PRIVACY POLICY

Health Forest and its affiliates are committed to safeguarding your privacy and valuing the relationship we share with you. This Privacy Policy delineates the types of personal information we collect, the purposes for which we utilise this information, the individuals or entities with whom we share it, and the options available to you concerning its use. Furthermore, we have outlined the procedures for contacting us regarding our privacy practices.

This Privacy Policy, in conjunction with our Terms and Conditions and any additional policies referenced herein, governs the collection of personal information through healthforestshop.com and our other internet-based offerings, collectively referred to as the “Site.” This policy also extends to online stores that offer Health Forest beauty products and any information obtained from our personnel. It is important to note that unless explicitly stated at the time of data collection, any personal information gathered at third-party retail locations is not shared with us and falls outside the purview of this Privacy Policy.

By using our site, you agree to the terms outlined in this Privacy Policy and our Terms and Conditions. We greatly appreciate your continued engagement!

This Privacy Policy delineates additional protocols for collecting and processing your Personal Information for individuals in the European Economic Area (EEA) or the United Kingdom (UK). Further details can be found in Section 12.

Notably, non-EEA countries do not adhere to the same data protection regulations as the United Kingdom, Switzerland, and the EEA. Nevertheless, we will implement appropriate measures to ensure that any transfers of Personal Information are conducted securely and comply with relevant data protection laws.

As our services evolve, we may periodically revise this Privacy Policy to include new uses of your Personal Information. The effective date will be indicated after this Privacy Policy. We encourage you to frequently visit our Site to review the current Privacy Policy and any amendments that may have been implemented.

1. Information We Collect

We gather users' personal information on our website or voluntarily share with us during communication. While individuals may opt not to disclose certain information, such a choice may restrict their ability to utilise some features of our services.

For this Privacy Policy, “Personal Information” is defined as any data (whether stored electronically or in physical filing systems) that pertains to a living individual and can be utilised to identify that individual, independently or in conjunction with additional data in our possession. This encompasses but is not limited to, information such as your name, email address, phone number, birthdate, and other technical data, further elaborated upon within this Privacy Policy.

Health Forest is committed to collecting personal information pertinent to the purposes for which it is requested. Individuals are welcome to visit our website without revealing their identity or providing Personal Information.

Should you visit our site or engage as a customer of Health Forest, we may collect or may have previously collected the following categories of Personal Information regarding you. In certain instances, the information we gather may fall into multiple categories.

• Contact information and personal identifiers include your name, address, email address, telephone number, and username or social media handle.

• Device identifiers include information about your device like your MAC address, IP address, or other online identifiers.

• Demographic information, such as your age, sex, and gender (some of which may be protected by applicable law).

• Commercial information, such as the products or services you have purchased, returned or considered, and your product preferences.
  Payment information, such as your method of payment and payment card information (including payment card number, expiration date, delivery address and billing address).

• Online or network activity information, such as information about your visit to the Site, including the full Uniform Resource Locators (URL), clickstream to, through and from our Site (including date and time), pages on our Site you viewed; page response times, download errors, duration of page visits, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and log file information, which includes, but may not be limited to, your browser type and version, operating system and platform, webpages you visit, and other electronic network activity.

• Geolocation information is information that can help identify your physical location (like your GPS coordinates or the approximate location of your mobile device).

• Health and medical information includes digestive, hormone, physiological, psychological, and sleep concerns, diagnoses, medical reports and history.

• User Content, such as your communications with us and any other content you provide (including photographs and images, videos, reviews, articles, survey or quiz responses, and comments).

• Inferences drawn from or created based on any of the information identified above.

Health Forest also collects personal information from contractors and individuals affiliated with our vendors and business partners. This personal information is obtained during our business interactions with you or your employer concerning the services rendered to Health Forest or upon your application to provide such services. When you or your organisation engages with Health Forest, we gather the following categories of personal information:

• Contact information and personal identifiers include your name, address, email address, telephone number, driver’s license number, passport number, and any other information you provide relating to your work or to you personally.

• Financial information, such as bank account information.

• Professional information, such as your CV, resume, and employment history.

• Education information, such as your educational background and grades.

• Demographic information, such as your age, sex, gender, national origin, and citizenship status (some of which may be protected by applicable law).

2. How We Collect Information

If you visit the website or are a Health Forest customer, we may collect personal information about you from various sources. The categories of sources from which we may obtain Personal Information include:

• Directly from you, such as when you purchase on our website, contact us with a question or complaint, create an account on our website, respond to a survey or quiz, or sign up to receive marketing communications.

• Cookies and automatic collection methods. When you visit our website or use one of our mobile applications, and when you open or click on emails we send you, we (and third parties we work with) may automatically collect information from your browser or device using technologies such as cookies, web beacons, pixel tags, and similar technologies. Cookies are small text files that websites send to your computer or other Internet-connected device to identify your browser uniquely or to store information or settings in your browser. Web beacons or pixel tags are small images embedded into our website or emails that provide us with information about your browser or device or whether you open or click on the emails we send you. These technologies enable us, or the third parties who place such technologies, to collect information such as device identifiers and online or other network activity information.

• We may obtain your information from social media platforms/networks, such as Facebook, TikTok, Instagram, YouTube, and Pinterest, if you interact with us on social media or choose to log in to our website using your social media credentials.

Suppose you are engaged in providing services to Health Forest or are applying to offer such services. In that case, we may collect your personal information from various sources. The categories of sources from which we may obtain personal information include:

• We receive it directly from you, such as when you apply to provide services or when you otherwise communicate with us.

3. What Do We Do With Your Information?

If you access the Site or are a customer of Health Forest, we may utilise or have utilised the personal information we possess about you.

• To provide products and services, such as fulfilling orders and processing payments, creating, servicing and maintaining your account, assisting with product selection and replenishment, and managing current or past purchases.

• I want to communicate with you, including responding to your inquiries or complaints and helping you place an order.

• To administer your participation in special events, contests, sweepstakes, surveys, and promotions.

• For marketing and advertising, such as sending you marketing and advertising materials via postal mail, text message, or email and showing you advertisements for products and/or services tailored to your interests on social media and other websites.

• For analytics purposes, such as understanding how you use our website and mobile applications, your preferred purchasing method, the browsers and devices you use to visit our website, and evaluating and improving our products, services, advertisements, website, and mobile applications.

• To operate and improve our business, including providing quality assurance, conducting research and development to develop new products and services, and performing accounting, auditing and other internal business functions.

• For legal and security purposes, such as to detect, prevent, and prosecute harmful, fraudulent, or illegal activity, loss prevention, identify and repair bugs on our website or mobile applications, and comply with applicable legal requirements, relevant industry standards and our policies.

• We also may use or may have used the information in other ways for which we provide specific notice at the time of collection.

If you are providing services to Health Forest or applying to provide such services, we may use or may have used the Personal Information we have about you:

• To communicate with you in connection with the services you or your company provide to us.

• To operate and improve our business, including responding to job applications.

• We aim to fulfil our contractual and business obligations and ensure that you meet them.

• To confirm you have the ability and resources to provide services to us, which may include making inquiries about your financial status, business experience, and past commercial practices.

• This is to determine whether you can carry out the essential job duties of your position and whether to hire an applicant or promote you.

• This is for legal and security purposes, such as detecting, preventing, and prosecuting harmful, fraudulent, or illegal activity and complying with applicable legal requirements, relevant industry standards, and our policies.

• To analyse and improve our business processes, including to assist us with improving our application and recruitment processes and other human resources-related objectives.

• We also may use or may have used the information in other ways for which we provide specific notice at the time of collection.

4. Information we Disclose

We may disclose or may have disclosed your Personal Information to:

• Service providers. We may transfer Personal Information to service providers who perform services on our behalf based on our instructions. We do not authorise these service providers to use or disclose Personal Information except as necessary to perform services on our behalf or comply with legal requirements. These service providers include entities that process credit card payments, fulfil orders, and provide website and application functionality, hosting, analytics, advertising and marketing services.

• Parties to a corporate transaction. We also reserve the right to transfer Personal Information we have about you if we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganisation, divestiture, dissolution, or liquidation).

• Advertising Companies. We work with third-party advertising companies (such as advertising networks) to serve advertisements on our behalf. For additional information, see the Cookies, Targeted Advertising & Analytics section.

• Other third parties. In addition, we may disclose personal information about you (i) if we are required to do so by law or legal process, (ii) to law enforcement authorities or other government officials, (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity, (iv) when disclosure of your personal information is otherwise required or permitted by law, or (v) with your consent.

5. Your Rights and Choices

Accessing, Updating, and Modifying Personal Information

By applicable legal provisions, individuals may possess the right to request access to and receive details regarding the personal information we maintain about them. Additionally, individuals may seek to update and correct any inaccuracies in their personal information and request to delete such information when appropriate. It is important to note that these rights may be restricted in certain circumstances by local legislation. We may implement reasonable procedures to verify an individual's identity before granting access or making corrections. Individuals may initiate a request to access, modify, or delete their personal information by contacting us via email at info@healthforestshop.com.

Email Opt-Out Policy

Individuals may opt out of receiving marketing communications via email by following the instructions provided in the emails sent by our organisation or by contacting us at info@healthforestshop.com It is essential to note that if an individual opts out of marketing emails, they may still receive transactional or operational emails. Such emails include but are not limited to, purchase confirmations, shipping notifications, password reset instructions, profile updates, and other messages related to their account.

Text Message Opt-Out Policy

Individuals wishing to discontinue receiving our organisation's text messages may respond with "STOP" to any text message received. Alternatively, opt-out requests may be submitted via email to info@healthforestshop.com. Please be advised that this action will only remove you from the specific text messaging program linked to the number utilised for communication.

6. Cookies, Targeted Advertising and Analytics

Cookies

Cookies are small text files that websites transmit to your computer or other internet-connected devices to uniquely identify your browser or store specific information and settings. Our website employs various types of cookies, including performance, functional, and targeting cookies.

The following types of cookies are used on our website: www.healthforestshop.com

Strictly Necessary Cookies: These cookies are fundamental for the website's proper functioning and cannot be deactivated within our systems. They are typically established in response to actions taken by the user, such as setting privacy preferences, logging in, or completing forms. Although users may configure their browser settings to block these cookies or receive notifications regarding their deployment, certain site sections may not function optimally. It is important to note that these cookies do not store any personally identifiable information.

Performance Cookies: Performance cookies count visits and traffic sources, enabling us to evaluate and enhance our website's performance. They provide valuable insights into the most and least frequented pages and how visitors navigate the site. All information collected by these cookies is aggregated and anonymised. Should users opt not to permit these cookies, we will need more ability to ascertain their site visits and thus will be unable to assess site performance.

Functional Cookies: Functional cookies facilitate enhanced functionality and personalisation on the website. Our organisation may set these cookies in your browser settings because browser settings vary between our pages. Users who decline these cookies may find that some or all of these services do not operate as intended.

Users can manage their cookie use through their browser settings. Since these settings differ from one browser to another, we recommend consulting All About Cookies at https://allaboutcookies.org/, which provides comprehensive information regarding cookie management and blocking across various browsers.

Targeted Advertising:

We may engage with third-party advertising companies, including advertising networks, to display advertisements on our behalf. These companies may employ cookies and other technologies to gather device identifiers, online behaviour information, commercial data, or inferences regarding user activity, such as the websites accessed over time and the advertisements interacted with. This data is employed to deliver advertisements tailored to the individual user. Users can opt out of this form of targeted advertising by modifying their cookie settings. It is essential to understand that even if users opt out of targeted advertising, they may still encounter advertisements from our organisation that are not based on behavioural information. For further details on this type of advertising, we recommend visiting the Digital Advertising Alliance at https://youradchoices.com/ or the Network Advertising Initiative at https://optout.networkadvertising.org/.

We engage with third-party platforms, including those operated by social networks such as Google and Facebook, to present advertisements to users and evaluate the effectiveness of our advertising efforts. In this process, we may convert your email address, telephone number, or other personal information into a unique identifier. This identifier is then shared with these third-party platforms to facilitate matching this information with their user databases or other relevant data they maintain. Such matching enables us to deliver targeted advertisements to you and similar audiences on these platforms. Should you request that we refrain from utilising your personal information in this manner, you may contact us via email at info@healthforestshop.com.

Do Not Track and Advertising Across Different Websites

We do not modify our tracking practices based on “do-not-track” signals or similar mechanisms. Third parties providing content or services on our website—such as social features, analytics services, or advertising network partners—may collect information regarding browsing or usage behaviours. These third parties do not alter their tracking practices in response to “do-not-track” signals from your web browser, nor are we obligated to require compliance by these entities. For further information regarding browser tracking signals and the concept of “Do Not Track,” please visit https://allaboutdnt.com/.

Analytics Services

We may employ analytics services, including Google Analytics, on our website, social media platforms, and mobile applications to assess and analyse visitor interactions with these entities. For specific information regarding Google's data collection and utilization methods on our website, social media pages, and mobile applications, please refer to How Google Uses Data.

International Transfers

Personal information may be transferred to countries other than where it was initially collected. Furthermore, such information may be processed and stored outside the individual’s country of residence. It is important to note that these countries may not offer the same level of data protection as the individual’s home country. Consequently, the personal information will be governed by the relevant laws of the foreign jurisdiction. When transferring information internationally, we shall implement protective measures described in this Privacy Policy to ensure security.

7. Children’s Privacy

Our Site is not intended for or directed to children under sixteen, and we do not knowingly collect personal information from children under sixteen on the website. If we become aware that a child under sixteen has provided us with Personal Information, we will delete the information from our records.

8. Our Storage of Your Personal Information

Health Forest employs reasonable and appropriate measures to safeguard your Personal Information against loss, misuse, unauthorised access, disclosure, alteration, and destruction. We consider the risks associated with processing Personal Information and the nature of the information we collect.

We shall retain your Personal Information for the duration necessary to fulfil the abovementioned purposes or as mandated by applicable law. This retention period may vary based on your interactions with us. Furthermore, we may maintain a record of any correspondence with you, such as complaints regarding our products or services, for as long as necessary to adequately defend against any potential legal claims.

9. Links to Other Websites

Our website may provide links to external websites for your convenience and informational purposes. These websites operate independently from our organisation and may have their privacy notices or policies. We strongly recommend you review these documents if you visit any linked websites. Please be advised that we do not assume responsibility for the content, usage, or privacy practices of any linked websites that we do not own or control.

10. Updates to Our Privacy Policy

This Privacy Policy is subject to periodic updates without prior notification to reflect modifications in our personal information practices. In the event of significant changes, we will prominently display a notice on our website to inform you. Furthermore, the most recent update date will be at the top of the Privacy Policy.

11. Policies and Disclosures for Residents of EEA, UK and Switzerland

In addition to the policies articulated in this Privacy Policy, individuals residing in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland are afforded additional rights and protections as required by the European Union General Data Protection Regulation (GDPR), as well as the data protection laws of the UK and Switzerland. This section's additional rights and protections apply solely to EEA, UK, and Switzerland residents.

For clarification, the GDPR encompasses the UK and Switzerland data protection laws. Under the GDPR framework, Health Forest is designated as a "Controller," signifying that it determines the purposes for which personal information is processed and how such information is utilized in its business operations.

(A) Definitions
The following additional definitions apply to this section of our Privacy Policy:

“Processor” means any Person Processing Personal Information.

“Person” means a natural person, corporation, association, organization, partnership, or other legal entity.

“Process” or “Processing” is any activity that involves the use of Personal Information. It includes, without limitation, obtaining, recording or holding the Personal Information or carrying out any operation or set of operations on the Personal Information, including organizing, amending, retrieving, using, disclosing, erasing or destroying it. Processing also includes transferring Personal Information to third parties.

(B) The legal basis for Processing your Personal Information
To comply with the GDPR, we must set out the legal basis for Processing your Personal Information. The legal basis for Processing your Personal Information will be one of the following:

• our legitimate business interests, or the legitimate business interests of our third-party partners, promoters, affiliates, distributors, suppliers, vendors, and subcontractors, such as, for example, providing direct marketing to the customers of our products and services that we think would be of interest, permitting prospective employees to search and apply for job opportunities, handling inquiries from our promoters, affiliates, distributors, vendors, and customers, or other instances where we have carried out a legitimate interests assessment and have established an existing, legitimate interest;

• the performance of a contract that we have in place with you;

• your consent, where appropriate; or

• compliance with our legal obligations, including to meet national security or law enforcement requirements.

(C) Where we store your Personal Information
The data we collect from you is stored on our servers or servers provided by cloud service providers. By submitting your personal information, you agree to this transfer, storage, and processing. We will take all reasonably necessary steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

The transmission of information via the Internet is not completely secure. Although we take reasonable steps to protect your Personal Information, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

(D) Addendum to how long we store your Personal Information
In some cases, there is a legal requirement to keep Personal Information for a minimum period of time. Except in those circumstances, we do not keep your Personal Information for any longer than is necessary for the purposes for which the Personal Information was collected or for which it is to be further Processed.

(E) Your rights concerning your Personal Information

• Subject to certain exceptions, you have the following rights concerning your Personal Information:

• To receive or access a copy of the Personal Information that we hold about you;

• To request that any inaccurate or incomplete Personal Information be corrected or supplemented;

• To have your Personal Information erased, unless we have a legitimate reason to retain the Personal Information (such as if we are required to do so for legal reasons); and

• To ask us not to Process your Personal Information for a particular purpose, including for marketing.

All rights are subject to certain conditions and exemptions. For example, Health Forest is not required to erase your Personal Information if its retention is necessary to protect our interests in case of a legal claim.

To exercise any of these rights, please submit a written request using the contact information provided in Section 13. Health Forest reserves the right to impose a fee for processing such requests by applicable laws and regulations. Furthermore, you may opt out of receiving additional marketing materials by utilizing the unsubscribe feature in any marketing email we distribute.

12. Contacting us

This Site is owned and operated by Health Forest. If you have any questions or suggestions concerning this Privacy Policy or our privacy practices, please e-mail us at info@healthforestshop.com

GDPR/UK/Swiss-Specific Requests
For residents of the EEA, the UK or Switzerland, please e-mail us at Info@healthforestshop.com