1. Who is the Data Controller?
  • Corporate name is: JOSE PRAT OROZCO – www.buyherbalonline.uk
  • CIF is: 47884000R
  • Registered office is at Ronda Alfons XII 149-151, 08302 Barcelona, Spain
  • Email: info@buyherbalonline.uk
  1. What kind of data do we have about you and how have we obtained it?

The categories of personal data that we treat from customers and suppliers are:

  • Identification data
  • Postal or electronic addresses
  • Economic and transaction data (CLIENTS)

All the aforementioned data we have obtained or directly from you through the information form, order, contractual proposal, etc. It will be your or your company’s obligation to provide us with the updated data in case of subsequent modification.

  1. For what purpose do we process your data?

We process the data provided by interested persons in order to manage different activities derived from specific procedures carried out in terms of sales, after-sales service, quality of services, etc. In this way, we will use your data to carry out any of the following actions:

  • Sending the information requested by us through the contact form on our website or any other means of contacting our company.
  • Shipping of the requested products.
  • Provide, both potential customers and our customers, offers of products and services of interest.
  • Carry out the administrative, fiscal and accounting management of our clients.
  • Carry out satisfaction surveys, market studies, etc. in order to be able to offer you the most suitable offers and an optimized quality of service, etc.
  1. How long will we keep your data?

Personal data relating to natural people linked to potential clients and clients that we collect through the different contact forms and/or information collection will be kept as long as the deletion is not requested by the interested party. The data provided by our customers and suppliers will be kept as long as the commercial relationship between the parties is maintained, respecting, in any case, the minimum legal terms of conservation according to the matter.

In any case, we will keep your personal data for the period of time that is reasonably necessary, taking into account our needs to respond to questions that arise or resolve problems, make improvements, activate new services and meet the requirements of the applicable legislation. This means that we may retain your personal data for a reasonable period of time even after you have stopped using our products or have stopped using this website. After this period, your personal data will be removed from all our systems.

  1. What is the basis of legitimacy for the treatment of your data?

According to the type of data processing, the basis of legitimacy is as follows:

Order Management: Manage the contractual relationship and execute the contract that binds the parties. Contract execution.
Accounting Management: billing management with clients and / or suppliers Maintenance, development and control of the contractual relationship between the parties
Tax management: application of withholdings, bonuses, etc. Maintenance, development and control of the contractual relationship between the parties; Compliance with legal obligations
Administrative management: logistics management, warehouse, customer deliveries, receipt of goods, etc. Maintenance, development and control of the contractual relationship between the parties
Marketing: Commercial actions on our products or services aimed at our clients or those people who have requested relative information from us in the past, including conducting satisfaction surveys of our clients. Free and unequivocal consent of the interested party (potential customers), we hereby state that the withdrawal of this consent may in no case condition the execution of the contract between the parties; legitimate interest of the company in the promotion and marketing of products or services similar to those obtained or requested by people interested in the past.
  1. To which recipients will your data be communicated?

We will not transfer your personal data to any third-party company that intends to use it in its direct marketing actions, except where you have expressly authorized us to do so. With the exception of the Herbalife headquarters.

We inform you that we can provide your personal data to bodies of the Public Administration and competent Authorities in those cases in which they require us legally or in the cases in which, acting in good faith, we consider that such action is reasonably necessary to comply with a judicial process. ; to answer any claim or legal demand; or to protect the rights of the company or its customers and the general public.

We inform you that your data will not be transferred or communicated to third parties, the company is solely responsible for its treatment and custody.

We provide your personal data to third parties or companies (eg Internet service providers that help us manage our website or carry out contracted services, computer support and maintenance companies, logistics companies, agencies and tax and accounting advice, etc.). In any case, these third parties or companies must maintain, at all times, the same levels of security as us in relation to their personal data and, when necessary, will be bound by legal commitments in order to keep their personal data privately. and secure, and also to use only the information following specific company instructions.

  1. Data transfers to third countries?

Data transfers to third countries are not foreseen. In case of making them, we would ask for your prior consent.

  1. What are your rights as an interested party?

Anyone has the right to obtain confirmation on whether we are treating personal data that directly concerns them, or not.

Specifically, interested persons can request the right of access to their personal data, as well as receive them in a common format and machine-readable if the treatment is carried out by electronic means (portability right).

Likewise, interested persons can request the right to rectify inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes that were collected.

Additionally, in certain circumstances, the interested parties may request the limitation of the processing of their data, or in certain circumstances and for reasons related to their particular situation, the interested parties may exercise their right to oppose the processing of their data. We will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims or in those exceptions established in the applicable regulations.

Likewise, we inform you that you have the right to withdraw your consents granted at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.

Likewise, the User is informed that at any time they can exercise the aforementioned rights by writing to us using the contact information that appears in Exhibit 1 of this Legal Advice, attaching a copy of their ID or legal identification document.

You will also have the right to file a claim with the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights.


On the other hand, in accordance with the provisions of Law 34/2002, of July 11th, on Services of the Information Society and Electronic Commerce, we promise not to send advertising through email without having previously obtained the express recipient’s authorization. The User may oppose the sending of advertising by checking the corresponding box.