Privacy Policy — Eterna Lifestyle

1. Introduction

Eterna Lifestyle Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (eternallifestyle.com), enquire about our services, or become a client.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation. We are the data controller in respect of your personal data.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Full name, job title, company name
Contact Data: Email address, telephone number, postal address
Financial Data: Billing address, payment card type (last 4 digits only — full card details are processed by our PCI-DSS compliant payment processor and are never stored by us)
Transaction Data: Details of services purchased, invoice history, and payment records
Technical Data: IP address, browser type and version, time zone, browser plug-in types, operating system, and platform
Usage Data: Information about how you use our website, products, and services
Marketing Data: Your preferences for receiving marketing from us
Communications Data: Emails, messages, and other communications between us

We do not collect any special categories of sensitive personal data (e.g., health data, ethnic origin, political opinions, religious beliefs).

3. How We Collect Your Data

We collect data through the following methods:

Direct interactions: When you fill in our contact forms, request a strategy call, subscribe to our emails, or communicate with us
Automated technologies: As you interact with our website, we may collect Technical Data using cookies and similar tracking technologies (see our Cookie Policy)
Third parties: Analytics providers (Google Analytics), payment processors (Stripe), CRM platforms, and advertising platforms

4. How We Use Your Data

We use your personal data for the following purposes and under the following lawful bases:

Contract performance: To provide and invoice for our Services, manage your account, and fulfil our contractual obligations
Legitimate interests: To improve our website and services, prevent fraud, conduct analytics, and send you service-related communications
Compliance with legal obligations: To comply with tax, regulatory, and financial reporting requirements
Consent: To send you marketing communications (where you have opted in). You may withdraw consent at any time

5. Payment Data & PCI Compliance

We take the security of financial data extremely seriously. All payment card transactions are processed by our third-party payment processor, which is certified to PCI DSS (Payment Card Industry Data Security Standard) Level 1 — the highest level of security certification. We do not store, process, or transmit full card numbers on our servers. Your payment data is encrypted and handled exclusively within the payment processor's secure environment.

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted service providers acting as data processors on our behalf, including:

Payment processors (e.g., Stripe)
CRM and marketing automation platforms (e.g., HubSpot, Klaviyo)
Cloud hosting providers
Analytics providers (e.g., Google Analytics)
Professional advisors (accountants, lawyers) under confidentiality obligations

All third-party processors are contractually bound to handle your data securely and only for specified purposes.

We may disclose your data to authorities where required by law, court order, or regulatory requirement.

7. International Transfers

Some of our service providers may be located outside the UK or European Economic Area (EEA). Where we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

Client and transaction records: 7 years (for legal and tax compliance)
Marketing data: Until you unsubscribe or withdraw consent
Website analytics data: 26 months
Communications: 3 years from last interaction

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data (subject to legal retention obligations)
Right to restrict processing: Request that we limit how we use your data
Right to data portability: Request your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: Rights not to be subject to solely automated decisions with legal or significant effects

To exercise any of these rights, contact us at Info@eternalifestyleltd.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include SSL/TLS encryption, access controls, regular security assessments, and staff training.

11. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for full details.

12. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of our Services following the update constitutes acceptance of the revised Policy.

14. Contact Us

For any privacy-related queries or to exercise your rights:
Eterna Lifestyle Ltd
Email: Info@eternalifestyleltd.com