Privacy policy

Privacy Policy

Last updated: July 2026

1. Introduction

GP Nutraceuticals S.r.l. ("GP Nutraceuticals", "we", "our" or the "Company") is committed to protecting the personal data of its customers, website visitors and users.

This Privacy Policy explains how we collect, use, store and protect personal data through our website, www.gpnutraceuticals.com, in accordance with Regulation (EU) 2016/679 ("GDPR") and other applicable European data protection legislation.

By using our website or purchasing our products, you acknowledge that you have read this Privacy Policy.

2. Data Controller

The Data Controller is:

GP Nutraceuticals S.r.l.

Strada Maggiore, 46

40125 Bologna

Italy

Email: info@gpnutraceuticals.com

3. Personal Data We Collect

While browsing or using our website, we may collect different categories of personal data.

Identification Data

First and last name
Email address
Telephone number
Billing and shipping address
Country and region

Order Information

When you place an order, we collect information such as:

purchased products;
order value;
payment method;
order status;
purchase history.

Payment information is processed directly by our payment service providers and is never stored on our systems.

Browsing Data

When you visit our website, we may automatically collect information including:

IP address;
browser type;
operating system;
device information;
pages visited;
duration of your visit;
traffic source;
interactions with the website.

Information You Voluntarily Provide

We may collect information that you choose to provide through:

contact forms;
newsletter subscriptions;
information requests;
customer account registration;
Google Sign-In.

4. Purpose of Processing

Your personal data are processed solely for lawful and legitimate purposes.

In particular, we use your data to:

manage orders;
process payments;
deliver products;
provide customer support;
respond to enquiries;
manage customer accounts;
improve website performance;
analyse website traffic;
prevent fraud and unlawful activities;
comply with legal and tax obligations;
send marketing communications where consent has been provided.

5. Legal Basis for Processing

We process personal data on one or more of the following legal bases:

performance of a contract;
compliance with legal obligations;
the data subject's consent;
the legitimate interests of the Data Controller.

6. Newsletter and Marketing Communications

With your consent, GP Nutraceuticals may send:

newsletters;
promotional offers;
educational content;
product updates;
information about promotions and special initiatives.

You may withdraw your consent at any time by using the unsubscribe link included in every email or by contacting us directly.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which they were collected or for the period required by applicable law.

Order-related information may be retained for the period required by tax and accounting regulations.

Personal data processed for marketing purposes will be retained until consent is withdrawn.

At the end of the applicable retention period, personal data will be securely deleted or anonymised unless a longer retention period is required by law.

8. Sharing of Personal Data

Personal data may be shared only with third parties that support GP Nutraceuticals in providing its services.

These include:

Shopify Inc.;
payment service providers;
courier and logistics companies;
cloud service providers;
legal and tax advisers;
Google LLC;
Meta Platforms Ireland Ltd.;
email marketing service providers.

These parties process personal data solely on our behalf and in compliance with applicable data protection legislation.

9. International Data Transfers

Some of the service providers used by GP Nutraceuticals may process personal data outside the European Economic Area (EEA).

Where this occurs, transfers are carried out in accordance with Articles 44 et seq. of the GDPR, using appropriate safeguards such as Standard Contractual Clauses or other legally recognised transfer mechanisms.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

unauthorised access;
loss;
destruction;
accidental disclosure;
alteration.

Our website uses secure HTTPS connections together with the security features provided by the Shopify platform.

11. Your Rights

Under Articles 15–22 of the GDPR, you have the right to:

obtain confirmation as to whether we process your personal data;
access your personal data;
request correction of inaccurate information;
request deletion of your personal data;
request restriction of processing;
object to processing;
receive your personal data in a portable format;
withdraw consent at any time;
lodge a complaint with your local data protection authority.

12. Cookies

Our website uses strictly necessary, analytical and, subject to your consent, marketing cookies.

For further information, please refer to our Cookie Policy.

13. Changes to this Privacy Policy

GP Nutraceuticals reserves the right to amend this Privacy Policy at any time to reflect legal, technical or organisational changes.

The latest version will always be published on this page together with the date of the most recent update.

14. Contact Us

If you have any questions regarding the processing of your personal data, please contact us at: