Privacy policy

Data controller

[company name], [registered address] · Email: hello@herbadaily.com

What we collect and why

• Fulfilling your order (name, email, phone, shipping and billing address, items) – legal basis: contract (GDPR Art. 6(1)(b)). Kept for as long as tax/accounting law requires (up to 8 years).
• Payment – card details are handled only by Stripe; we only see that a payment succeeded and its amount.
• Newsletter and welcome code (email, language, time of consent) – legal basis: consent (Art. 6(1)(a)); withdraw any time with the unsubscribe link in every email.
• Customer reviews (name, email, rating, photos) – legal basis: consent. Only your name, rating, text and photos are published.
• Review requests after delivery – legal basis: legitimate interest; you can opt out any time.
• “Someone in [city] bought…” notices – show only the city and product of real orders, never names; legal basis: legitimate interest.
• Analytics and marketing cookies (Google Analytics 4, Meta Pixel, TikTok Pixel) – only after you accept them in the cookie banner.

Who processes data for us

• Vercel Inc. (hosting) · Supabase Inc. (database, EU region) · Stripe Payments Europe Ltd. (payments) · Resend Inc. (email delivery)
• Our supplier / Herbalife distribution partner (name, address and phone needed to ship your parcel)
• With your consent: Google Ireland Ltd., Meta Platforms Ireland Ltd., TikTok Technology Ltd.

Transfers outside the EU (USA) rely on the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

Your rights

You can request access, correction, deletion, restriction or portability of your data, object to processing, and withdraw consent at any time. Email hello@herbadaily.com. You may also complain to your local data protection authority.