// COMPLIANCE

Policy on Privacy

Last updated: July 11, 2026

A INSYGMA NUTRITION, LDA respects your privacy. This Policy explains what personal data we process, for what purposes, with whom it may be shared, how long it is retained, and how you can exercise your rights.

1. Data controller

Company: INSYGMA NUTRITION, LDA
Company Tax ID: 518915077
Thirst: Rua do Pedroso, lote 6, 4700-793 Parada de Tibães, Braga, Portugal
E-mail: info@insygma.com
Phone: +351 917 532 809 — call to the Portuguese national mobile network

2. What personal data do we process?

2.1. Identification and contact details

Name, email, telephone number, billing and delivery addresses, country, tax identification number where provided, and data associated with the customer account.

2.2. Orders and payments

Products, amounts, discounts, payment method and status, delivery, returns, refunds, and transaction references. Full card details are processed directly by the payment provider and are not stored by INSYGMA.

2.3. Communications and content

Support messages, complaints, forms, reviews, photographs, and other content that you submit voluntarily.

2.4. Technical data

IP address, browser, device, language, date and time, security logs, and, where the relevant cookie categories are authorized, pages visited, interactions, and source of the visit.

2.5. Marketing and preferences

Consents, objections, subscriptions, communication preferences, and campaign interactions.

2.6. Health-related data

We do not request health data during the normal purchasing process. Please do not include diagnoses, clinical information, or other sensitive data in reviews, forms, or messages unless strictly necessary to handle a specific request.

3. Purposes and legal bases

Purpose	Legal basis
Manage the cart, order, payment, delivery, return, and support related to the purchase	Performance of the contract or steps taken prior to entering into a contract
Issue invoices, retain records, and respond to authorities	Legal obligations
Create and manage the customer account and respond to support requests	Performance of the contract and legitimate interest in managing the customer relationship and providing support
Protect the site and prevent fraud, abuse, and unauthorized access	Legitimate interest in the security of the business and users; legal obligation where applicable
Send newsletters and campaigns	Consent or, where legally permitted, communication to customers regarding our own similar products or services, with a free means of opting out when the data is collected and in every message
Use analytics, advertising, and campaign-measurement tools	Prior consent
Link promotional codes to affiliate accounts and calculate commissions	Performance of the contract with the affiliate, legal obligations, and legitimate interest in fraud prevention and program management. We do not use affiliate cookies.
Publish and moderate reviews or submitted content	Performance of the terms applicable to the content, consent where necessary, and legitimate interest in managing authentic reviews and protecting the community

Where we rely on legitimate interests, we assess the necessity of the processing and its impact on data subjects’ rights and expectations.

4. Who do we share data with?

We share only the necessary data with:

Hosting, security, maintenance, and technical infrastructure providers
Payment providers available at checkout
Carriers and logistics operators
Email and automation tools, such as Omnisend when used
Analytics and advertising platforms, such as Google and Meta, where consent has been given
Review, customer support, fraud-prevention, accounting, and professional advisory service providers
Public, judicial, tax, or regulatory authorities where required by law

These entities may act as INSYGMA’s processors or as independent controllers, depending on the service. We do not sell personal data.

5. Cookies, analytics, and advertising

Optional analytics, advertising, and measurement technologies remain disabled until authorized. Where consent is given, we may transmit events related to site use and orders to the selected platforms, such as page views, additions to cart, checkout initiation, and purchases.

After refusal, only technical processing that is strictly necessary for operation, security, fraud prevention, and the transmission of communications remains active.

See the Cookie Policy. You can change or withdraw your choices through the cookie management panel available on the site.

6. International transfers

Some providers may process data outside the European Economic Area. Where this occurs, we use an appropriate legal mechanism, such as an adequacy decision, the EU–US Data Privacy Framework where applicable, or Standard Contractual Clauses approved by the European Commission.

You can request additional information about the safeguards used by contacting info@insygma.com.

7. Data retention

Invoices and tax documentation: for the applicable statutory period, generally 10 years
Customer account: while the account remains active or until deletion is requested, without prejudice to records that must be retained by law
Support, complaints, and returns: for the period necessary to handle the request and defend legal rights
Security and fraud prevention: for the period necessary for the purpose and, as a rule, for up to 12 months, unless an incident or legal obligation applies
Marketing: until consent is withdrawn or an objection is made; we may retain a minimal record to honor that decision
Analytics and advertising: according to the authorized settings and the periods stated in the Cookie Policy
Reviews and content: while they remain published or are necessary for the authorized purpose

8. Your rights

Under applicable law, you may request:

Access to and a copy of your data
Rectification of inaccurate or incomplete data
Erasure, where there is no legal basis for retention
Restriction of processing
Data portability, where applicable
Object to processing based on legitimate interests
Object, at any time and free of charge, to direct marketing
Withdrawal of consent, without affecting prior processing

Send your request to info@insygma.com. We may request information that is strictly necessary to confirm your identity. We respond within the statutory time limit.

You can also lodge a complaint with the Portuguese Data Protection Authority.

9. Automated decision-making

INSYGMA does not make decisions based solely on automated processing that produce legal effects or significantly affect the user. Payment or fraud-prevention providers may carry out checks in accordance with their respective policies.

10. Security

We apply technical and organizational measures appropriate to the risk, including access controls, data minimization, protection of communications, backups, and incident-response procedures.

11. Minors

The store is not intended for contracts with persons under the age of 18. If we identify a minor’s data being processed without an appropriate legal basis, we will take the necessary steps to delete it or regularize the processing.

12. Updates

We may update this Policy for legal, technical, or operational reasons. Material changes will be communicated through an appropriate channel. The effective version date appears at the top of the page.

11. Contact

E-mail: info@insygma.com
Phone: +351 917 532 809
Address: Rua do Pedroso, lote 6, 4700-793 Parada de Tibães, Braga, Portugal