Privacy policy
Last updated: 2 August 2026
This Privacy Policy explains how we collect, use, share and protect your personal information when you visit slimfitnut.com (the "Site"), purchase a meal plan or other digital product, or otherwise communicate with us (together, the "Services").
Please read it carefully. If anything is unclear, email us at hello@slimfitnut.com and we will explain it in plain language.
1. Who We Are
Slim Fit Nutrition is operated by SIA "MULSE TRADING", a company registered in Latvia.
- Registration number: 40203096158
- Address: Baltā iela 1B, Rīga, LV-1050, Latvia
- Email: hello@slimfitnut.com
For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, SIA "MULSE TRADING" is the data controller of your personal information. We are not required to appoint a Data Protection Officer, but all privacy questions are handled directly at the email address above.
2. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised version on the Site and update the "Last updated" date. Where a change materially affects how we use information you have already given us, we will notify you by email before it takes effect.
3. What Information We Collect
3.1 Information you give us directly
- Contact details — your name, email address and, where you provide it, your phone number.
- Order information — billing address, order contents, payment confirmation and transaction reference. We never see or store your full card number; this is handled by our payment processors.
- Meal plan questionnaire — the answers you submit after purchasing a personalised meal plan. Depending on the questions, this includes health information such as digestive symptoms, food allergies and intolerances, diagnosed conditions and medications, together with details such as age, height, weight, activity level, food preferences and daily routine. See Section 4.
- Correspondence — whatever you choose to include when you email us or use a form on the Site.
- Applications — information you submit through our VIP application or partner forms.
3.2 Information collected automatically
When you use the Site we collect usage data through cookies, pixels and similar technologies: your IP address, device and browser type, referring page, the pages you view, how you interact with them, and the advertisement or link that brought you to us. See Section 8.
3.3 Information from third parties
- Shopify Inc., which hosts our store and provides order and analytics data.
- Payment processors, which confirm your payment and provide limited billing details so we can fulfil your order.
- Advertising and analytics platforms (such as Meta and Google), which provide aggregated campaign and audience data where you have consented to their cookies.
4. Health Information
Under Article 9 GDPR, health information is a special category of personal data that receives extra protection. We treat your questionnaire answers accordingly.
- We only collect it if you buy a personalised meal plan. Browsing the Site, buying a general guide or subscribing to our emails does not involve health information.
- Our legal basis is your explicit consent under Article 9(2)(a) GDPR, given through the separate consent checkbox on the questionnaire. Without it we cannot create your plan.
- We use it for one purpose only — creating and delivering your personalised meal plan and answering your questions about it. We never use health information for marketing, advertising targeting, audience building or profiling, and we never sell or share it with advertising partners.
- You can withdraw your consent at any time by emailing hello@slimfitnut.com. We will delete your questionnaire answers within 30 days. Withdrawal does not affect processing that already took place, and does not entitle you to a refund for a plan already delivered.
- We delete it on a schedule. Questionnaire answers and the plan built from them are deleted 6 months after delivery. See Section 10.
Important: our meal plans are nutrition guidance, not medical advice, diagnosis or treatment. They are not a substitute for consulting a doctor or a registered dietitian, particularly if you have a diagnosed medical condition, are pregnant or breastfeeding, or are taking prescribed medication.
5. AI and Automated Processing
We think you should know exactly where artificial intelligence sits in what we do — and where it does not.
Your meal plan is created by a qualified nutritionist. We do not use AI to generate meal plans. No decision concerning you is based solely on automated processing within the meaning of Article 22 GDPR, and you are never profiled or scored by an algorithm.
We use AI-assisted tools in a limited supporting role only: to proofread finished plans for grammar and language, and to verify that units and measurements are stated correctly. Before a plan is submitted to these tools we remove your name, email address and other details that directly identify you.
Where personal data is nevertheless involved, these tools are operated by providers located outside the European Economic Area. Such transfers are covered by the European Commission's Standard Contractual Clauses, and these providers are contractually prevented from using the data to train their models.
Our published content — blog articles and marketing emails — is drafted with AI assistance and then reviewed, edited and fact-checked by a qualified nutritionist, who holds editorial responsibility for the text as published.
Images — the food images in our meal plans and marketing are photographs of dishes we have actually prepared ourselves. AI image tools are sometimes used to edit those photographs or to create additional illustrative visuals. Any AI-generated image is illustrative only and never depicts a real person.
The Site itself — its design, layout and underlying code — is also developed with the help of AI tools. This is purely a design and development activity and does not involve your personal information in any way.
You are welcome to ask us at hello@slimfitnut.com how AI was used in preparing anything you received from us.
6. Why We Use Your Information, and Our Legal Basis
| Purpose | Information used | Legal basis (GDPR) |
|---|---|---|
| Delivering the product you bought, including creating your personalised plan and answering related questions | Contact details, order information, questionnaire answers | Performance of a contract — Art. 6(1)(b); for health information, explicit consent — Art. 9(2)(a) |
| Processing payments and preventing fraudulent transactions | Order information, IP address, device data | Performance of a contract — Art. 6(1)(b); legitimate interests in protecting our business — Art. 6(1)(f) |
| Customer support and correspondence | Contact details, correspondence, order information | Performance of a contract — Art. 6(1)(b); legitimate interests in being responsive — Art. 6(1)(f) |
| Sending marketing emails and newsletters | Name, email address, engagement data | Consent — Art. 6(1)(a). You can unsubscribe from any email |
| Advertising, retargeting and measuring campaign performance | Usage data, cookie and pixel identifiers | Consent — Art. 6(1)(a), given through our cookie banner |
| Analytics, and improving the Site and our products | Usage data, aggregated order data | Consent for non-essential analytics cookies — Art. 6(1)(a); otherwise legitimate interests — Art. 6(1)(f) |
| Site security and abuse prevention, including spam protection on our forms | IP address, device and browser data | Legitimate interests in keeping the Site secure — Art. 6(1)(f) |
| Keeping accounting and tax records | Order and transaction information | Compliance with a legal obligation — Art. 6(1)(c) |
| Establishing, exercising or defending legal claims | Whatever is relevant to the claim | Legitimate interests — Art. 6(1)(f); for health information, Art. 9(2)(f) |
Where we rely on legitimate interests, we have assessed that our interest does not override your rights and freedoms. You may object to this processing at any time — see Section 11.
7. Who We Share Your Information With
We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.
We share information with service providers who process it on our behalf, under written data processing agreements:
| Category | Examples | What they receive |
|---|---|---|
| E-commerce platform and hosting | Shopify Inc. | Order and account information, usage data |
| Payment processing | Shopify Payments, PayPal and similar providers | Payment and billing information |
| Email delivery and marketing | Klaviyo | Name, email address, order and engagement data |
| Advertising and analytics | Meta, Google, TikTok | Cookie identifiers and usage data, where you have consented |
| Spam and abuse protection on forms | hCaptcha | IP address and device data |
| AI-assisted proofreading | Providers of large language model services | Plan text with direct identifiers removed — see Section 5 |
We may also disclose information where we are legally required to do so, to enforce our terms, to protect our rights or the rights of others, or in connection with a merger, acquisition or insolvency.
8. Cookies and Similar Technologies
Cookies are small files stored on your device. We use:
- Strictly necessary cookies, which make the Site work — your cart, checkout, security and load balancing. These cannot be switched off.
- Analytics cookies, which tell us how the Site is used so we can improve it.
- Advertising cookies and pixels, which measure the performance of our advertising and allow us to show you relevant ads on other platforms.
If you are in the EEA or the UK, analytics and advertising cookies are only set after you consent through our cookie banner. You can change or withdraw your choice at any time through the cookie settings link on the Site, and you can block or delete cookies through your browser settings. Blocking cookies may cause parts of the Site to stop working correctly.
For details of the cookies used to power our store on Shopify, see shopify.com/legal/cookies. Our Site does not respond to browser "Do Not Track" signals.
9. International Transfers
We are based in Latvia and your information is primarily processed within the European Economic Area. Some of our service providers — including Shopify, Klaviyo, Meta, Google and the AI tools described in Section 5 — are located in or transfer data to countries outside the EEA, principally the United States.
Where this happens, we rely on the European Commission's Standard Contractual Clauses, the EU–US Data Privacy Framework where the provider is certified, or an adequacy decision covering the destination country. You can request a copy of the safeguards we rely on by emailing us.
10. How Long We Keep Your Information
| Information | Retention period |
|---|---|
| Meal plan questionnaire answers, including health information, and the plan created from them | 6 months after the plan is delivered, then deleted |
| Order, invoice and accounting records | 5 years from the end of the relevant financial year, as required by Latvian accounting and tax law |
| Customer support correspondence | 24 months from the last message |
| Marketing contact details | Until you unsubscribe or ask us to delete them; we then keep a minimal suppression record so we do not email you again |
| Website analytics and cookie data | Up to 14 months, or the shorter period set by the provider |
We may keep information for longer where necessary to establish, exercise or defend a legal claim, and only for as long as that claim is live.
11. Your Rights
If you are in the EEA or the UK, you have the following rights. They are not absolute and may not apply in every case.
- Access — obtain confirmation of whether we process your information and receive a copy of it.
- Rectification — have inaccurate or incomplete information corrected.
- Erasure — have your information deleted where there is no continuing lawful reason to keep it.
- Restriction — ask us to pause our use of your information while a dispute is resolved.
- Portability — receive information you provided to us in a structured, machine-readable format, or have it sent to another controller.
- Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdrawal of consent — withdraw consent at any time, including your explicit consent for health information, without affecting processing already carried out.
- Automated decision-making — not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. As explained in Section 5, we do not make such decisions.
To exercise any of these rights, email hello@slimfitnut.com. We will respond within one month; if your request is complex we may extend this by a further two months and will tell you why. We may ask you to confirm your identity before we act, and we will never treat you less favourably for exercising your rights.
12. Complaints
If you are unhappy with how we have handled your information, please contact us first — we would rather fix it directly. You also have the right to lodge a complaint with a data protection authority.
Our lead supervisory authority is the Latvian Data State Inspectorate:
- Datu valsts inspekcija, Elijas iela 17, Rīga, LV-1050, Latvia
- www.dvi.gov.lv — pasts@dvi.gov.lv
You may also complain to the authority in your own country of residence. A list of EEA authorities is available here. In the UK, contact the Information Commissioner's Office at ico.org.uk.
13. Security
We use appropriate technical and organisational measures to protect your information, including encrypted transmission, access controls, two-factor authentication on the accounts we use to run the business, and limiting access to health information to the nutritionist preparing your plan.
No system is completely secure, and information sent to us over the internet is never entirely risk-free. Please do not send us sensitive information through insecure channels such as social media direct messages. If a data breach is likely to result in a high risk to your rights, we will notify you without undue delay.
14. Children
Our Services are intended for adults and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with their information, contact us and we will delete it.
15. Third-Party Sites and Public Content
The Site may link to websites operated by others, including social media platforms. We are not responsible for their content, privacy practices or security — please review their own policies before sharing information with them.
If you post a review or other content in a public area of the Services, it will be visible to others and we cannot control how it is used once published.
16. Residents Outside the EEA and the UK
Wherever you live, we apply the standards described in this Policy to your information. Depending on your jurisdiction you may have additional or different rights — for example rights to know, delete, correct or opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under United States state privacy laws, and we do not use or disclose sensitive personal information for purposes of inferring characteristics about you. To exercise any right available to you, contact us using the details below.
17. Contact
For any question about this Privacy Policy, our privacy practices, or to exercise your rights:
SIA "MULSE TRADING" (trading as Slim Fit Nutrition)
Registration number 40203096158
Baltā iela 1B, Rīga, LV-1050, Latvia
hello@slimfitnut.com