Personal data we collect
At Solea we collect personal information that you provide directly when you use our services, register on our website, place an order, or contact us. Data we may collect includes:
- Identity data: first name, last name, date of birth.
- Contact data: email address, phone number, postal address.
- Account data: username, password (stored in encrypted form).
- Transaction data: information about products or services purchased, order history, payment data (processed securely by our payment provider).
- Technical data: IP address, browser and device type, operating system, language settings, pages visited, and visit duration.
- Health-related data: dietary information, food allergies or intolerances, and nutrition goals that you voluntarily provide to personalise our services.
Why we need your data
We process your personal data for the following purposes:
- Providing the service: to create and manage your account, process orders, prepare personalised nutrition plans, and provide customer support.
- Communication: to send information about your order, respond to enquiries, and—with your consent—send marketing about our products and services.
- Improving the service: to analyse use of our website, improve user experience, develop new products, and detect technical issues.
- Legal compliance: to meet legal, tax, and accounting obligations.
Sharing information
We do not sell, rent, or trade your personal data to third parties for marketing. We only share your information with:
- Service providers: companies that help us run our business (payment processing, shipping, hosting, analytics), bound by confidentiality obligations.
- Public authorities: when required by applicable law or a court order.
- Business partners: only with your prior explicit consent.
Data retention
We keep your personal data only as long as necessary for the purposes for which it was collected, including statutory retention periods. Criteria used to determine retention include:
- The duration of our contractual relationship with you.
- Legal retention obligations (for example, tax and accounting rules).
- Whether pending claims require data to be kept.
When data is no longer needed, it is securely deleted or anonymised.
Transfers outside the EU
If we need to transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards under the General Data Protection Regulation (GDPR), such as:
- Standard contractual clauses approved by the European Commission.
- Adequacy decisions by the European Commission.
- Binding corporate rules.
Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: you may request a copy of the personal data we hold about you.
- Right to rectification: you may request correction of inaccurate or incomplete data.
- Right to erasure: you may request deletion of your personal data when it is no longer needed for the purposes for which it was collected.
- Right to object: you may object to processing in certain circumstances, including direct marketing.
- Right to data portability: you may request transfer of your data to another controller in a structured, commonly used format.
- Right to lodge a complaint: you may lodge a complaint with a supervisory authority if you believe processing does not comply with applicable law.
To exercise any of these rights, contact us using the details below.
Cookies
Our website uses cookies and similar technologies to improve your browsing experience. For details on the cookies we use and how to manage them, please see our Cookie policy.