Privacy Policy
Last updated: 23 September 2026
This Privacy Policy explains how Lorenzo Ballicu ("I", "me", "my"), trading as HL Fit Hub via the website hlfithub.com (the "Site"), collects, uses, stores and protects your personal data when you visit the Site, place an order or contact me. I act as the data controller. This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU) 2016/679 (EU GDPR).
1. Who I am
Lorenzo Ballicu — Herbalife Independent Member.
Address: Calle Bernardo de la Torre 37, 35007, Las Palmas, Spain.
Email: info@hlfithub.com
Phone: +39 328 979 0447
2. Data I collect
- Identity and contact data: name, email address, phone number, billing and delivery address.
- Wellness Community data: the first name and email address you submit on the Wellness page, together with the date and record of the consent you gave.
- Order data: products purchased, order value, payment status (I do not store full card details — payments are processed by Shopify and its providers).
- Communications: messages you send me by email, WhatsApp, contact form or social media.
- Technical data: IP address, browser type, device, pages viewed, referring URL, and cookies (see Cookie Policy).
3. Why I process your data and legal basis
- To fulfil your order (Art. 6(1)(b) GDPR — contract): processing orders, arranging delivery, handling returns and customer support.
- To comply with the law (Art. 6(1)(c) GDPR): tax, accounting and consumer law obligations.
- Legitimate interests (Art. 6(1)(f) GDPR): securing the Site, preventing fraud, basic analytics, and answering enquiries.
- Consent (Art. 6(1)(a) GDPR): non-essential cookies, marketing emails, the Wellness Community recipe emails and personalised offers. You can withdraw consent at any time.
4. Wellness Community sign-up
If you sign up on the Wellness page, I collect your first name and email address so I can send you shake recipes, occasional offers and your welcome discount code. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the consent box on the form; the box is never pre-ticked. Under the UK Privacy and Electronic Communications Regulations (PECR) I only send marketing emails to people who have given that consent.
Your details are stored in the secure database that powers this Site and are used only by me, Lorenzo Ballicu, to contact you. I do not sell your details, and I do not share them with Herbalife, with other Herbalife Members, or with any third party for their own marketing purposes.
You can withdraw your consent at any time by clicking the unsubscribe link in any email or by writing to info@hlfithub.com. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it. Signing up is entirely optional and is not required to buy from this Site.
5. Who I share data with
I only share what is necessary, with trusted processors bound by contracts:
- Shopify Inc. — e-commerce platform and payment processing.
- Hosting and database providers — to run this Site and securely store Wellness Community sign-ups.
- Couriers — to deliver your order.
- Email/hosting providers — to operate the Site and contact you.
- Tax authorities and regulators — where legally required.
6. International transfers
Some providers (e.g. Shopify) may process data outside the UK/EEA. Where that happens, I rely on adequacy decisions, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses to ensure your data remains protected.
7. How long I keep your data
- Order and accounting records: 6–10 years to meet tax obligations.
- Marketing and Wellness Community data: until you withdraw your consent or after 24 months of inactivity, whichever comes first.
- Support enquiries: up to 24 months after resolution.
8. Your rights
Under UK and EU GDPR you have the right to:
- Access the personal data I hold about you.
- Have inaccurate data corrected.
- Have your data erased ("right to be forgotten").
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time.
- Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, your national data protection authority.
To exercise any right, email me at info@hlfithub.com. I respond within 30 days.
9. Security
The Site uses HTTPS encryption. Payments are processed via PCI-DSS compliant providers. I review access controls regularly and limit data access to what is strictly needed.
10. Children
The Site is not intended for children under 16. I do not knowingly collect their data.
11. Changes
I may update this policy from time to time. The "Last updated" date above will reflect any changes.
