PRIVACY POLICY

Last updated: 13 August 2026

Who we are. PinkLife is operated by Rosa Alise, an Independent Herbalife Distributor. PinkLife is independently operated and is not an Herbalife corporate website. For the personal information processed for PinkLife's own purposes as described in this Privacy Policy, PinkLife, operated by Rosa Alise, is the data controller unless this Policy states that another organisation acts as a separate controller.

PinkLife operates this store and website, including the related information, content, features, tools, products and services that we make available to you (the “Services”). The Services are powered by Shopify, which provides the e-commerce platform and related technology that enables us to operate the store.

This Privacy Policy explains how we collect, use, disclose and otherwise process personal information when you visit or use the Services, place or manage an order, contact us, create or use an account, sign up for marketing, or otherwise interact with PinkLife. It also explains the choices and rights that may be available to you. If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, use or disclosure of personal information, this Privacy Policy will apply to that privacy-related matter.

Personal Information We Collect or Process

“Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been effectively anonymised so that it can no longer identify you. Depending on how you interact with the Services, we may collect or process:

• Contact and delivery details, such as your name, email address, telephone number, billing address and delivery address.
• Order and transaction information, such as products viewed, products added to your basket, products ordered, order history, order value, delivery information, returns, exchanges, refunds and customer-service history.
• Account information, where you use a customer account, such as account identifiers, login or authentication information, preferences and settings.
• Payment and transaction information. Payment-card details are entered into the checkout and are processed by Shopify and/or the applicable payment provider. PinkLife does not receive or store complete payment-card numbers or card security codes in a separate PinkLife database. We may receive transaction-related information made available through Shopify or a payment provider, such as billing details, payment status, payment method type, order amount, transaction identifiers and limited card information where made available, for example the last four digits. We use this information only as reasonably necessary to administer orders, payments, refunds, customer support, fraud prevention, disputes and accounting.
• Communications with us, including information you provide when contacting customer support or making an enquiry or complaint.
• Device and technical information, such as IP address, browser type, device information, network information and similar online identifiers.
• Usage and interaction information, such as how you navigate the Services, pages and products viewed, interactions with the website, basket and checkout activity, and marketing or cookie preferences where applicable.

We do not ask you to provide health or medical information through the ordinary checkout process. Please avoid sending sensitive or special-category personal information through general forms, email or messaging unless it is genuinely necessary. If such information is provided to us, it will be handled only as permitted by applicable law.

Sources of Personal Information

We may obtain personal information:

• Directly from you, for example when you place an order, create an account, contact us, request support, make a return, or subscribe to marketing.
• Automatically through the Services, including through your device, cookies and similar technologies when you browse or interact with the website.
• From Shopify and service providers that help us operate the store, process payments, prevent fraud, provide analytics or technology, deliver orders or provide customer support.
• From marketing or other business partners where applicable and where the collection and use of that information is permitted by law.

How We Use Personal Information and Our Lawful Bases

Where UK or European data protection law applies, we must have a lawful basis for processing personal information. The basis depends on the purpose and circumstances of the processing.

Performance of a contract

We process personal information where it is necessary to take steps at your request before entering into a contract or to perform our contract with you. This includes processing an order, confirming payment status, arranging delivery, communicating about your order, providing customer support, managing returns, exchanges and refunds, and maintaining a customer account where relevant.

Legal obligations

We process personal information where necessary to comply with applicable legal and regulatory obligations, including accounting, tax, record-keeping, consumer-protection obligations, responding to valid requests from public authorities, and establishing or maintaining records required by law.

Legitimate interests

Where permitted by law, we may process personal information when necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. These interests may include operating and securing the store, detecting and preventing fraud or misuse, protecting our legal rights, maintaining business records, improving the performance and usability of the Services, responding to customer enquiries, understanding the effectiveness of our services and managing our business.

Consent

Where consent is required by law, we rely on consent for activities such as certain non-essential cookies or similar technologies and certain electronic marketing communications. You may withdraw your consent at any time using the relevant preference controls, the unsubscribe link in marketing emails, or by contacting us. Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

Cookies, Analytics and Advertising

The Services use cookies and similar technologies. Some cookies are necessary for the website, basket, checkout, security and other essential functionality. Where optional analytics, personalisation or advertising technologies are enabled and consent is required, they should be used only in accordance with the choices you make through the cookie banner or other privacy controls available on the Services.

If we use advertising or analytics partners, including in connection with future advertising campaigns, those partners may receive device, usage or interaction information in accordance with your applicable consent choices and their own privacy notices. You can change available cookie or privacy preferences through the controls provided on the website.

Marketing Communications

We may send marketing communications where permitted by law. Where consent is required, we will rely on your consent. You can unsubscribe from promotional emails at any time by using the unsubscribe option provided in the message or by contacting us. Even if you opt out of marketing, we may still send non-promotional communications that are necessary for your order, account, transaction, security, return, refund or customer-service request.

How We Disclose Personal Information

We may disclose personal information only where reasonably necessary for the purposes described in this Privacy Policy, including:

• Shopify, which provides our e-commerce platform and related services.
• Payment providers and processors, which process payment information, payment authorisation, fraud checks, refunds and related payment services.
• Delivery, fulfilment and service providers where necessary to fulfil or support an order.
• Technology, analytics, customer-support and marketing providers where used, subject to applicable privacy and consent requirements.
• Professional advisers, insurers, regulators, courts, law-enforcement bodies or public authorities where disclosure is necessary to comply with law, establish or defend legal claims, prevent fraud or protect rights and safety.
• A purchaser, successor or relevant adviser in connection with a genuine business reorganisation, sale or transfer, subject to applicable law.

We do not disclose personal information merely because another organisation is associated with the Herbalife brand. Any disclosure to Herbalife, a supplier or another third party must have an appropriate purpose and lawful basis and be limited to what is reasonably necessary for that purpose.

Relationship with Shopify

The Services are hosted and supported by Shopify. To the extent Shopify processes customer personal information on our behalf to provide the commerce platform and related merchant services, Shopify acts as a processor or service provider for us. Shopify may also process certain information for its own purposes or act as a separate controller for particular services, features, fraud-prevention, legal or regulatory purposes, as described in Shopify's own privacy notices and applicable terms.

Information submitted through the Services may therefore be processed by Shopify and by providers that support Shopify or the Services, including in countries other than the country in which you live. You can learn more in the Shopify Consumer Privacy Policy and, where available, use the Shopify Privacy Portal.

Relationship with Herbalife

PinkLife is operated independently by an Independent Herbalife Distributor. Herbalife does not operate this PinkLife website. Personal information that you provide directly to Herbalife, including through an Herbalife-operated website or service, is governed by the privacy information applicable to that Herbalife service. Independent Herbalife distributors may separately be responsible for personal information that they collect and use in connection with their independent businesses.

Third-Party Websites and Services

The Services may contain links to websites or online services operated by third parties. If you follow a link to a third-party service, its own privacy and security practices will apply. We are not responsible for the privacy or security practices of third-party websites that we do not control. The inclusion of a link does not by itself imply endorsement of the third party or its content.

Children's Data

The Services are not intended for children, and we do not knowingly collect personal information from children through the ordinary use of the store. If you believe that a child has provided personal information to us, please contact us using the details below so that we can review the matter and take appropriate action.

Security and Retention

We use reasonable administrative, organisational and technical measures, including the security controls provided by the platforms and providers we use, to help protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, manage orders and customer relationships, comply with legal, accounting and tax obligations, resolve disputes, prevent fraud and enforce agreements. Retention periods can vary depending on the type of information, the reason it is processed and applicable legal requirements. When personal information is no longer required, we will delete or anonymise it where appropriate and where reasonably within our control.

Your Privacy Rights

Depending on the law that applies to you, you may have rights in relation to your personal information. These rights are subject to legal conditions and exceptions and may include:

• Access – the right to request information about the personal information we hold about you and, where applicable, a copy.
• Rectification – the right to ask us to correct inaccurate or incomplete personal information.
• Erasure – the right to ask us to delete personal information in circumstances where the law provides that right.
• Restriction – the right to ask us to restrict certain processing in applicable circumstances.
• Objection – the right to object to certain processing based on legitimate interests and to object to direct marketing.
• Portability – the right, in applicable circumstances, to receive certain personal information in a structured, commonly used and machine-readable format and/or have it transmitted to another controller.
• Withdrawal of consent – where processing is based on consent, the right to withdraw that consent at any time.

To exercise a privacy right in relation to PinkLife's processing, contact us using the details below. We may need to verify your identity before completing a request. We will respond within the period required by applicable law. Some rights are not absolute, and we may lawfully retain or continue to process information in certain circumstances, for example where required by law or for the establishment, exercise or defence of legal claims.

Where Shopify acts as a separate controller for particular processing, you may need to exercise the relevant right directly with Shopify. Information about Shopify's privacy practices and privacy portal is provided above.

Complaints

If you have a concern or complaint about how PinkLife handles personal information, please contact us first using the details below so that we can investigate and respond.

If you are in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO). Information about making a data-protection complaint is available at ico.org.uk. If you are in the European Economic Area, you may also have the right to complain to the competent data-protection supervisory authority in your country.

International Transfers

Shopify and other service providers may process, store or transfer personal information outside the United Kingdom or European Economic Area. Where applicable law requires safeguards for an international transfer, we rely on an appropriate lawful transfer mechanism, which may include an adequacy decision or recognised contractual safeguards such as the European Commission's Standard Contractual Clauses and, where applicable to UK transfers, the UK International Data Transfer Agreement or UK Addendum.

You may contact us if you would like further information about the safeguards relevant to a particular transfer that we control.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, providers, legal requirements or other operational reasons. We will publish the updated version on the website and update the “Last updated” date. Where the law requires additional notice or consent, we will provide it.

Contact

For questions about this Privacy Policy, to exercise a privacy right, or to make a privacy complaint, please contact:

PinkLife – operated by Rosa Alise, Independent Herbalife Distributor
Telephone: +39 391 496 8594
Email: rosaalise@icloud.com

For the purposes of applicable data-protection law, PinkLife, operated by Rosa Alise, is the controller for the PinkLife processing described in this Privacy Policy, except where a third party processes personal information as a separate controller under its own privacy notice.