Privacy Policy

1. Overview

Nutrivial is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Swiss data protection law. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services.

Controller: Nutrivial, Besmerweg, 8280 Kreuzlingen, Switzerland
Email: health@nutrivial.com
Phone: +41 (0)77 291 87 67

2. Data We Collect

We collect personal data through the following means:

• Voluntary submission: name, email address, phone number, and health information you provide via contact forms or appointment intake.
• Automatically: IP address, browser type, pages visited, and time spent on our website via cookies and analytics tools.
• Third parties: payment data processed by Stripe (we do not store your full card details).

3. Purposes of Processing

• Operating and improving our website and services
• Responding to inquiries and booking appointments
• Sending newsletters and marketing communications (with your consent)
• Processing payments for coaching plans
• Analysing website usage to improve user experience (Google Analytics)

4. Legal Basis (GDPR)

• Contract performance (Art. 6(1)(b)): processing your appointment and coaching data
• Consent (Art. 6(1)(a)): newsletters, marketing emails, and analytics cookies
• Legitimate interests (Art. 6(1)(f)): website security and fraud prevention

5. Newsletters

We use a double opt-in process for newsletter subscriptions. You will receive a confirmation email before being added to our mailing list. You may unsubscribe at any time via the link in any newsletter email.

6. Analytics

We use Google Analytics with IP anonymisation enabled. This means your IP address is truncated before any processing occurs. Data is processed in accordance with Google's data processing terms. You may opt out via your cookie preferences.

7. Data Sharing

We do not sell your personal data. We share data only with trusted processors under data processing agreements (DPAs), including:

• Stripe – payment processing
• MailerSend – transactional email delivery
• Google – analytics (anonymised)

8. Retention Periods

• Contact inquiries: 12 months
• Newsletter subscriptions: until you unsubscribe
• Appointment and coaching data: duration of the coaching relationship plus 3 years

9. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Data portability
• Object to or restrict processing
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at health@nutrivial.com.

10. Security

We use SSL/TLS encryption for all data transmitted via our website. International data transfers (e.g. to Google) are covered by Standard Contractual Clauses (SCCs) as required by GDPR.