Privacy Policy

Who we are

Our website address is: https://www.healthandwellbeingnews.com.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us using the information below: Contact form

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We use analytics services to better understand how users interact with our website and to improve the overall user experience. The data collected through these services help us track website traffic, user behavior, and trends.

Services We Use:

• Google Analytics: We use Google Analytics to collect information about website usage, such as pages viewed, session duration, and user interactions. Google Analytics uses cookies to collect anonymous data. The information collected is transmitted to Google and stored on servers in the United States. You can learn more about how Google Analytics collects and processes data by visiting Google’s Privacy Policy and can opt out by using the Google Analytics Opt-out Browser Add-on.

• Other Analytics Tools: We may use additional third-party tools to analyze how our site is used. These tools may also employ cookies or similar technologies to track and collect data, but this data is anonymized and aggregated to ensure user privacy.

What We Track:

• Pages visited and time spent on each page.
• Geographical location based on your IP address (anonymized).
• Referral sources, such as the website or search engine that directed you to our page.
• Interactions with content, such as buttons clicked or forms submitted.

Why We Collect This Data:

• To optimize site performance and ensure our content meets user needs.
• To measure the effectiveness of our marketing campaigns.
• To understand audience demographics and tailor the user experience accordingly.

Affiliate Disclosure

Some of the links on this website are affiliate links, including links to iHerb. This means that if you make a purchase through these links, we may earn a small commission at no additional cost to you. We only recommend products that we believe will be helpful to our readers and relevant to the content we provide. Your support through these purchases helps us maintain and improve the website.

Thank you for your support!

Who we share your data with

We do not sell your personal data to third parties. However, we may share data with trusted third-party partners and service providers to support the operation of our website and business, as described below:

1. Service Providers: We share data with service providers who help us run our website, such as web hosting services, payment processors, customer support tools, and marketing platforms. These providers only have access to the personal data necessary to perform their functions and are bound by confidentiality agreements.

   • Web Hosting Services: Our website data, including user interactions and collected data, is stored on secure servers provided by third-party web hosting services.
   • Payment Processors: When you make a purchase, your payment details are processed by third-party providers like Stripe or PayPal. These processors comply with stringent security standards, including PCI-DSS, to safeguard your payment information.

2. Analytics and Advertising Partners: As mentioned in the analytics section, we work with companies like Google Analytics and other partners to gather and analyze website usage data. These companies may collect information through cookies, but the data is anonymized and used only for performance tracking and optimization.

3. Legal Compliance and Security: In rare cases, we may disclose your personal data to comply with legal obligations, such as responding to court orders or law enforcement requests. We may also share information if it is necessary to protect the rights, property, or safety of our company, employees, or users.

4. Business Transfers: If our company undergoes a merger, acquisition, or sale of assets, your data may be transferred to the acquiring company. In such cases, we will ensure that the new entity honors the privacy commitments made under this policy.

Third-Party Links and Services

Our website may contain links to third-party websites, plug-ins, or applications. Clicking on these links may allow third parties to collect or share data about you. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy policies when visiting their sites.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Additional Information

Our website is committed to maintaining the security and privacy of your personal data. In this section, we provide detailed information on how we handle, protect, and manage your personal data in compliance with applicable data protection regulations.

How We Protect Your Data

We take multiple measures to ensure the security of your personal data, including but not limited to:

• Encryption: All sensitive data, such as payment information, is encrypted during transmission using Secure Socket Layer (SSL) technology.
• Access Controls: Only authorized personnel have access to personal data, and this access is restricted by role-based permissions.
• Security Audits: Regular security audits are conducted to ensure that all data protection measures are up-to-date and effective.
• Data Anonymization: Where possible, we anonymize data to reduce the risk of exposure.
• Two-Factor Authentication: For internal systems, we require two-factor authentication (2FA) to limit unauthorized access.

What Data Breach Procedures We Have in Place

In the event of a data breach, we have the following procedures in place:

1. Incident Detection: Our security systems continuously monitor for signs of a breach, including unauthorized access or data anomalies.
2. Immediate Response: Upon detection of a breach, our incident response team initiates an immediate investigation to determine the scope and impact.
3. User Notification: If your personal data is compromised, we will notify you within 72 hours of discovering the breach, in accordance with applicable data protection laws.
4. Mitigation Efforts: We will take immediate steps to limit the impact of the breach, which may include blocking unauthorized access, updating security protocols, and advising you on how to protect your information.
5. Reporting: In compliance with legal obligations, we will report significant breaches to relevant data protection authorities.

What Third Parties We Receive Data From

We may receive personal data from third-party sources, which we use to improve our services and user experience. These include:

• Analytics Providers: We work with companies such as Google Analytics to gather data on how users interact with our site, helping us improve site performance and content delivery.
• Advertising Partners: Information on user preferences and behavior may be shared by advertising platforms to help us deliver more relevant ads to our audience.
• Payment Processors: We receive data from payment processors like Stripe or PayPal to confirm and process transactions securely.
• Social Media Platforms: If you log in via social media or share content, these platforms may provide us with certain personal data, such as your name, email, and profile information.

What Automated Decision Making and/or Profiling We Do with User Data

We use automated decision-making processes and profiling to enhance the user experience and improve our services, including:

• Personalized Content: We may analyze your browsing behavior and past interactions to recommend personalized content or services that match your preferences.
• Targeted Advertising: Based on your activity on our website, we may use automated systems to deliver ads tailored to your interests. This process involves profiling but does not have a significant legal impact on users.
• Fraud Detection: Our systems automatically analyze payment and login data to detect and prevent fraudulent activities.

Industry Regulatory Disclosure Requirements

We are required to disclose certain information under specific circumstances to comply with industry regulations, including:

• Law Enforcement Requests: If requested by law enforcement or government agencies and required by law, we may disclose personal information to comply with legal obligations.
• Data Protection Authorities: In the event of a significant data breach or other data protection issues, we are required to inform relevant authorities, such as the Federal Trade Commission (FTC) in the U.S. or the Information Commissioner’s Office (ICO) in the U.K.
• Financial Reporting Requirements: For compliance with financial regulations, we may be required to disclose transactional data as part of audits or legal processes.

Our website operates globally, and we adhere to data protection laws and regulations across various regions. This includes the General Data Protection Regulation (GDPR) for the European Union, California Consumer Privacy Act (CCPA) for California residents, and other data protection laws applicable to different regions.

General Data Protection Regulation (GDPR) – EU/EEA Residents

For users within the European Union (EU) and European Economic Area (EEA), we comply with the GDPR and provide the following rights regarding your personal data:

• Right to Access: You have the right to request access to your personal data stored by us and understand how it is processed.
• Right to Rectification: You may ask us to correct any inaccuracies in your personal data.
• Right to Erasure: Under certain circumstances, you can request that we delete your personal data.
• Right to Restrict Processing: You have the right to restrict the processing of your personal data in specific situations.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes.

To exercise any of these rights, please contact us at info@healthandwellbeingnews.com. We will respond to your request within one month, as required by the GDPR.

Legal Basis for Processing Personal Data:

• Consent: We may process your data when you have given explicit consent, such as when you sign up for newsletters.
• Contractual Necessity: Processing may be necessary to fulfill a contract with you, such as delivering services.
• Legitimate Interests: In some cases, we may process data for legitimate interests, such as improving site functionality or offering tailored content, unless those interests are overridden by your data protection rights.

California Consumer Privacy Act (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know: You can request that we disclose what personal data we collect, use, or sell, and for what purposes.
• Right to Delete: You can request the deletion of your personal data.
• Right to Opt-Out: You can opt-out of the sale of your personal data to third parties. We do not sell your personal data to third parties for monetary gain, but if we engage in activities that could be considered a “sale” under the CCPA, you have the right to opt-out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights under the CCPA.

To exercise your CCPA rights, contact us at [Your Contact Email] or use our designated request form. We will verify your identity before fulfilling your request.

Health Data and Sensitive Information

Given the nature of our health and wellbeing services, some of the personal data we collect may be considered sensitive information under data protection laws, such as:

• Health and medical information,
• Biometric data,
• Information about dietary preferences, exercise routines, and wellness goals.

When handling sensitive information, we take extra precautions to ensure your data is securely processed and stored. We will only collect and process such data with your explicit consent, where required by law, or if necessary to provide you with personalized services.

We encourage you to avoid sharing excessive sensitive information in public areas of our website (such as forums, comment sections, etc.), as this data may be accessible to other users.

Legal Basis for Processing Personal Data (GDPR)

Under the GDPR, we must have a valid legal basis to process your personal data. Depending on the nature of our interaction with you, we process your personal data based on one or more of the following legal grounds:

• Consent: When you provide clear consent for us to process your personal data for a specific purpose (e.g., subscribing to our newsletter or signing up for wellness programs).
• Contract: When processing is necessary to fulfill a contract with you (e.g., providing a service you have requested).
• Legitimate Interests: When processing is in our legitimate business interests and not overridden by your data protection rights (e.g., analyzing how users interact with our site to improve user experience).
• Legal Obligation: When we are required to process your data to comply with legal obligations (e.g., maintaining transaction records for tax compliance).
• Vital Interests: When processing is necessary to protect your vital interests or those of another person (e.g., in the case of a medical emergency).

Retention of Personal Data

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including to comply with legal, accounting, or reporting requirements. In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, as well as the potential risk of harm from unauthorized use or disclosure of your data.

Children’s Privacy

Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 13 without parental consent, we will take steps to delete that information as soon as possible.

If you believe that we may have collected personal data from a child under 13, please contact us immediately at [Your Contact Email].

Affiliate Links

To enhance the user experience and offer valuable recommendations, we may include affiliate links on certain pages of our website. These affiliate links allow us to earn a commission when you make a purchase through the link, at no additional cost to you. We only recommend products and services that we believe will benefit our users, and we disclose when affiliate links are used. Your trust is important to us, and we remain transparent about any affiliations that may influence our recommendations.