Política de privacidad

Last updated: September 3, 2026

This Privacy Policy describes how Nutra8 ("Nutra8", "we", "us" or "our") collects, uses, stores and shares personal information when you visit, use, make a purchase from, subscribe through, or otherwise interact with our website and services, including nutra8.co (collectively, the "Services").

Nutra8 is the controller of the personal information described in this Privacy Policy, except where another party, such as Shopify or a payment provider, acts as an independent controller for its own processing activities.

Our online store is powered by Shopify. Shopify provides the ecommerce infrastructure that enables us to offer our Services to you.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that your personal information may be collected, used and disclosed as described below, subject to applicable law.

Personal Information We Collect

The personal information we collect depends on how you interact with Nutra8 and may include:

• Contact information, such as your name, email address, telephone number, billing address and shipping address.
• Order and transaction information, including products ordered, order value, discounts, returns, refunds, subscription information and transaction history.
• Payment information, such as payment method and payment confirmation information. Payment card information is generally processed directly by our payment providers rather than stored by Nutra8.
• Account information, such as your customer account details, preferences and subscription settings.
• Customer support information, including information you provide when contacting us about an order, delivery, return, subscription or product.
• Device and technical information, such as IP address, browser type, device type, operating system and other technical identifiers.
• Usage information, including how you interact with our website, pages viewed, products viewed, products added to your cart and interactions with checkout.
• Marketing information, including your marketing preferences and, where permitted, information about how you interact with our advertisements, emails or promotional communications.
• Subscription information, including subscription products, delivery frequency, upcoming renewals, skipped deliveries, cancellations and other subscription preferences.

How We Collect Personal Information

We may collect personal information:

• Directly from you when you place an order, create an account, subscribe, contact customer support, submit a form or otherwise provide information to us.
• Automatically when you use our website, including through cookies, pixels, local storage and similar technologies.
• From Shopify and our service providers when they provide ecommerce, payment, fulfilment, shipping, analytics, subscription, customer support or other services on our behalf.
• From advertising and marketing partners, where permitted by applicable law and your privacy choices.

How We Use Your Personal Information

We may use personal information for the following purposes:

• Processing and fulfilling orders. To process payments, confirm orders, arrange fulfilment and shipping, provide tracking information, process returns and refunds, and provide customer service.
• Managing subscriptions. To manage recurring orders, renewals, delivery schedules, skipped deliveries, subscription changes and cancellations.
• Providing and improving our Services. To operate our website, maintain customer accounts, remember preferences, understand how customers use our Services and improve the shopping experience.
• Communicating with you. To send transactional communications about orders, deliveries, subscriptions, returns, refunds, account activity and customer support requests.
• Marketing and advertising. Where permitted by law, we may send promotional communications and use advertising technologies to measure advertising performance and show relevant advertisements.
• Analytics. To understand website traffic, customer journeys, product interest and the effectiveness of our marketing and advertising.
• Security and fraud prevention. To protect our customers, website and business, detect fraudulent or suspicious transactions and maintain the security of our Services.
• Legal and regulatory obligations. To maintain required records, comply with tax, accounting, consumer protection and other legal obligations, respond to lawful requests and establish or defend legal claims.

Lawful Bases for Processing

Where the UK GDPR, EU GDPR or similar data protection laws apply, we rely on one or more lawful bases depending on the purpose of the processing.

• Performance of a contract: when processing your information is necessary to process and deliver an order, manage your subscription, process a return or refund, or otherwise provide Services you requested.
• Legal obligation: when processing is necessary to comply with applicable tax, accounting, consumer protection, fraud prevention or other legal requirements.
• Legitimate interests: where necessary for legitimate business purposes such as improving our Services, protecting our website and business, preventing fraud, providing customer support and understanding business performance, provided those interests are not overridden by your rights and interests.
• Consent: where applicable, including for certain marketing communications, cookies, advertising technologies or other processing activities for which applicable law requires consent.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before consent was withdrawn.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags and similar technologies to operate the website, remember preferences, understand website usage, measure performance and, where permitted, support advertising and marketing.

Depending on your location, you may be able to accept, reject or manage non-essential cookies through the privacy or cookie controls provided on our website.

Your choices may affect whether certain analytics or advertising technologies are used during your visit.

Advertising and Marketing

We may work with advertising and marketing platforms to promote Nutra8 and measure the effectiveness of our advertising.

Depending on your location, consent and privacy settings, these services may receive information about interactions with our website, such as page visits, product views, cart activity or purchases, for purposes including advertising measurement, attribution and personalised advertising.

You may have the right to opt out of certain targeted advertising or data-sharing activities. Where applicable, these choices can be managed through the privacy controls or "Your Privacy Choices" functionality available on our website.

How We Share Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide the Services.

This may include sharing information with:

• Shopify, which provides our ecommerce platform and related technology.
• Payment providers, which process payments and help prevent payment fraud.
• Fulfilment and logistics providers, which prepare, dispatch and deliver customer orders.
• Shipping carriers, which require information such as your name, delivery address and contact details to deliver your order.
• Subscription service providers, where required to manage recurring orders and subscription preferences.
• Analytics and technology providers, which help us operate, secure, measure and improve our website and Services.
• Advertising and marketing partners, where permitted by applicable law and subject to your available privacy choices.
• Professional advisers and authorities, where necessary to comply with law, enforce our rights, prevent fraud or respond to lawful requests.

We may also disclose information as part of a merger, acquisition, restructuring, financing, sale of assets or similar business transaction, subject to applicable law.

Relationship With Shopify

Our store is hosted by Shopify. Shopify collects and processes personal information about your access to and use of our Services in order to provide its ecommerce services and related functionality.

Information submitted through our store may therefore be processed by Shopify and its service providers in countries other than the country where you live.

Shopify may also process certain information as an independent controller for its own purposes. You can learn more through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Shopify Consumer Privacy Policy

Shopify Privacy Portal

Third-Party Websites and Services

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy, security or content practices of websites or services that we do not control.

We encourage you to review the privacy policies of third parties before providing personal information to them.

How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain appropriate business and transaction records, comply with legal and tax obligations, resolve disputes, prevent fraud and enforce our agreements.

The appropriate retention period depends on the type of information and why it was collected.

• Order and transaction records may be retained for the period required by applicable tax, accounting and consumer protection laws.
• Customer account information may be retained while an account remains active and for an appropriate period afterwards.
• Subscription information may be retained while the subscription is active and afterwards where necessary for transaction records, customer service or legal compliance.
• Customer support correspondence may be retained for as long as reasonably necessary to resolve enquiries, maintain service records or protect legal rights.
• Marketing information may be retained until you unsubscribe, withdraw consent where applicable, or we no longer require the information for the relevant marketing purpose.
• Technical, analytics and security data may be retained for periods reasonably necessary for analytics, security, fraud prevention and service improvement.

When personal information is no longer required, we may delete, anonymise or otherwise securely dispose of it, subject to applicable law.

International Transfers

Nutra8 operates an international ecommerce business. Our service providers may process personal information in countries different from the country where you live.

Where personal information is transferred from the European Economic Area, United Kingdom or another jurisdiction that restricts international transfers, we take appropriate steps required by applicable law.

Where required, these safeguards may include adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or other legally recognised transfer mechanisms.

Security

We use reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure.

Please do not send passwords, payment card numbers or other highly sensitive information through unsecured communication channels.

Children's Privacy

Our Services are not intended for children, and we do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete the information.

Your Privacy Rights

Depending on where you live, you may have rights concerning your personal information. These rights may include:

• Access: requesting information about personal information we hold about you.
• Correction: requesting correction of inaccurate or incomplete personal information.
• Deletion: requesting deletion of personal information in circumstances where applicable law provides this right.
• Restriction: requesting that certain processing of your personal information be restricted.
• Objection: objecting to certain processing, including certain processing based on legitimate interests or direct marketing.
• Data portability: receiving certain personal information in a structured, commonly used and machine-readable format where applicable.
• Withdrawal of consent: withdrawing consent where consent is the basis for processing.
• Marketing opt-out: unsubscribing from promotional emails through the unsubscribe link contained in our marketing emails.
• Targeted advertising choices: where applicable, opting out of certain uses or disclosures of personal information for targeted advertising.

These rights are not absolute and may be subject to exceptions under applicable law.

We may need to verify your identity before processing a privacy request.

We will not discriminate against you for exercising privacy rights provided by applicable law.

European Economic Area and United Kingdom

If you are located in the European Economic Area or United Kingdom, you may have rights under the EU GDPR, UK GDPR and applicable national data protection laws.

In addition to the rights described above, you may have the right to object to processing based on legitimate interests, request restriction of processing and lodge a complaint with your local data protection authority.

You may find information about European data protection authorities through the European Data Protection Board:

European Data Protection Authorities

UK residents may contact the Information Commissioner's Office where applicable.

United States Privacy Rights

Depending on the state where you reside, applicable US privacy laws may provide additional rights regarding your personal information, including rights to access, correct or delete information and, in certain circumstances, opt out of targeted advertising, sale or sharing of personal information.

Where applicable, you may exercise advertising or data-sharing choices through the "Your Privacy Choices" or data-sharing opt-out functionality provided on our website.

We may honour recognised browser-based privacy preference signals, such as Global Privacy Control, where required by applicable law and supported by our ecommerce platform.

Automated Processing

We may use automated technologies for purposes such as fraud detection, analytics, product recommendations and advertising optimisation.

Nutra8 does not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on customers unless permitted by applicable law and appropriate safeguards are provided.

Communications and Marketing Preferences

You may unsubscribe from promotional email communications at any time by using the unsubscribe link contained in those emails.

Even if you unsubscribe from marketing communications, we may continue to send non-promotional communications that are necessary to provide our Services, such as order confirmations, delivery information, subscription notices, security messages and customer service responses.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology or legal requirements.

When we update this Privacy Policy, we will update the "Last updated" date above and provide any additional notice required by applicable law.

Contact Nutra8

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise a privacy right, please contact:

Nutra8
Email: support@nutra8.co
Website: https://nutra8.co

Please include enough information for us to understand your request. We may ask for additional information where reasonably necessary to verify your identity or locate the relevant records.