Privacy Policy

1. Scope

This Privacy Policy applies to the Wellfit4u storefront, checkout, customer account area, subscription management features, order-confirmation pages, customer-service flows, marketing communications, and related transactional emails. In this document, "Wellfit", "we", "our", or "us" refers to the operator of this store.

2. What we collect

We collect and process various categories of information depending on how you interact with our site. This may include:

• Account and contact data: first name, last name, email address, phone number, and account status.
• Order and subscription data: order number, subscription number, delivery city and provider, shipping address, invoice number, payment status, fulfillment status, and shipment history.
• Payment metadata: Stripe payment intent identifiers, payment status, and limited billing metadata required to reconcile the payment to the order. We do not store full payment card numbers or CVC codes on our servers.
• Verification and security data: email-verification codes, password-reset flows, account lifecycle labels, support logs, and important admin-side audit records.
• Technical and browser-side data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, language preference, cookie-consent choice, and persistent account-session storage.
• Analytics and behavioral data: pages visited, visit timestamps, session duration, click and scroll behavior, navigation paths, search queries, product views, cart interactions, checkout progress and abandonment points, conversion events, and feature engagement metrics.
• Engagement and interaction data: email open rates, link click-through rates, newsletter engagement, promotional offer interactions, and re-engagement activity.
• Geographic data: approximate geographic location derived from IP address, selected delivery city, and shipping address region.

3. Why we use this data

We use the collected data for the following purposes:

• To process one-time purchases and prepaid subscriptions.
• To create, verify, and manage customer accounts, including accounts created automatically after a completed purchase.
• To calculate delivery pricing, assign delivery options, and manage subscription shipment timing.
• To generate and send transactional emails, including verification codes, password-reset links, order confirmations, and PDF invoices or receipts.
• To connect payments to the correct customer record, order, or subscription.
• To investigate fraud, protect checkout and account flows, and monitor critical admin actions.
• To maintain, secure, and improve the website and store infrastructure.
• To measure and analyze website performance: tracking page load times, error rates, feature usage, and overall site health to improve reliability and user experience.
• To understand user behavior and engagement: analyzing how visitors navigate the site, which content they interact with, where they spend time, and where they drop off, to inform design and content improvements.
• To generate business intelligence: producing aggregate statistics, conversion reports, cohort analyses, and trend data that guide product development, pricing, and inventory decisions.
• To personalize user experience: tailoring product recommendations, content display, promotional messaging, and UI elements based on browsing history, purchase patterns, and inferred preferences.
• To conduct marketing and outreach: sending newsletters, promotional offers, product updates, re-engagement campaigns, and targeted communications based on customer segments and behavioral data.
• To optimize marketing effectiveness: measuring campaign performance, conducting A/B tests, analyzing conversion funnels, and refining targeting criteria to improve the relevance and efficiency of our marketing efforts.
• To build audience segments: grouping customers by purchase history, engagement level, geographic region, or other attributes for the purpose of targeted content, offers, and communications.

4. Legal basis for processing

Depending on your jurisdiction, we process your data based on one or more of the following legal bases:

• Contract performance: processing necessary to fulfill your order, manage your subscription, or operate your account.
• Legitimate interest: processing for analytics, site improvement, fraud prevention, marketing optimization, and business intelligence where our interests do not override your fundamental rights.
• Consent: where required by law, such as for marketing emails or non-essential cookies. You may withdraw consent at any time.
• Legal obligation: processing required by tax, accounting, or regulatory requirements.

5. Services and processors

We use third-party services to operate the store and improve our offerings. Those services may process personal data for their part of the service:

• Stripe: payment processing, payment authentication, hosted payment fields, fraud detection, and payment-event reconciliation.
• Supabase: customer authentication, database storage, account records, order data, and subscription data.
• Resend: transactional and marketing email delivery, including verification, order, newsletter, and promotional emails.
• Analytics and monitoring tools: website analytics, performance monitoring, error tracking, and user behavior analysis to improve site quality and inform business decisions.
• Hosting and infrastructure: cloud hosting, content delivery, site availability monitoring, and delivery-option data required to fulfill orders.
• Marketing and advertising platforms: we may share anonymized or aggregated data with advertising platforms for audience modeling, lookalike targeting, and advertising optimization.

6. Browser storage, cookies, and tracking technologies

The site uses cookies, browser storage, pixels, and similar technologies for essential functionality, analytics, and marketing purposes. This includes keeping your cookie-consent choice, language preference, account session, checkout state, and analytics identifiers. A detailed breakdown appears in our Cookie Policy.

7. Account creation and verification

You can create an account manually or have one created automatically after a qualifying purchase. New accounts may start in an unverified state until the email-verification step is completed. Purchase-linked accounts may also receive generated credentials by email so the order can be attached to the correct customer profile.

8. Payment security

Card entry is handled through Stripe-hosted payment components. We do not intentionally capture or store full card numbers or CVC codes ourselves. Our systems keep only the metadata needed to confirm that a payment succeeded, issue an invoice, and display the order in your customer account or the admin system.

9. Marketing communications

By providing your email address during checkout, account creation, or newsletter signup, you may receive marketing communications from us, including product updates, promotional offers, personalized recommendations, and re-engagement emails. These communications may be personalized based on your purchase history, browsing behavior, and engagement patterns. You can unsubscribe from marketing emails at any time using the unsubscribe link in each email or by contacting us directly. Unsubscribing from marketing emails does not affect transactional communications related to your orders or account.

10. Data sharing and disclosure

We do not sell your personal data to third parties. We may share data with:

• Service providers and processors who assist in operating the store, as described in section 5.
• Advertising platforms in anonymized or aggregated form for marketing optimization.
• Legal authorities when required by law, regulation, or valid legal process.
• Business successors in the event of a merger, acquisition, or asset sale, with appropriate data protection safeguards.

11. How long we keep data

We keep personal data only for as long as it is reasonably needed to operate the store, support customer accounts, fulfill or document orders, manage subscriptions, conduct analytics, support marketing programs, handle disputes, comply with accounting or legal obligations, and protect the service against abuse. Analytics and aggregate statistical data may be retained indefinitely in anonymized form. Different categories of data may be retained for different periods.

12. Your choices and rights

Depending on the laws that apply to you, you may have rights to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention requirements.
• Request restriction or objection to certain processing activities.
• Request data portability in a machine-readable format.
• Withdraw consent for processing based on consent at any time.
• Opt out of marketing communications.
• Opt out of certain analytics and tracking through cookie settings or browser controls.

To exercise any of these rights, contact us at the email address below. We will respond within the timeframe required by applicable law.

13. International transfers

Some of the processors we use may handle data in countries outside your own. Where that happens, we rely on the safeguards offered by those processors and limit disclosure to what is reasonably required to run the storefront, checkout, account, analytics, marketing, and transactional-email systems.

14. Children

This site is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Changes take effect upon posting to the site. We encourage you to review this policy periodically.

16. Contact

If you have a privacy request or question about how data is used in the Wellfit store, contact us at info@wellfit4you.com.