Effective Date: November 23, 2025
Last Updated: November 23, 2025
Your Privacy Matters
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information We Collect
1.1 Information You Provide Directly
We may collect personal information that you voluntarily provide when you:
- Use our Metabolic Calculator (age, weight, height, sex, activity level)
- Opt-in to SMS notifications (phone number, name)
- Submit testimonials (name, email, experience)
- Contact us via email or forms
- Join our Facebook community (via Facebook's platform, not directly collected by us)
Legal Basis: Consent (Article 6(1)(a) UK GDPR) - You explicitly agree to provide this information
1.2 Information Collected Automatically
When you visit our website, we automatically collect certain information about your device and browsing activity:
- Log Data: IP address, browser type, operating system, referring URLs, pages viewed, time spent on pages
- Cookies and Tracking Technologies: We use cookies to enhance your experience (see Section 3 below)
- Analytics Data: Via Google Analytics (anonymized data about user behavior, demographics, interests)
Legal Basis: Legitimate interests (Article 6(1)(f) UK GDPR) - To improve website functionality and user experience
1.3 Information We Do NOT Collect
We do NOT collect:
- Medical records or detailed health information beyond calculator inputs
- Financial information (all purchases are processed through Amazon)
- Sensitive personal data (race, religion, political opinions, etc.)
2. How We Use Your Information
We use collected information for the following purposes:
2.1 To Provide Services
- Calculate personalized metabolic data (BMR, TDEE, weight loss projections)
- Store calculator results temporarily in your browser (localStorage)
- Recommend appropriate supplements based on your inputs
2.2 To Communicate With You
- Send daily motivational SMS messages (if you opt-in via Twilio)
- Respond to your inquiries and support requests
- Provide updates about the protocol or community (with consent)
2.3 To Improve Our Website
- Analyze user behavior to optimize content and functionality
- Monitor website performance and fix technical issues
- Conduct A/B testing for improved user experience
2.4 For Legal Compliance
- Comply with UK advertising regulations (ASA, DMCC Act)
- Respond to legal requests or prevent fraud
- Enforce our terms and conditions
3. Cookies and Tracking Technologies
3.1 What Are Cookies?
Cookies are small text files stored on your device that help websites remember your preferences and track activity. We use both session cookies (deleted when you close your browser) and persistent cookies (remain until deleted or expired).
3.2 Types of Cookies We Use
Strictly Necessary Cookies (Always Active)
Essential for website functionality. Cannot be disabled.
cookieConsent - Stores your cookie preference (Accept/Decline)fastingCart - Stores shopping cart items locallycalculatorResults - Stores your metabolic calculator results
Analytics Cookies (Optional - Requires Consent)
Help us understand how visitors interact with our website.
- Google Analytics:
_ga, _gid, _gat - Track user behavior, session duration, bounce rate
- Data Anonymization: IP addresses are anonymized before processing
Third-Party Cookies
Set by external services we integrate:
- Amazon Associates: Track affiliate referrals (managed by Amazon)
- Tidio Chat Widget: Enable live chat functionality (if active)
- Facebook Pixel: Not currently used, but may be added for community integration
3.3 Managing Cookies
You have full control over cookies:
- Cookie Consent Banner: Accept or decline optional cookies when you first visit
- Browser Settings: Configure your browser to block or delete cookies (may affect functionality)
- Opt-Out Tools: Use Google Analytics Opt-out Browser Add-on
4. Third-Party Services and Data Sharing
4.1 Amazon Associates Programme
- Purpose: Affiliate tracking for product recommendations
- Data Shared: Referral information (which link you clicked)
- Privacy Policy: Amazon UK Privacy Notice
4.2 Google Analytics
- Purpose: Website traffic analysis and user behavior insights
- Data Shared: Anonymized browsing data, demographics, device info
- Data Retention: 26 months (automatically deleted after)
- Privacy Policy: Google Privacy Policy
4.3 Tidio (Chat Widget) - If Active
- Purpose: Live chat support and AI-powered assistance
- Data Shared: Chat messages, email (if you provide), browsing context
- Privacy Policy: Tidio Privacy Policy
4.4 Twilio (SMS Service) - If Active
- Purpose: Daily motivational SMS messages (opt-in only)
- Data Shared: Phone number, name, fast start date
- Privacy Policy: Twilio Privacy Policy
4.5 Data Sharing with Third Parties
We do NOT sell your personal data. We only share data with:
- Service providers (as listed above) necessary to operate the website
- Legal authorities if required by law
- Professional advisors (accountants, lawyers) under confidentiality agreements
5. Data Retention
We retain your personal data only as long as necessary:
- Calculator Data: Stored locally in your browser (you can clear anytime)
- SMS Opt-in Data: Until you unsubscribe or 12 months of inactivity
- Testimonials: Indefinitely (with your consent) unless you request removal
- Analytics Data: 26 months (Google Analytics auto-deletion)
- Contact Inquiries: 2 years from last contact
6. Your Rights Under UK GDPR
As a UK resident, you have the following rights:
6.1 Right to Access (Article 15)
Request a copy of all personal data we hold about you
6.2 Right to Rectification (Article 16)
Correct inaccurate or incomplete personal data
6.3 Right to Erasure / "Right to be Forgotten" (Article 17)
Request deletion of your personal data (subject to legal obligations)
6.4 Right to Restrict Processing (Article 18)
Limit how we use your data in certain circumstances
6.5 Right to Data Portability (Article 20)
Receive your data in a structured, machine-readable format
6.6 Right to Object (Article 21)
Object to processing based on legitimate interests or direct marketing
6.7 Right to Withdraw Consent (Article 7)
Withdraw consent for SMS messages, testimonials, or analytics tracking anytime
6.8 Right to Lodge a Complaint
File a complaint with the UK Information Commissioner's Office (ICO):
Website: https://ico.org.uk
Helpline: 0303 123 1113
How to Exercise Your Rights
To exercise any of these rights, contact us at:
Email: privacy@himalayanechoes.com (placeholder - update when active)
Response Time: We will respond within 30 days as required by UK GDPR
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption: HTTPS/SSL encryption for all data transmission
- Secure Hosting: Website hosted on secure servers with regular backups
- Access Controls: Limited access to personal data (need-to-know basis)
- Regular Audits: Security reviews and vulnerability assessments
Important: No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Children's Privacy
This website is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. Extended fasting is contraindicated for anyone under 18 (see Contraindications).
If we become aware that we have collected data from a child under 18, we will delete it immediately.
9. International Data Transfers
Your data may be transferred to and processed in countries outside the UK (e.g., USA for Google Analytics, Twilio). We ensure adequate safeguards are in place:
- Standard Contractual Clauses: EU-approved data transfer mechanisms
- Privacy Shield (where applicable): US companies certified under EU-US frameworks
- Service Provider Agreements: Contractual obligations to protect your data
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on this page with a new "Last Updated" date
- Notify you via prominent website banner if changes are material
- Request fresh consent for processing if required by law
Your continued use of the website after changes constitutes acceptance of the updated policy.
11. Contact Information
For questions, concerns, or to exercise your data protection rights, contact us:
Data Controller: Himalayan Echoes Wellness Ecosystem
Email: privacy@himalayanechoes.com (placeholder - update when active)
Compliance Officer: [Name to be added]
Address: [Physical address to be added for GDPR compliance]
12. Consent Withdrawal
SMS Messages: Text "STOP" to unsubscribe instantly
Analytics Cookies: Use cookie consent banner or browser settings
Testimonials: Email us to request removal
Summary: Your Data, Your Control
We collect minimal data, use it transparently, protect it seriously, and respect your rights completely. You can access, correct, delete, or export your data at any time. We never sell your information.
Last Updated: November 23, 2025
Effective Date: November 23, 2025
Version: 1.0
Contact: support@himalayanechoes.com
