Privacy Policy

The party responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR):

Wise Lifestyle LTD
36 St Dminka Street
Victoria (Gozo), VCT9030, Malta
Registry: Malta Business Registry · Reg. No. C 92030
Email: mail@wise-lifestyle.com

We treat your data confidentially and in accordance with the provisions of the GDPR as well as supplementary data protection laws. This policy describes which data we collect, for what purpose and on what legal basis. In principle, you can also use this website without providing any personal data.

3.1 When Visiting the Website

On each visit, our web host (Vercel Inc., USA) automatically records what are known as server log files: IP address, timestamp, page accessed, browser type and referrer. This data serves exclusively for the technical provision and security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Storage period: a maximum of 30 days.

3.2 Symptom Sign-up

When you register to read further symptom texts, we store your email address, optionally your name, and an encrypted (hashed) password. These data are held in our application database at Supabase Inc. (data centre in Ireland, EU) and processed for customer management in Zoho CRM (EU data centre). Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Storage period: until the account is deleted.

3.3 Newsletter

With your consent, we send the BodySignal newsletter via Zoho Campaigns (EU data centre). You can withdraw your consent at any time using the unsubscribe link in every email. Legal basis: Art. 6(1)(a) GDPR.

3.4 Payment Processing

Purchases are processed via Stripe Payments Europe Ltd. (Ireland). Stripe receives payment data directly from you; we store only the purchase confirmation. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Storage period: statutory retention obligations (10 years for tax-relevant records).

3.5 Reading Progress and Bookmarks

Your reading progress and saved symptoms are stored locally in your browser (localStorage and sessionStorage) — they do not leave your device until you register.

3.6 Audience Measurement with Google Analytics

Only if you allow the “Marketing” category in the cookie notice do we load Google Analytics 4 (Google Ireland Ltd., Dublin). Google then processes truncated IP addresses, page views and events such as sign-up, voucher redemption and purchase. A transfer to Google LLC in the USA is possible and is safeguarded by the guarantees recognised by the EU Commission (adequacy decision and standard contractual clauses). Legal basis: Art. 6(1)(a) GDPR (consent), revocable at any time via “Cookie settings” in the footer. Without your consent, no Google script is loaded.

3.7 Protection against Automated Requests

Our forms (contact, sign-in, account creation, voucher, newsletter, applications) check on the server whether an entry comes from a human: invisible check fields, timing, origin of the request and a rate limit per sender. For this purpose we store, for a maximum of 30 days, a non-reversible check value (hash) of your IP address and the normalised email address. On the sign-in pages we additionally use Cloudflare Turnstile (Cloudflare Inc., USA, EU standard contractual clauses); Turnstile checks technical browser characteristics in the background and sets no cookies for advertising purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against abuse).

3.8 Audio Versions of the Texts

The audio files are hosted on Cloudflare R2 (Cloudflare Inc., USA, EU standard contractual clauses). When you play a file, Cloudflare receives your IP address to deliver it; no account data is transmitted. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

We use cookies in three categories:

• Necessary: Login session, security token, payment status. The website does not function without these.
• Functional: Reading progress, bookmarks, language settings.
• Marketing: Anonymous statistics (click paths, time spent) and advertising pixels from Meta — only with your express consent.

You can change or withdraw your cookie choices at any time via the „Cookie settings" link in the footer.

We pass your data on exclusively to the following recipients, who are themselves bound to confidentiality (processors under Art. 28 GDPR):

• Vercel Inc. (hosting, USA — EU standard contractual clauses)
• Stripe Payments Europe Ltd. (payment processing, Ireland)
• Zoho Corporation (CRM and newsletter, EU data centre)
• ZeptoMail (email delivery, EU data centre)
• Supabase Inc. (application database, data centre Ireland — EU)
• Cloudflare Inc. (audio delivery R2 and abuse protection Turnstile, USA — EU standard contractual clauses)
• Google Ireland Ltd. (audience measurement Google Analytics 4 — only with your consent)

Under the GDPR, you have the following rights in relation to us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal email to mail@wise-lifestyle.com is sufficient.

We store personal data only for as long as is necessary for the respective purpose or for as long as a statutory retention obligation exists. Once the purpose ceases to apply or the period expires, the data is deleted or anonymised.

Transmission is encrypted (TLS 1.3). Only authorised staff have access to personal data. Passwords are stored in hashed form (bcrypt).

This privacy policy may be adapted if legal requirements or our processes change. The version currently in force is available on this page.