: Your microbiome sample is analysed by a certified laboratory within the EU. All data shared with the laboratory is pseudonymized and linked to a unique activation code.
• Shipping Providers: To deliver your test kit and other products.
• Payment Processors: To securely process payments.
• Legal Authorities: If required by law or to protect our legal rights.

With your explicit consent, we may make your analysis data available to research institutions in pseudonymized form to support medical research.

We do not sell or share your personal data with third parties for marketing purposes.

6. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Personal data: Retained for up to 7 years for legal and tax purposes.
• Microbiome test results: Retained for 10 years to comply with medical data retention requirements.
• Physical DNA samples: Stored for up to 1 year, after which they cannot be further processed.
• Cookies and usage data: Retained for 14 months.

You can request the deletion of your data at any time (see Section 7), subject to legal retention requirements.

7. Your Rights

Under GDPR, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your data, subject to legal obligations.
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to the processing of your data for specific purposes.
• Right to Withdraw Consent: Withdraw your consent at any time.
• Rights Related to Automated Decision Making: Request human intervention, express your point of view, and contest any automated decisions.

To make use of your rights, contact us at privacy@hernutrea.com

If you believe your data has been mishandled, you have the right to file a complaint with your local data protection authority.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences.
• Analyse website usage.
• Provide personalised content.

You can manage your cookie preferences through your browser settings. Note that disabling cookies may affect website functionality.

9. Automated Decision-Making

We use automated processing to generate personalised nutrition recommendations based on your microbiome results and questionnaire responses. This helps us provide tailored advice for your health needs.

You have the right to:

• Request human intervention in the recommendation process
• Express your point of view regarding the recommendations
• Contest any recommendation you believe doesn’t suit your needs

10. Data Security

We implement strict security measures to protect your data, including:

• Encryption of sensitive data during transmission.
• Secure storage of personal data on protected servers.
• Pseudonymization of health data.
• Regular security audits and updates.

While we take all reasonable precautions, no system is completely secure. We cannot guarantee the absolute security of your data.

11. International Data Transfers

Your data is primarily processed within the European Union. Any transfers of data outside the EU would only occur with appropriate safeguards in place as required by GDPR, such as Standard Contractual Clauses or adequacy decisions.

12. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. Any updates will be posted on this page, and significant changes will be communicated to you via email or website notification.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: contact@hernutrea.com

GDPR Compliance Statement

HerNutrea is fully committed to complying with the General Data Protection Regulation (GDPR). We ensure that your personal data is processed lawfully, transparently, and securely. For more information about your rights under GDPR, visit https://gdpr-info.eu/.