WellMixLife

    Privacy Policy

    This Privacy Policy explains how Mandisakura, trading as WellMixLife("we", "us"), collects and processes personal data when you visit wellmixlife.com or purchase our digital products. We act as the data controller for that processing under the EU General Data Protection Regulation (GDPR) and the UK GDPR. Our company details and postal address are listed on our Imprint page.

    1. Information We Collect

    • Account information: email address and a hashed password.
    • Order information: the products you bought, amount paid, currency, and download history.
    • Payment information: processed directly by Stripe. We receive a transaction ID and the last four digits of the card; we never see or store full card numbers.
    • Communications: messages you send us by email or via the contact / lead-magnet forms.
    • Technical data: IP address, browser type, device type, and pages visited. This is collected from server logs for security and abuse prevention only — we do not currently run third-party analytics or advertising cookies.

    2. Why We Process Your Data (Legal Basis)

    • Performance of a contract (GDPR Art. 6(1)(b)) — to create your account, process payments, deliver the PDFs you bought, and respond to support requests.
    • Legal obligation (Art. 6(1)(c)) — to keep invoices and tax records as required by Dutch and EU law.
    • Consent (Art. 6(1)(a)) — to send the free 7-day recipe plan and follow-up emails you opted in to, and to set any non-essential cookies after you accept our cookie banner.
    • Legitimate interests (Art. 6(1)(f)) — to keep the site secure, prevent fraud, and improve our products. We balance these interests against your rights and you can object at any time.

    3. Subprocessors We Use

    We rely on a small number of vetted providers to run the site. Each acts as a processor on our behalf and is bound by a Data Processing Agreement (DPA).

    • Stripe Payments Europe, Ltd. (Ireland / United States) — payment processing.
    • Supabase, Inc. (United States, EU region hosting) — authentication, database, file storage for PDFs, and serverless functions.
    • Resend, Inc. (United States) — transactional and lead-magnet email delivery.
    • Lovable / hosting CDN — static site hosting and content delivery.

    We do not sell, rent, or trade personal data, and we do not share it with advertisers or data brokers.

    4. International Data Transfers

    Some of our processors are based in the United States. Where personal data leaves the EEA or the UK, the transfer is protected by the European Commission's Standard Contractual Clauses (SCCs), by the provider's adherence to the EU–US Data Privacy Framework, or by both. You can request a copy of the relevant safeguards by emailing us.

    5. How Long We Keep Your Data

    • Account & order records: kept for the life of your account plus 7 years after the last transaction, to meet Dutch tax-law retention requirements.
    • Lead-magnet / marketing email list: kept until you unsubscribe or request deletion.
    • Server & security logs: typically kept for up to 90 days, then deleted or aggregated.
    • Support emails: kept for up to 24 months after the case is closed.

    6. Your Rights (GDPR / UK GDPR)

    You have the right to:

    • Access the personal data we hold about you (Art. 15);
    • Have inaccurate data corrected (Art. 16);
    • Request erasure of your account and data (Art. 17);
    • Restrict or object to certain processing (Art. 18 & 21);
    • Receive your data in a portable, machine-readable format (Art. 20);
    • Withdraw any consent you previously gave, at any time, without affecting prior lawful processing.

    To exercise any of these rights, email information@wellmixlife.com from the address linked to your account. We respond within 30 days.

    If you believe we have mishandled your data, you have the right to lodge a complaint with your local supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

    7. California Residents (CCPA / CPRA)

    If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect, to request a copy or deletion of it, to correct inaccurate information, and to be free from discrimination for exercising these rights.

    We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use it for cross-context behavioural advertising. You can still confirm or update this preference at any time using the link in our footer, or by emailing information@wellmixlife.com.

    8. Cookies

    We only set strictly necessary cookies (sign-in session, cart, currency) by default. Any analytics or marketing cookies stay off until you accept them through the cookie banner. See our Cookie Policy for the full list and how to change your choice.

    9. Data Security

    We use industry-standard measures — TLS in transit, encrypted storage at rest, hashed passwords, row-level security in our database, and least-privilege access for our team — to protect your information. No system is 100% secure, so we also keep retention short and the data set small.

    10. Data Protection Contact

    We are not legally required to appoint a Data Protection Officer, but you can reach the person responsible for data protection at WellMixLife by writing to information@wellmixlife.com.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. Material changes will be announced on this page with a new "Last updated" date.

    Last updated: June 28, 2026