Privacy Policy

1. Who we are

Mintflow Nutrition ("we", "us") is the data controller responsible for personal data collected through this site. For any privacy question or to exercise your rights, contact us at privacy@mintflownutrition.com.

2. What we collect

• Email address — when you subscribe to our newsletter, request a free guide, or join a waitlist. We also record the date and the source of your sign-up.
• Order & payment details — if you buy an ebook (card details are processed directly by our payment provider; we do not see or store your full card number).
• Anonymous usage analytics — aggregated, cookie-free statistics about how the site is used.

3. Why we use it, and our lawful basis

• To send the content or product you asked for — lawful basis: performance of a contract / your request.
• To send marketing emails (newsletter, tips, launches) — lawful basis: your consent, which you can withdraw at any time.
• To operate, secure, and improve the site — lawful basis: our legitimate interests in running a functional, safe service.
• To meet legal and accounting obligations (e.g. for purchases) — lawful basis: legal obligation.

4. Who we share it with

We use trusted service providers ("processors") who handle data only on our instructions, under data processing agreements:

• Supabase — database & storage (hosted in the EU).
• Vercel — website hosting & cookie-free analytics.
• Resend — sending emails (once enabled).
• Stripe — payment processing (once enabled).

We never sell your personal data.

5. International transfers

Your data is primarily stored in the EU. Some providers (e.g. Vercel, Stripe) may process data outside the EU/UK; where they do, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses and the UK's International Data Transfer Agreement.

6. How long we keep it

We keep newsletter and lead emails until you unsubscribe or ask us to delete them, after which they are removed within [30] days. Order records are kept for as long as required by Romanian tax law (typically [10] years).

7. Your rights

Under the EU GDPR and UK GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). To exercise any of these, email privacy@mintflownutrition.com.

You also have the right to lodge a complaint with a supervisory authority — in the EU, the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) (https://www.dataprotection.ro/); in the UK, the UK Information Commissioner's Office (ICO) (https://ico.org.uk/).

8. Cookies & analytics

We aim to keep this site cookie-light. We currently use only essential cookies needed for the site to function, and our analytics (Vercel) are cookie-free and do not track you across sites. If we later add services that set non-essential cookies (for example payment or advertising tools), we will ask for your consent first via a cookie banner.

9. Marketing emails

You only receive marketing emails if you opted in. Every email includes a one-click unsubscribe link, and you can opt out at any time with no effect on any purchase.

10. Changes

We may update this policy; we'll revise the date above and, for material changes, notify subscribers by email.