GDPR Compliance & Your Data Rights

Scope of this statement

Better Health Options Limited (“we,” “us,” or “our”) is an Irish company, and this statement describes the way we handle personal information belonging to shoppers and site visitors located in the EEA, the United Kingdom, and Switzerland. Our practices are governed by Regulation (EU) 2016/679 — the General Data Protection Regulation (“GDPR”) — together with the corresponding UK and Swiss legislation. Please read it alongside our Privacy Policy, which it supplements.

1. Who controls your data

The controller of the personal information described here, within the meaning of the GDPR, is:

Better Health Options Limited
Landscape House, Baldonnell Business Park, Baldonnell, Dublin 22, D22 P3K7
Email: support@yourhealthyproducts.com

2. Your rights at a glance

GDPR Articles 15–22 grant every data subject a set of rights over their personal information:

• Access — obtain confirmation that we process your data, together with a copy of what we hold.
• Rectification — have inaccurate details corrected and incomplete records completed.
• Erasure (the “right to be forgotten”) — have your data deleted once no valid ground remains for us to keep it.
• Restriction — have processing paused in the situations the GDPR sets out.
• Portability — obtain the data you supplied to us in a portable, machine-readable file, and have it moved to a different controller wherever that is technically possible.
• Objection — refuse processing carried out under our legitimate interests, direct marketing included.
• Automated decisions — freedom from decisions reached purely by automated means that carry legal or comparably serious consequences for you.
• Withdrawing consent — where consent is the ground we rely on, revoke it whenever you wish; processing already carried out remains lawful.

3. How to exercise your rights

Send a request to support@yourhealthyproducts.com. There is never a fee for a rights request, and you will hear back from us within one month.

4. The information we hold

Depending on how you interact with us, that may include:

• Who you are: your first and last name.
• How to reach you: email, phone number, and your billing and delivery addresses.
• Your purchases: order history, the items you bought, and a tokenised fingerprint of your payment method. Your complete card number never sits on our systems; a PCI-compliant payment processor handles it.
• Your device: IP address, operating system, browser and its version, device identifier, time zone, and the URL that referred you here.
• Your browsing: which pages you open, what you click, and how long each visit lasts.
• Your preferences: whether, and through which channels, you would like to hear from us.

5. Why we are allowed to process it

Every processing activity rests on one of the grounds listed in Article 6 GDPR:

• Contract — certain data is needed to take your order, dispatch your products, and assist you afterwards.
• Consent — the ground we rely on for optional cookies and electronic marketing, always collected through a clear opt-in.
• Legal duty — record-keeping that tax, accounting, fraud-prevention, and other statutory rules require of us.
• Legitimate interest — refining our range and our service, defending the business against fraud and abuse, and marketing to people who already shop with us (you may object at any time).

6. How long we keep it

Personal data stays on our systems no longer than the purpose it serves requires, plus whatever period legal, accounting, or reporting rules impose. Records of orders and payments are generally kept for seven (7) years, as tax and accounting legislation demands. Marketing details are held until you object or take back your consent.

7. Who else sees your data

A small set of vetted service providers process data on our behalf: payment handling, warehousing and delivery, fraud screening, hosting, and analytics. Each acts strictly on written instructions from us and is contractually obliged to protect your information and to use it for no purpose other than the one we have specified.

8. Transfers outside Europe

As a company established in Ireland, an EU Member State, we process your data primarily inside the EEA. When a provider we use sits outside the EEA, the UK, or Switzerland — certain hosting, payment, or fulfilment partners, for instance — the transfer takes place under a safeguard recognised by GDPR Chapter V, typically the Standard Contractual Clauses adopted by the European Commission, reinforced where needed by extra technical and organisational protections.

9. Cookies

Essential cookies keep the store running. Analytics and marketing cookies are set only if you agree to them; they help us see how the site performs and let us show you relevant content. Your browser settings allow you to adjust or clear cookies whenever you like.

10. Keeping your data secure

Appropriate organisational and technical safeguards defend your data against loss, destruction, damage, and unlawful or unauthorised use. Card details travel over TLS-encrypted connections and are processed exclusively by a PCI-DSS-compliant provider.

11. Complaints to a supervisory authority

Should you consider that our handling of your data breaches the GDPR, you may complain to the data protection authority of the EU or UK Member State where you live, where you work, or where the alleged breach took place. The European Data Protection Board keeps a directory of EU authorities at edpb.europa.eu; in the United Kingdom the regulator is the Information Commissioner’s Office at ico.org.uk.

12. Revisions to this statement

This statement may be revised as our practices or the law evolve. Significant amendments will be announced on this website.

13. Getting in touch

Write to support@yourhealthyproducts.com with any question about this statement, any rights request, or any privacy concern you would like us to look into directly.