Privacy Policy
Last updated: 4 November 2026.
This notice explains how WITH ME NUTRITION S.R.L. (J2022008090401, CUI: RO46038470, Str. Samurcași nr. 5H, Gulia, Tărtășești, Dâmbovița, Romania; contact@withmenutrition.com; +40 747 029 299), the controller, uses personal data when you visit www.withmenutrition.com, buy from us, use our tools and guides or take part in coaching. It is written to meet Articles 13 and 14 of the GDPR (Regulation (EU) 2016/679) and Romanian Law 190/2018. We have not appointed a data protection officer; write to contact@withmenutrition.com for any privacy request.
1. What we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|---|
| Visiting the Store | IP address, device and browser data, pages viewed (server logs and strictly necessary cookies) | Showing the site, security, fraud prevention | Art. 6(1)(f) legitimate interest in running a secure site | As set by Shopify for its server logs (see Shopify's privacy policy) |
| Placing an order | Name, email, phone, billing and delivery address, order details, payment confirmation (card data is handled by the payment provider, we never see the full number) | Performing the contract, delivery, invoicing, answering questions about the order | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation for invoices and accounting | Accounting and tax records for the period required by Romanian accounting and tax law (Law 82/1991 and the Fiscal Procedure Code); other order data until claims about the order are time-barred (general limitation period of 3 years, Civil Code art. 2517) |
| Contact form, email, withdrawal function | What you send us, your email, date and time of a withdrawal notice | Answering you, handling complaints, keeping proof of withdrawal | Art. 6(1)(b) and (c); Art. 6(1)(f) for complaint records | Until claims about the matter are time-barred (generally 3 years, Civil Code art. 2517) |
| Tools & guides (email access) | Email address and date of sign-up. When you press a calculator’s button (for example “Calculate my body composition”), the answers you entered and your results, which can include age, sex, weight, height, body measurements and activity, are sent to us by email so that your coach can see them. This happens only if you tick the optional consent box next to the button (your explicit consent under Art. 9(2)(a) GDPR, because these figures can be health data; you can withdraw it at any time by writing to contact@withmenutrition.com). If you don’t tick the box, nothing is sent and the calculator still works. Each email records the time of your consent and the wording you agreed to; only if you tick the optional box, your marketing consent (see the newsletter row). Your browser also saves your email and a flag showing that the tools are unlocked (localStorage), so you do not have to enter it again. | Giving you access to the tools | Art. 6(1)(b) (service you asked for) | As long as you use the tools or remain subscribed; deleted no later than 24 months after your last interaction with us (for example opening an email or signing in), or sooner if you ask us to |
| Newsletter and nutrition tips | Email, consent record | Sending marketing emails | Art. 6(1)(a) consent, given separately and withdrawable at any time through the unsubscribe link or by email | Until you unsubscribe, and no later than 24 months after your last interaction with us |
| Intro-call application, 30-minute consultation and coaching | Identity and contact data; the answers in the consultation application (goals, age, height, weight, body fat, training, steps, activity tracker, willingness to do blood tests, the eating-disorder question, commitment and budget); and, only if you provide them, health data: medical history, medication, symptoms, cycle data, digestion, weight and measurements, progress photos, blood-test results you choose to share, Whoop or other wearable data | Delivering the consultation and the coaching you asked for; adapting your targets | Art. 6(1)(b) contract and, for health data, your explicit consent under Art. 9(2)(a), given in the consultation application and in the intake form and withdrawable at any time (withdrawal does not affect processing done before it; without this data we cannot deliver the coaching) | For the duration of the coaching and afterwards only until claims about it are time-barred (generally 3 years, Civil Code art. 2517), unless you withdraw consent or ask for earlier deletion; invoices as required by accounting law |
| Reviews and testimonials | Name or initials, photo if you supplied one, your text | Showing real customer experiences on the Store | Art. 6(1)(a) consent | Until you withdraw consent |
You are not obliged to give us any data, but without the data marked as necessary we cannot process an order or deliver coaching. We do not use automated decision-making or profiling with legal effects.
2. Who receives your data
- Shopify International Ltd. (Ireland) and its group: hosting of the Store, order management, checkout and payment processing, customer records, email delivery of order notifications. Shopify acts as our processor; some processing happens in Canada and the United States under the EU Standard Contractual Clauses and Shopify's data processing addendum.
- Payment providers offered at checkout: they process your payment as independent controllers.
- Delivery carriers: name, address and phone, to deliver your parcel.
- Google (Google Workspace: Calendar, Meet and Apps Script), only if you book an intro call or a consultation in our booking calendar on the website: Google runs the booking calendar, stores the booking as an event in the Google Calendar of our contact@withmenutrition.com account, creates the Google Meet video link and sends you the calendar invitation by email. A booking sends your name, email, phone number if you give it, the chosen time and your language, plus the order number for a paid consultation or your application answers for an intro call. Google acts as our processor under the Google Workspace data processing terms; transfers outside the European Economic Area rely on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
- Our email provider, which stores the emails you send us, including consultation applications, intake forms, check-ins and any blood-test results or photos you attach.
- Open-Meteo (weather data on the vitamin D page) and Open Food Facts (packaged-food search in the food tracker): your browser sends the city you type or the search words directly to these services; we do not send them your identity and we store nothing from these requests.
- Accountants, lawyers and public authorities where the law requires it.
We do not sell personal data and we do not share health data with anyone other than the processors needed to store and deliver the coaching described above. Your coach sees your coaching data; nobody else at WITH ME does without a reason connected to delivering the service.
3. Health data and secure channels
Health data is processed only for your coaching and only with your explicit consent. Please do not send health data through the public newsletter form or social media. The intake and check-in forms are sent to us by email; if you prefer, you can hand over blood-test results during a video call instead of attaching them. You can withdraw your consent, ask us to delete coaching data, or ask what we hold, at any time, by writing to contact@withmenutrition.com. If you withdraw consent, we stop using the data and delete it, except for the minimum we must keep for accounting or to defend a legal claim.
4. Data saved in your own browser
The intake form, the weekly check-in, the food tracker, the calculators, the gut guide tracker and the Sleeping Beauty checklist save your draft answers in your own browser (localStorage) so you do not lose them if the page reloads. This data stays on your device, is not sent to us until you press "Send", and is deleted when you press "Delete my browser data" in the page footer or automatically 30 days after it was last changed. Shared or public computers: please delete your browser data when you finish. The intro-call application keeps your unsent answers only in the open browser tab (sessionStorage).
5. Cookies
The Store uses strictly necessary cookies set by Shopify (cart, checkout, security, your cookie choice). Analytics or advertising cookies, where used, are set only after you accept them in the cookie banner and can be refused or withdrawn at any time through the "Cookie settings" link in the footer. See the Cookie notice for the current list.
6. International transfers
Where a processor is outside the European Economic Area (Shopify group companies in Canada and the USA; Google, which may process booking data in the USA and other countries), transfers rely on an adequacy decision (Canada; EU-US Data Privacy Framework where the recipient is certified) or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards.
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability, and to withdraw any consent at any time without affecting earlier processing. Write to contact@withmenutrition.com; we answer within one month. You can also complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro, or to the authority of the EU country where you live.
8. Children
The Store, the supplements and the coaching are for adults aged 18 and over. We do not knowingly collect data from children. If a child has given us data, write to us and we delete it.
9. Security
Data is stored on Shopify's infrastructure and in our business email account, with access limited to the people who need it. No system is perfectly secure; we will inform you and the authority of a breach where the law requires it.
10. Changes
We update this notice when our processing changes and show the date at the top. Material changes to how we use coaching data are communicated to coaching clients by email.