Privacy Policy

Introduction

Quaro S.A. ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website quaro.top or use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

Data Controller Information

The data controller responsible for your personal data is Quaro S.A., a company registered in Belgium with registration number 987465123, VAT number BE985314752, located at Diestsestraat 197, 5043 Namur, Wallonia, Belgium.

Data We Collect

The data we collect from you may include the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Health Information: Health goals, current supplements, dietary restrictions, medical history relevant to our services
• Communication Data: Records of correspondence and communications with us
• Technical Data: IP address, browser type, device information, website usage data
• Marketing Data: Your preferences regarding marketing communications

How We Use Your Information

We use of your data for the following purposes based on legitimate business interests and legal obligations:

• To provide personalised vitamin and supplement guidance and recommendations
• To communicate with you about our services and respond to your inquiries
• To process and fulfil service requests and consultations
• To improve our website functionality and user experience
• To send you relevant health and wellness information (with your consent)
• To comply with legal obligations and protect our legitimate business interests
• For analytics and website optimisation purposes

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: (a) Consent - where you have given clear consent for us to process your personal data for specific purposes; (b) Contract - where processing is necessary for the performance of a contract with you; (c) Legal obligation - where processing is necessary for compliance with legal obligations; and (d) Legitimate interests - where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: with your explicit consent; with trusted service providers who assist us in operating our website and conducting our business (under strict confidentiality agreements); when required by law or to protect our rights, property, or safety; or in connection with a business transfer, merger, or acquisition (with appropriate safeguards in place).

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Generally, we keep client consultation records for 7 years after the last contact, marketing consent records until withdrawn, and website usage data for 26 months. When we no longer need your personal data, we will securely delete or anonymise it.

Your Rights

Under GDPR and applicable data protection laws, your rights include:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Rights Related to Automated Decision Making: Protection against solely automated decision-making

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we need to transfer your data outside the EEA, we will ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. Your continued use of our services after such modifications constitutes your acknowledgment and acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

Supervisory Authority

You have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) if you believe your data protection rights have been violated. You can contact them at www.dataprotectionauthority.be or by post at Rue de la Presse 35, 1000 Brussels, Belgium.