Privacy Policy
Last updated: January 8, 2026
1. Data We Collect
Information you provide:
- Account details (name, email, age)
- Health information (goals, medical conditions, supplements)
- Dietary preferences and allergies
- Lifestyle information (exercise, sleep, stress)
Data collected automatically:
- Device and browser information
- IP address and location
- Usage statistics and interactions
- Cookies and similar technologies
2. How We Use Your Data
We use your data to:
- Provide personalized wellness recommendations
- Check for interactions and contraindications
- Improve the accuracy of our recommendations
- Communicate about the service
- Analyze and improve the platform
- Comply with legal obligations
3. Data Protection
We take your data security seriously:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest
- Access: Strict access control and authentication
- Servers: Secure servers in ISO-certified data centers
- Monitoring: 24/7 monitoring for security threats
- Backups: Regular backups in secure locations
4. Data Sharing
We do NOT sell or rent your personal data.
We may share data only:
- With service providers that help us operate the platform (cloud hosting, analytics)
- When required by law or to protect rights
- With your explicit consent
All third-party providers sign data processing agreements (DPA) and are GDPR-compliant.
5. Your Rights (GDPR)
You have the following rights regarding your personal data:
- Access: View what data we have about you
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a structured format
- Restriction: Limit processing of your data
- Objection: Object to certain processing
- Withdraw consent: Revoke your consent at any time
To exercise any right, visit the Privacy Center in your account settings or contact us.
6. Cookies and Tracking
We use cookies for:
- Essential cookies: For platform functionality (session, security)
- Analytics cookies: To understand usage and improve the service
- Preference cookies: To save your settings
You can manage cookie preferences in your browser settings.
7. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. After account deletion, data is deleted within 30 days, unless there is a legal obligation to retain it.
8. Children's Rights
THERAPEA is not intended for use by individuals under 18 years of age. If we discover we have collected data from a minor, we will delete it immediately.
9. Changes to this Policy
We may update this Privacy Policy occasionally. Significant changes will be communicated via email and posted on the platform. Continued use after changes constitutes acceptance of the new policy.
10. Contact & DPO
For questions about the Privacy Policy or to exercise your rights:
HERBALLIS - Data Protection
DISTOMOU 1, 18532, PIRAEUS, GREECE
Email: info@herballis.com
Tel: +30 210 49 16 282
You also have the right to lodge a complaint with the Hellenic Data Protection Authority if you believe your data processing violates GDPR.