Privacy Policy

1. Introduction

Herbalwhmobility ("we," "us," "our," or "Company") respects your privacy and is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR), Norwegian privacy laws, and other applicable international privacy regulations. This Privacy Policy explains how we collect, use, process, store, and protect your personal information when you visit our website (herbalwhmobility.world) and use our coaching services.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We collect personal data in several ways:

3.1 Information You Provide Directly

When you submit our contact form or engage with our coaching services, we collect:

• Full name
• Email address
• Phone number (optional)
• Message content
• Health and lifestyle information shared during coaching (only when you explicitly provide it)
• Dietary preferences and goals
• Any other information you voluntarily provide

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website URL
• Geographic location (approximate, based on IP address)
• Cookies and similar tracking technologies

3.3 Third-Party Information

We do not purchase or receive personal data about you from third parties. All information we hold about you comes either from your direct submission or from automatic collection during your website visit.

4. Purposes of Data Processing

We process your personal data for the following lawful purposes:

4.1 Service Provision

• To respond to your contact form submissions and inquiries
• To provide personal coaching services and guidance
• To schedule consultations and coaching sessions
• To deliver educational materials and resources
• To track progress within coaching programs

4.2 Communication

• To send you confirmations of your submissions
• To maintain ongoing communication regarding your coaching
• To send appointment reminders and follow-ups
• To respond to your questions or requests

4.3 Business Operations

• To maintain records of our coaching relationships and interactions
• To comply with legal and regulatory obligations
• To prevent fraud and ensure security of our services
• To improve our website functionality and user experience

4.4 Website Analytics

• To analyze how users interact with our website
• To identify and fix technical issues
• To understand user preferences and behavior patterns
• To optimize site performance and load times

4.5 Marketing (with Consent)

If you consent, we may use your email address to send you information about our services, updates, or related resources. You can withdraw this consent at any time.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract Performance (Article 6(1)(b)): Processing necessary to provide coaching services you've requested
• Legal Obligation (Article 6(1)(c)): Processing required by Norwegian and international laws
• Consent (Article 6(1)(a)): Where you've explicitly consented to processing (e.g., marketing communications)
• Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate business interests (e.g., website security, fraud prevention)

6. Data Retention

We retain your personal data only as long as necessary for the purposes stated in this policy:

• Contact Form Data: Retained for 2 years from the date of submission or until you request deletion
• Coaching Client Data: Retained for the duration of the coaching relationship plus 3 years for legal and accounting purposes
• Website Analytics Data: Retained for up to 24 months
• Marketing Consent Records: Retained until you withdraw consent or for 2 years, whichever is earlier

After the retention period expires, we securely delete or anonymize your data, except where longer retention is required by law.

7. Data Sharing and Transfer

7.1 No Sharing with Third Parties

We do not sell, trade, rent, or share your personal data with third parties for marketing purposes. Your data is treated as confidential and is not shared except as required by law or with your explicit consent.

7.2 Service Providers

We may engage limited third-party service providers who assist us in operating our website and delivering services. These providers are contractually obligated to:

• Process data only on our instructions
• Maintain confidentiality and security
• Comply with GDPR and applicable laws
• Not use data for their own purposes

7.3 Legal Requirements

We may disclose your personal data if required by law, court order, government request, or when necessary to protect our legal rights or the safety of others.

7.4 International Transfers

Your data is primarily stored in Norway and the European Economic Area. If any transfers occur outside the EEA, we ensure appropriate safeguards including Standard Contractual Clauses or your explicit consent.

8. Data Security

We implement comprehensive technical, organizational, and administrative security measures to protect your personal data:

• Encryption of data in transit using HTTPS (SSL/TLS protocols)
• Secure storage with encryption at rest where applicable
• Limited access to personal data (restricted to authorized personnel only)
• Regular security assessments and updates
• Firewalls and intrusion detection systems
• Employee training on data protection and privacy practices
• Incident response procedures for potential data breaches

While we maintain strict security measures, no system is completely impervious to breaches. We cannot guarantee absolute security but commit to protecting your data to the highest practical standard.

9. Your Privacy Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you in a structured, commonly-used, and machine-readable format.

9.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data, subject to certain legal exceptions (e.g., when data is needed for legal obligations or legitimate business purposes).

9.4 Right to Restrict Processing

You can request that we limit how we use your data while a request is being processed or disputes are resolved.

9.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another controller, where technically feasible.

9.6 Right to Object

You can object to processing based on legitimate interests or direct marketing purposes.

9.7 Rights Related to Automated Decision-Making

You have rights regarding decisions made solely through automated means that significantly affect you.

9.8 Right to Withdraw Consent

If processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights: Contact us at assist@herbalwhmobility.world with "Data Subject Request" in the subject line. We will respond within 30 days (or up to 90 days for complex requests).

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. See our Cookie Policy for detailed information about:

• Types of cookies we use
• Their purposes and duration
• How to manage cookie preferences
• Third-party analytics and tracking

11. Children's Privacy

Our website and services are not intended for individuals under 18 years old. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will promptly delete it. If you believe we have collected data from a child, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to review their privacy policies before providing any personal information.

13. Disclaimer

This website provides general educational information about food coaching and nutritional guidance. It is not intended to replace professional medical, nutritional, or mental health advice. Always consult qualified healthcare providers for medical concerns. We do not diagnose, treat, or manage medical conditions.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending a notification email for material changes

Your continued use of the website after changes constitute your acceptance of the updated Privacy Policy.

15. Data Protection Officer and Supervisory Authority

If you have concerns about our data processing practices, you have the right to lodge a complaint with your local data protection authority:

Norwegian Data Protection Authority (Datatilsynet): www.datatilsynet.no

16. Contact Us

For any questions about this Privacy Policy or our privacy practices, please contact us: