Get $10 off today with code10dollarat checkout
Beauty & cosmetic essentials — Shop Now

Legal

GDPR — Data Protection Notice

Armadillo Marketing Ltd.

ul. Lavele № 19, Sredets, 1000 Sofia, Bulgaria

UIC 205329133 · Bulgarian Commercial Register

Last updated: May 18, 2026

About this notice

This GDPR Data Protection Notice explains how Armadillo Marketing Ltd. (“we,” “us,” or “our”) collects, uses, stores, and protects the personal data of visitors and customers in the European Economic Area (“EEA”), the United Kingdom, and Switzerland in compliance with the EU General Data Protection Regulation 2016/679 (“GDPR”) and equivalent UK and Swiss data protection law. It supplements our general Privacy Policy.

1. Data controller

For the purposes of GDPR, the data controller responsible for your personal data is:

Armadillo Marketing Ltd. (SLLC)
UIC: 205329133
Registered office: ul. Lavele № 19, Sredets, 1000 Sofia, Bulgaria
Manager: Mikael Juhani Arnisaari
Email: support@yourhealthyproducts.com

2. What personal data we collect

We may collect and process the following categories of personal data:

  • Identity data: first name, last name.
  • Contact data: billing address, shipping address, email address, telephone number.
  • Transaction data: details about products you have purchased, payment method fingerprint, order history. We do not store your full payment card number — card data is handled by our PCI-compliant payment processor.
  • Technical data: IP address, browser type and version, device identifier, time zone, operating system, referring URL.
  • Usage data: information about how you use our website, including pages viewed, links clicked and session duration.
  • Marketing data: your preferences in receiving marketing communications from us, and your communication preferences.

3. Lawful basis for processing

Under GDPR Article 6, we process your personal data only when at least one lawful basis applies:

  • Performance of a contract: processing necessary to fulfil your order, deliver products, and provide customer service.
  • Consent: for non-essential cookies and electronic marketing communications, where we ask for your specific opt-in.
  • Legal obligation: tax, accounting, fraud prevention, and other compliance obligations.
  • Legitimate interests: improving our products and services, protecting against fraud and abuse, and direct marketing to existing customers (subject to your right to object).

4. Your rights as a data subject

Under GDPR Articles 15–22, you have the following rights in relation to your personal data. You can exercise any of these rights free of charge by emailing support@yourhealthyproducts.com. We will respond within one month.

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — ask us to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — ask us to delete your personal data when there is no compelling reason for us to continue processing it.
  • Right to restrict processing — ask us to suspend processing of your personal data in certain circumstances.
  • Right to data portability — receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
  • Right to object — object to processing based on legitimate interests, including direct marketing.
  • Rights related to automated decision-making — not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

5. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. Order and transaction records are typically retained for seven (7) years to comply with tax and accounting law. Marketing data is retained until you withdraw consent or object.

6. International data transfers

Armadillo Marketing Ltd. is established in Bulgaria, an EU Member State, and your personal data is primarily processed within the EEA. Where we engage processors located outside the EEA, the UK, or Switzerland (for example certain hosting, payment, or fulfilment providers), we rely on one of the safeguards permitted under GDPR Chapter V, including the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, supplementary technical and organisational measures.

7. Sharing your data

We share personal data with carefully selected processors that act on our behalf and only on our documented instructions, including payment processors, fulfilment and shipping providers, fraud prevention providers, hosting providers, and analytics providers. All processors are bound by contract to safeguard your data and process it only for the purposes we specify.

8. Cookies

We use strictly necessary cookies to operate the website and, with your consent, analytics and marketing cookies to understand how our site is used and to deliver relevant content. You can manage cookie preferences through your browser settings.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. All payment card data is transmitted over TLS-encrypted connections and handled by a PCI-DSS-compliant payment processor.

10. Right to lodge a complaint

If you believe our processing of your personal data infringes GDPR, you have the right to lodge a complaint with a data protection supervisory authority in the EU or UK Member State of your habitual residence, place of work, or place of the alleged infringement. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner’s Office (ICO) at ico.org.uk.

11. Changes to this notice

We may update this GDPR notice from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated through our website.

12. Contact

For any questions about this GDPR notice, to exercise your rights, or to lodge a privacy complaint with us directly, please email support@yourhealthyproducts.com.