Privacy Policy

We use different methods to collect data from and about you including through: direct interactions; you may give us your identity, contact data by filling in forms or by corresponding with us by post, phone, e-mail or through contact us or social media. This includes personal data you provide when you:

• sign up to receive а Newsletter and/or eBook;
• become a client/user on our website/app;
• enrol in a group program;
• purchase a home study program online;
• engage with us on social media;
• enter a business education, online courses and classes, promotion or survey;
• leave comments or reviews on our products or services.

By providing your mobile phone number and opting in to receive SMS messages from us, you consent to receive promotional and transactional SMS messages from Heart-Core Living. We may use an automated system to deliver SMS messages to the mobile number you provide. You may opt-out of receiving SMS messages at any time by replying with the keyword “STOP” to the received message or by contacting us directly.

We value your shopping experience and aim to provide a personalized service. To enhance this, we may capture information through website cookies, plugins, or other similar technologies to determine when a customer’s cart has been abandoned. This allows us to send SMS reminders or offers related to the abandoned cart items. Rest assured, we handle your personal information with care and in accordance with our Privacy Policy.

According to Art. 13 of GDPR, we inform our users about the purposes of processing personal data. The prime purpose of collecting your data is to provide users with services offered by our website/app, whether that’s using our website/app to find information, to contact us, to enter into training program, or for some other reason. No matter how you use our website, our aim is to allow you to interact with it as effortlessly as possible.

Other purposes for processing personal data are as follows: to provide users with our services and offer them our products; for subscription to our enterprise’s newsletters; for registration of new user; to manage the relationship between us and the user (notification of changes of these Terms and Conditions, requesting of feedback, etc.); to administrate and protect our business and the information on our website/app (including data analysis, testing, system maintenance, support, reporting and hosting of data); to use data analytics to improve our website, products and services, customer relationships and experience.

In accordance with GDPR requirements, every user who falls in the scope of personal data Regulation, has:

• Right to receive a copy of your personal data held by the Company and access to personal data;
• Right to rectification;
• Right to erasure (‘right to be forgotten’);
• Right to restriction of processing;
• Right to data portability (the right to transmit personal data to another controller without hindrance from the controller to which the personal data have been provided);
• Right to object;
• Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

You are not required to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances. These are our rights in accordance with GDPR.

Above-listed data subjects’ rights are subject to certain exceptions and exclusions, and we may be unable to comply in full with your request.

In case of users request to exercise any of the above listed rights, they are entitled to contact us on the following e-mail address: ula@heartcorewoman.com

We will provide the requested information within one month of receipt of the request. In rare cases, that period may be extended by two further months where necessary, taking into account the complexity and number of the requests. Of course, the users will be informed about that. If we have reasonable doubts concerning the identity of the natural person making the request, we may request the provision of additional information necessary to confirm the identity of the data subject.

Users have the right to file a complaint at any time with the supervisory authority for data protection issues. However, we would appreciate the opportunity to resolve all concerns before you approach the authority, so please consider contacting us first.

Art. 6 (1) lit. b, c, d, f GDPR serve as legal basis to process users’ personal data. Art. 6 (1) lit. b GDPR – for the performance of a contract to which the user is party or in order to take steps at the request of the user prior to entering into a contract. If the processing of personal data is necessary for the performance of a contract to which the user is party, as is the case, for example, when processing operations are necessary for the supply of products or to provide any other service, the processing is based on Article 6 (1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Art. 6 (1) lit. c GDPR – for compliance with a legal obligation to which we are subject. Art. 6 (1) lit. d GDPR – to protect vital interests of the user or of another natural person. This would be the case, for example, if a visitor were injured in our Company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR.  Article 6 (1) lit. f GDPR – this legal basis is used if processing is necessary for the purposes of the legitimate interests pursued by our Company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller or for direct marketing purposes (Recital 47 GDPR).

We do not rely on your consent as a legal basis to process your personal data. Your personal data may be processed for more than one lawful ground, depending on the specific purpose for its use. Please contact us at ula@heartcorewoman.com if you require additional information.

If you choose not to provide the personal information we request, you can still visit most areas of our website but you may be unable to access certain options and services. You have the final decision on whether to proceed with any activity that requests personal information.

In some cases, the collection of personal data may be a statutory or contractual requirement, and we will be limited in the services we can provide you if you don’t provide your personal data – for example, if you do not provide us with your personal data, you will not be able to enter into new training program. We will let you know how this will affect you at the time.

Users’ personal data will be retained only as long as necessary to fulfil the purpose(s) for which it was collected, including legal, accounting, or reporting requirements. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.