← Back to Home

Privacy Policy

Health Festival™ ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.healthfestival.store and purchase our digital products.

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Australian Privacy Principles (APP), Brazil's Lei Geral de Proteção de Dados (LGPD), and other applicable international data protection laws.

1. Information We Collect

1.1 Personal Information

We may collect personally identifiable information that you voluntarily provide to us, including:

• Name: First and last name
• Email Address: For order confirmation, product delivery, and customer support
• Payment Information: Processed securely through third-party payment processors (we do not store credit card details)
• Correspondence: Any messages you send through our contact forms or email

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing activity:

• Log Data: IP address, browser type and version, operating system, time zone setting
• Usage Data: Pages visited, time spent on pages, unique device identifiers
• Location Data: Approximate geographic location derived from IP address
• Cookies and Tracking Technologies: See Section 5 for details

1.3 Third-Party Data

We may receive information about you from third-party services including:

• Payment processors (transaction completion data)
• Analytics services (Google Analytics, Meta Pixel)
• Email marketing platforms (engagement metrics)
• Social media platforms (if you interact with our content)

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Essential Business Operations

• Process and fulfill your orders
• Send order confirmations and delivery emails
• Provide customer support and respond to inquiries
• Detect, prevent, and address fraud or security issues

2.2 Website Improvement

• Analyze website traffic and user behavior
• Optimize user experience and site performance
• Test new features and improvements
• Monitor and analyze usage trends

2.3 Marketing and Communication (With Consent)

• Send promotional emails about new products or offers (you can opt-out anytime)
• Display targeted advertisements on third-party platforms
• Personalize content and recommendations

2.4 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent harm
• Enforce our terms and conditions

3. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), the UK, or Switzerland, our legal basis for collecting and using your information includes:

Processing Purpose	Legal Basis
Order fulfillment and customer service	Contractual necessity
Marketing communications	Consent (opt-in)
Analytics and website improvement	Legitimate interest
Fraud prevention and security	Legitimate interest / Legal obligation

4. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy:

• Transaction Data: Retained for 7 years for tax and accounting purposes (legal requirement)
• Customer Support Records: Retained for 3 years after your last interaction
• Marketing Lists: Retained until you unsubscribe or request deletion
• Analytics Data: Anonymized after 26 months (Google Analytics default)
• Cookie Data: Expires according to cookie type (see Section 5)

After the retention period, we securely delete or anonymize your data so it can no longer identify you.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our services. We use both first-party (set by us) and third-party cookies (set by our partners).

5.2 Types of Cookies We Use

Essential Cookies (Always Active)

Required for website functionality. Cannot be disabled.

• Shopping cart functionality
• Security and fraud prevention
• Session management

Analytics Cookies (With Consent)

Help us understand how visitors use our site.

• Google Analytics: Traffic analysis and user behavior
• Hotjar: Heatmaps and session recordings (anonymized)

Marketing Cookies (With Consent)

Used to show you relevant advertisements and measure campaign effectiveness.

• Meta Pixel (Facebook/Instagram): Conversion tracking and retargeting
• Google Ads: Remarketing and conversion tracking
• TikTok Pixel: Ad performance measurement

5.3 Managing Cookies

You can control cookies through:

• Our cookie consent banner (appears on first visit)
• Your browser settings (see AboutCookies.org for instructions)
• Third-party opt-out tools:
  • Google: adssettings.google.com
  • Facebook: Ad Preferences

Note: Disabling essential cookies may affect website functionality.

6. Third-Party Services and Disclosure

We share your information with trusted third-party service providers who assist us in operating our business. These parties are contractually obligated to protect your data and use it only for specified purposes.

6.1 Payment Processors

• Stripe / PayPal / Gumroad: Secure payment processing (PCI DSS compliant)
• We do not store your complete credit card information

6.2 Email Services

• Mailchimp / ConvertKit: Email delivery and marketing automation
• Subject to their respective privacy policies

6.3 Analytics and Advertising

• Google Analytics: Website traffic analysis
• Meta (Facebook/Instagram): Advertising and retargeting
• Google Ads: Advertising campaigns

6.4 Hosting and Infrastructure

• Cloud Hosting Provider: Website and data hosting
• Servers located in secure, compliant data centers

6.5 When We Must Disclose Data

We may disclose your information if required by law or to:

• Comply with legal obligations or court orders
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our terms and conditions

7. Your Privacy Rights

7.1 GDPR Rights (EEA, UK, Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

7.2 CCPA Rights (California Residents)

If you are a California resident, you have the right to:

• Know: What personal information we collect, use, and share
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the "sale" of personal information (Note: we do not sell personal data)
• Non-Discrimination: Not be discriminated against for exercising your rights

7.3 Australia (Privacy Act)

Australian residents can access and correct their personal information and lodge complaints with the Office of the Australian Information Commissioner (OAIC).

7.4 Brazil (LGPD)

Brazilian residents have rights similar to GDPR, including access, correction, deletion, and portability of personal data.

7.5 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

• Email: privacy@healthfestival.store
• Subject Line: "Privacy Rights Request"
• Include: Your full name, email address, and specific request

We will respond within 30 days (or as required by applicable law).

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs): For transfers outside the EEA
• Adequacy Decisions: Transfers to countries deemed adequate by the EU Commission
• Privacy Shield Successor Programs: Where applicable

9. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: SSL/TLS encryption for data transmission
• Secure Servers: Data stored on encrypted, access-controlled servers
• Access Controls: Limited employee access on a need-to-know basis
• Regular Audits: Periodic security assessments and updates
• PCI DSS Compliance: For payment processing

Important: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@healthfestival.store, and we will delete it promptly.

11. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our website currently does not respond to DNT signals. You can control tracking through our cookie consent tool and browser settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated "Last Updated" date.

Material changes will be communicated via:

• Prominent notice on our website
• Email notification (if you are a customer)

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Supervisory Authorities

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority:

• EU/EEA: Your local Data Protection Authority
• UK: Information Commissioner's Office (ICO) - ico.org.uk
• California: California Attorney General - oag.ca.gov
• Australia: Office of the Australian Information Commissioner (OAIC) - oaic.gov.au

---

Thank you for trusting Health Festival™ with your information.
We are committed to transparency and protecting your privacy.

← Return to Home