Privacy Policy

1. Introduction

Xorbalance ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out our contact form or consultation request form
• Subscribe to our newsletter or communications
• Participate in our online consultations
• Contact us via email or telephone

This information may include:

• Name and contact details (email address, phone number)
• Demographic information (gender, age range)
• Information about your lifestyle and nutritional preferences
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website addresses
• Click patterns and website navigation

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and deliver our nutritional consultation services
• To respond to your enquiries and requests
• To schedule and facilitate online consultations
• To send you information about our services (with your consent)
• To improve our website and services
• To analyse website usage and trends
• To comply with legal obligations
• To protect our rights and the safety of our users

4. Legal Basis for Processing (GDPR)

Under the UK General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To fulfil our contractual obligations when providing consultation services
• Legitimate Interests: To operate and improve our business, where such interests do not override your rights
• Legal Obligation: To comply with applicable laws and regulations

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and providing our services (e.g., hosting, email services)
• Legal Requirements: When required by law or to protect our rights, property, or safety
• Business Transfers: In connection with any merger, sale, or transfer of our business assets
• With Your Consent: When you have given us permission to share your information

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Consultation records and related information are typically retained for a period of seven years following the last consultation, in accordance with professional guidelines.

7. Your Rights Under GDPR

Under UK data protection law, you have the following rights:

• Right of Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent

To exercise any of these rights, please contact us using the details provided at the end of this policy.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure with encryption
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and security

However, no method of transmission over the internet or electronic storage is completely secure. Whilst we strive to protect your personal information, we cannot guarantee absolute security.

10. International Data Transfers

Your information is primarily processed and stored within the United Kingdom. If we transfer your personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection law.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Supervisory Authority

If you believe we have not handled your personal information in accordance with UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority: