Last updated: 30 September 2026.
1. Who is responsible for your data
HerbaOnline UK is run by Mark Bruin (Mark & Keely), Independent Herbalife Member (Herbalife member ID 2808450975). In these pages “we”, “us” and “our” mean this business.
- Registered office: Hanzeweg 31, 7418 AV Deventer, Netherlands
- UK correspondence address: European Business Centre, Riverside View - Thornes Lane, Wakefield WF1 5QW, United Kingdom
- Company registration: 08132353 · VAT: NL002198343B76
- Email: info@herbalmail.com
- This shop serves: the United Kingdom, in GBP
We are the controller of the personal information described here. For any privacy question or request, email info@herbalmail.com.
2. What we collect
- Account details: your name and email address when you register, sign-in information and the account settings you choose. Registering is free and lets you see customer prices.
- Order details: delivery and invoice names and addresses, email address, phone number, the products you buy, prices, delivery charges, HerbaPoints earned and used, and your order history.
- Payment information: the payment method used and the payment status and reference we receive from the payment provider. We never receive or store your full card number.
- Messages: what you send us through the contact form, by email or WhatsApp.
- Activity when signed in: pages, products and cart steps you use, browser and device type, the site that referred you, and a protected (hashed) summary of your IP address.
- Technical and security data: IP address, browser details and times of requests, kept in server and security logs, for example to protect sign-in.
3. Why we use it, and our legal basis
- To run your account and process, deliver and support your orders, including payments, refunds and returns. Basis: the contract with you, and steps you ask us to take before an order.
- To keep financial and tax records. Basis: our legal obligations.
- To keep the shop secure and prevent fraud and misuse. Basis: our legitimate interests in protecting customers and the business.
- To answer your questions and complaints. Basis: the contract with you, or our legitimate interest in helping you.
- To understand how signed-in customers use the shop and improve it (activity records). Basis: our legitimate interest in running and improving the shop; see our Cookies information for the cookie involved.
- To send you emails about our products and offers. Basis: our legitimate interest in keeping in touch with registered customers about similar products where the law allows this, otherwise your consent. You can opt out at any time (see section 4).
4. Emails from us
- We send service emails you need, such as sign-in links, account activation and order confirmations.
- We may also send reminders (for example about an unfinished order) and occasional emails about products and offers.
- Every marketing or reminder email has an unsubscribe link. You can also email us to stop them. We keep a record of your opt-out so that we can respect it.
- We do not send SMS marketing.
5. Who helps us and who receives your data
We do not sell your personal information. We share it only with those who help us run the shop, and only as far as they need it:
- Stripe processes card and Klarna payments, and Klarna handles its pay-later services. PayPal processes PayPal payments. They act under their own privacy notices for their payment and fraud-prevention checks.
- Mailchimp (Intuit) sends our service, reminder and marketing emails and manages unsubscribes.
- The warehouse and delivery companies that fulfil and deliver your order receive your name, delivery address and, where needed, phone number.
- Our website hosting provider stores the shop’s data on our behalf.
- Google Fonts: when a page loads, your browser fetches the shop’s fonts from Google, which receives your IP address.
- Authorities, courts or advisers where the law requires it, or to establish or defend legal claims.
6. International transfers
Some of these providers process data outside the United Kingdom, for example in the United States. Where they do, the transfer relies on recognised safeguards, such as an adequacy decision or standard contractual clauses.
7. How long we keep it
- Account details: while your account is active. You can ask us to close it.
- Orders, invoices and payment records: as long as tax and accounting law requires.
- Activity records: for a limited period, after which they are deleted or only kept in summarised form.
- Messages and complaints: as long as needed to deal with them and any follow-up.
- Opt-out records: for as long as needed to respect your choice.
8. Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask us to:
- give you a copy of your personal information;
- correct it;
- delete it;
- restrict our use of it;
- transfer it to you or another organisation.
You can also object to our use of it based on legitimate interests, and you can always object to direct marketing. Where we rely on your consent, you can withdraw it at any time.
Email info@herbalmail.com. We may need to confirm your identity, and we reply within one month.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to a data protection authority, for example the Information Commissioner’s Office (ICO) in the UK. Our business is established in the Netherlands, where the authority is the Autoriteit Persoonsgegevens.
9. Children
The shop is for adults. We do not knowingly collect information from children.
10. Security
We use secure (HTTPS) connections, protected sign-in and access controls, and trusted providers for payments. No system is completely secure, so please keep your sign-in details private.
11. Cookies
Our Cookies information explains the cookies and similar technologies we use and how you can control them.
12. Changes
We will update this policy when our processing changes. The date at the top shows the latest version.
Related: Terms & Conditions · Cookies · Delivery & returns · Contact us