At Designed Healthy Living INC, d/b/a Biblical Nutrition Academy ("us", "we", "our" or the "Company") we value your privacy and the importance of safeguarding your data. This Privacy Policy (the "Policy") describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data ("Personal Data") refers to any information that on its own, or in combination with other available information, can identify an individual.
We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations under the below regulations:
- Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial legislations
- Quebec Law 25
- the EU's General Data Protection Regulation (GDPR)
- Brazil’s Data Protection Legislation (LGPD)
- California's Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
- Colorado Privacy Act (CPA)
- Utah Consumer Privacy Act (UCPA)
- Connecticut Data Privacy Act (CTDPA)
- Virginia Consumer Data Protection Act (VCDPA)
- South Africa’s Protection of Personal Information Act (POPIA)
Scope
This policy applies to the Designed Healthy Living INC websites, domains, applications, services, and products.
This Policy does not apply to third-party applications, websites, products, services or platforms that may be accessed through (non-Designed Healthy Living INC) links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third-party’s own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.
Processing Activities
This Policy applies when you interact with us by doing any of the following:
- Make use of our application and services as an authorized user
- Visit any of our websites that link to this Privacy Statement
What Personal Data We Collect
When you make a purchase, or attempt to make a purchase, we collect the following types of Personal Data:
This includes:
- Account Information such as your name, email address, and password
- Payment Information such as your billing address, phone number, credit card, debit card or other payment method
- Demographic Data including age, gender
- Financial Information including credit card numbers
- Purchase Information specifically if personalized or unique
- Mobile device specific identifiers such as make and model, IMEI and phone number
- Location Data
When you use our products and/or features, we collect the following types of Personal Data:
- Account Information such as your name, email address, and password
- Payment Information such as your billing address, phone number, credit card, debit card or other payment method
- Demographic Data including age, gender
- Financial Information including credit card numbers
- Purchase Information specifically if personalized or unique
- Mobile device specific identifiers such as make and model, IMEI and phone number
- Location Data
- Feedback, such as customer support or product reviews
- Social Media Information
- Product information, such as serial number, product registration, licensing information
- Content, such as posts, comments, audio, or documents
How We Collect Your Personal Data
We collect Personal Data from the following sources:
From You. You may give us your Account Information, Payment Information, Financial Information, Demographic Data, Purchase Information, Content, Feedback, Product Information, by filling in forms, using our products or services, entering information online or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide, for example, when you:
- Create an account or purchase products on our website;
- Use our products or services;
- Create content through our products or services;
- Express interest in our products or services;
- Downloading software and/or our mobile application;
- Subscribe to our newsletter;
- Complete a voluntary market research survey;
- Contact us with an inquiry or to report a problem (by phone, email, social media, or messaging service);
- When you log in to our website via social media;
Automated technologies or interactions: As you interact with our website, we may automatically collect the following types of data (all as described above): Device Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data where tasks carried out via our website remain uncompleted, such as incomplete orders or abandoned baskets. We collect this data by using cookies, server logs and other similar technologies. Please see our Cookie section (below) for further details.
Third parties: We may receive Personal Data about you from various third parties, including:
- Account Information and Payment Information from another individual when they purchase a gift for you on our website;
- Device and Usage Data from third parties, including analytics providers such as Google;
- Account Information and Payment Data from social media platforms when you log in to our website using such social media platforms;
- Content from communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks;
- Account Information and Payment Data from third parties, including organizations (such as law enforcement agencies), associations and groups, who share data for the purposes of fraud prevention and detection and credit risk reduction; and
- Account Information, Payment Data, and Financial Data from providers of technical, payment and delivery services.
If you provide us, or our service providers, with any Personal Data relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the "Contact us" section below.
Device and Usage Data
When you visit a Designed Healthy Living INC website and/or mobile application, we automatically collect and store information about your visit using browser cookies (files which are sent by us to your computer), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help Feature on most browsers will provide information on how to accept cookies, disable cookies or to notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our Service and we recommend that you leave them turned on.
We also process information when you use our services and products. This information may include:
- Device IDs
- IP Address
- Time stamps
- Individual Products you view
- Web terms or searches that led you to the site
- Time zone
- Other operational data.
Data we collect from third parties
We may receive your Personal Data from third parties such as companies subscribing to Designed Healthy Living INC services, partners and other sources. This Personal Data is not collected by us but by a third party and is subject to the relevant third party’s own separate privacy and data collection policies. We do not have any control or input on how your Personal Data is handled by third parties. As always, you have the right to review and rectify this information. If you have any questions you should first contact the relevant third party for further information about your Personal Data. Where that third party is unresponsive to your rights, you may contact the Data Protection Officer at Designed Healthy Living INC (contact details below).
Our websites and services may contain links to other websites, applications and services maintained by third parties. The information practices of such other services, or of social media networks that host our branded social media pages, are governed by third parties’ privacy statements, which you should review to better understand those third parties’ privacy practices.
Purpose and Legal Basis for the Processing of Personal Data
We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services and understand how to improve them.
These purposes include:
- To deliver your product or service
- To fulfill orders including electronic and non-electronic shipment
- Building a Safe and Secure Environment
- To verify or authenticate your identity; and
- Investigate and prevent security incidents such as breaches, attacks and hacks
- Providing, Developing, and Improving our Products and Services
- Deliver, maintain, debug and improve our products and services.
- Enable you to access Designed Healthy Living INC services and set up accounts.
- Provide you with technical and customer support
- For research and development
- To communicate with you about the Products and Services
Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business for example against fraud. Consent will be required to initiate services with you. New consent will be required if any changes are made to the type of data collected. Within our contract, if you fail to provide consent, some services may not be available to you.
Third Party Tools
We use these third party tools to store your information:
- Thinkific
- Aweber
- ThriveCart
International Data Transfer and Storage
Where possible, we store and process data on servers within the general geographical region where you reside (note: this may not be within the country in which you reside). Your Personal Data may also be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We will take appropriate steps to ensure that your Personal Data is treated securely and in accordance with this Policy as well as applicable data protection law.In regions that are not considered adequate, we will enter into EU standard contractual clauses (or equivalent measures) with parties outside the EEA and ensure adequate controls are in place for the security of your data. More information about these clauses can be found here: https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32021D0914
Sharing and Disclosure
We will share your Personal Data with third parties only in the ways set out in this Policy or set out at the point when the Personal Data is collected.
We also use Google Analytics to help us understand how our customers use the site. You can read more about how Google uses your Personal Data here: https://www.google.com/intl/en/policies/privacy/
You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=en
We may also use your Personal Data to provide you with targeted marketing via advertisements or communications (such as newsletters).
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s ("NAI") educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/
Legal Requirement
We may use or disclose your Personal Data in order to comply with a legal obligation, in connection with a request from a public or government authority, or in connection with court or tribunal proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical to do so, we will tell you in advance of such disclosure.
Children’s Information
The Services and Website are not directed to, nor knowingly collect information from, children under the age of 13. If you become aware that your child or any child under your care has provided us with information without your consent, please contact us at the contact information listed below.
Service Providers and Other Third Parties
We may use a third party service provider, independent contractors, agencies, or consultants to deliver and help us improve our products and services. We may share your Personal Data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others but only to maintain and improve our products and services. For further information on the recipients of your Personal Data, please contact us by using the information in the "Contacting us" section below.
State Privacy Rights
FOR VERMONT RESIDENTS: We will not share information we collect about you with nonaffiliated third parties, except as permitted by Vermont law, such as to process your transactions or to maintain your account.
FOR NEVADA RESIDENTS: We are providing this notice to you pursuant to Nevada law. If you prefer not to receive marketing calls from us, you may be placed on our internal Do Not Call List by writing to us at [email protected]. Nevada law requires that we also provide you with the following contact information: Bureau of Consumer Protections, Office of the Nevada Attorney General, 555 E. Washington Street, Suite 3900, Las Vegas, NV 89101, phone number (702) 486-3132, email [email protected].
FOR COLORADO, CONNECTICUT, VIRGINIA AND UTAH RESIDENTS:The section (Notice of Colorado, Connecticut, Virginia and Utah Privacy Rights) relates solely to residents of the States of Colorado, Connecticut, Virginia and Utah, and provides you with information about your privacy rights under the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act and the Utah Consumer Privacy Act.
For purposes of this section, "residents", "consumers" or "you" means individuals of those states who are acting in their individual or household context. This section does not apply to individuals acting in their commercial or employment context.
- Personal Information we collect
You have a right to know the categories and types of personal information we collect about you. - Categories of sources from which we collect personal information
You have a right to know the categories of sources from which we collect your personal information. - Our processing of your personal information
You have the right to know how we process and use your personal information.
For residents of the State of Virginia, to the extent that we maintain de-identified data, we take reasonable measures to ensure that de-identified data cannot be associated with a natural person, we publicly commit to maintaining and using de-identified data without attempting to re-identify the data, and we contractually obligate any recipient of the data to comply with the same obligations. - Disclosure of Personal Information
You have the right to know if we share your personal information with any third parties. - No Sale of Data or Use of Data for Targeted Advertising
We do not sell your personal information and we do not use your data for targeted advertising (as that term is defined by your applicable state law). We may send you advertising in response to your request for information or feedback or based on your activities with our website, including your search queries and visits to our website. However, we will not send you targeted advertising based on your activities across non-affiliated websites to predict your preferences or interests. - Your Rights
Where we act as the Controller of your personal information (as opposed to a Processor as those terms are defined in your applicable State law), you have the right to submit a request to us for the following:
- Your right to access. You have the right to know if we process your personal information and have access to such information and certain details of how we use it.
- Your right to correct. We take reasonable steps to ensure that information we hold about you is accurate and complete. However, you have the right to request that we correct any inaccurate personal information that we have about you.
- Your right to delete. You may have the right to request that we delete your personal information where we act as a controller. This right is subject to several exceptions and we may deny your deletion request if retaining the information is necessary for us or our processors to:
- Complete the transaction for which we collected the personal information and take actions reasonably anticipated within the context of our ongoing business relationship with you or our client;
- Detect bugs or errors in our websites, detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
- Comply with a legal obligation; or
- Make other internal and lawful uses of that information as permitted by law or that are compatible with the context in which we collected it.
- Your right to restriction of processing (opt-out). You have the right to opt-out of processing your personal information for purposes of profiling in furtherance of any automated processing of your data that produce legal or similarly significant effects concerning you. (This right only applies to residents of the States of Colorado, Connecticut and Virginia.)
- Your right to data portability.You have the right to obtain a copy of your data in a portable, and to the extent technically feasible, readily usable format that allows you to transmit the data to a third party.
- Your right to non-discrimination and no retaliation. We will not discriminate or retaliate against you for exercising any of your rights, including but not limited to, by denying you goods or services, charging you different prices for goods or services, or providing you a different level or quality of goods or services.
- Your right to restrict the processing of sensitive information.Unless we are processing your sensitive information pursuant to any of the legal exemptions listed below or as otherwise allowed by law:
For residents of the States of Connecticut, Virginia and Colorado, we will not process your sensitive information without first obtaining your consent; and
For residents of the State of Utah, we will not process your sensitive personal information without providing you with notice and an opportunity to opt out.
Exercising Your Rights
You may exercise your rights described above by submitting a request to us by:
Emailing us at: [email protected].
Authentication Process
We will only fulfill requests when we can verify your identity and confirm that you are authorized to make such a request.
Only you, as the parent or legal guardian on behalf of your minor child, or your authorized agent, guardian or conservator may make a request related to personal information. If an authorized agent, legal guardian or conservator submits the request, we may require your written permission to do so and may require additional information to authenticate your identity. We may deny a request by an authorized agent, legal guardian or conservator who does not submit proof of authorization to act on your behalf.
We will only use the personal information you provide in a request to verify your identity or authority to make the request.
Response Timing and Format
We will respond to an authenticated request within forty- five (45) days of its receipt, and will notify you within those forty-five (45) days if we require more time to respond and the reasons for the additional time.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
If we cannot comply with a request or a portion of the request, we will include the reasons in our response.
For residents of the States of Colorado, Connecticut and Utah, you may make one request within a twelve-month period at no charge. For residents of the State of Virginia, you may make a request up to two (2) times within a twelve (12) month period at no charge. We reserve the right to charge a fee to process or respond to any request that we consider excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Right to Appeal
You have the right to appeal our decision within a reasonable period of time after receipt of our response. You may appeal our decision by sending us an email at [email protected]. We will respond to your appeal within 60 days of receipt (45 days of receipt for residents of Colorado) and will inform you of any decisions and the reasons for such decisions.
Please note that in certain cases we may collect your personal information as a processor (as opposed to a controller, as those terms are defined in your applicable state privacy law) pursuant to a contract we have with a commercial client (the controller) to provide a service. In such a case, we are required to collect and process your information only based on the instructions received from the controller. Should you direct your requests to exercise your rights to us, we may be required to share your request with the controller, who is the party responsible under your applicable state privacy law for receiving, authenticating and responding to your requests.
Exemptions
This section (Notice of Colorado, Connecticut, Virginia and Utah Privacy Rights) does not apply to certain entities and data that are exempt from your applicable state privacy law, including but not limited to the following: covered entities, business associates and protected health information governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH); financial institutions and personal information subject to the Gramm-Leach-Bliley Act (GLBA); and personal information collected, processed, sold, or disclosed pursuant to certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Family Educational Rights and Privacy Act, the Farm Credit Act and the Driver's Privacy Protection Act of 1994 (DPPA).
State laws may also provide you with specific privacy protections. We will comply with applicable state laws with respect to our use of your information.
GDPR Information
If you are within the European Union, you are entitled to certain information and have certain rights under the General Data Protection Regulation. Those rights include:
- You may opt-out of future email communications by following the unsubscribe links in our emails. You may also notify us at [email protected] to be removed from our mailing list.
- You may access the personal information we have about you by submitting a request to [email protected].
- You may contact [email protected] to amend or update your personal information.
- You may request that we erase or forget your personal data. To do so, please submit a request to [email protected].
We will retain any information you choose to provide to us until the earliest of: (a) you asking us to delete the information, (b) our decision to cease using our existing data providers, or (c) we decide that the value in retaining the data is outweighed by the costs of retaining it.
You have the right to lodge a complaint with a supervisory authority that has jurisdiction over issues related to the General Data Protection Regulation.
We require only the information that is reasonably required to enter into a contract with you. We will not require you to provide consent for any unnecessary processing as a condition of entering into a contract with us.
Cookies
What are Cookies?
A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the owner of the site in addition to potential partners and third parties to that business. The collection of this information may be used in the function of the site and/or to improve your experience.
How we use cookies
- To give you the best experience possible, we use the following types of cookies:
- Strictly Necessary. As a web application, we require certain necessary cookies to run our service.
- Preference.
- We use preference cookies to help us remember the way you like to use our service.
- Some cookies are used to personalize content and present you with a tailored experience. For example, location could be used to give you services and offers in your area.
- Analytics. We collect analytics about the types of people who visit our site to improve our service and product.
Retention & Deletion
We will only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need Personal Data, we will remove it from our systems and/or take steps to anonymize it.
Merger or Acquisition
If we are involved in a merger, acquisition or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy. Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
How We Keep Your Data Safe
We have appropriate organizational safeguards and security measures in place to protect your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.
The communication between your browser and our website uses a secure encrypted connection wherever your Personal Data is involved.
We require any third party who is contracted to process your Personal Data on our behalf to have security measures in place to protect your data and to treat such data in accordance with the law.
In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.
Your Rights for Your Personal Data
Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. These rights may include:
- Right to Access (PIPEDA, GDPR Article 15, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)
You have the right to learn whether we are processing your Personal Data and to request a copy of the Personal Data we are processing about you. - Right to Rectification (PIPEDA, GDPR Article 16, CPRA, CPA, VCDPA, CTDPA, LGPD, POPIA)
You have the right to have incomplete or inaccurate Personal Data that we process about you rectified. - Right to be Forgotten (right to erasure) (GDPR Article 17, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)
You have the right to request that we delete Personal Data that we process about you, unless we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims. - Right to Restriction of Processing (GDPR Article 18, LGPD)
You have the right to restrict our processing of your Personal Data under certain circumstances. In this case, we will not process your Data for any purpose other than storing it. - Right to Portability (PIPEDA, GDPR Article 20, LGPD)
You have the right to obtain Personal Data we hold about you, in a structured, electronic format, and to transmit such Personal Data to another data controller, where this is (a) Personal Data which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you or the third party that subscribes to services. - Right to Opt Out (CPRA, CPA, VCDPA, CTDPA, UCPA)
You have the right to opt out of the processing of your Personal Data for purposes of: (1) Targeted advertising; (2) The sale of Personal Data; and/or (3) Profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Under CPRA, you have the right to opt out of the sharing of your Personal Data to third parties and our use and disclosure of your Sensitive Personal Data to uses necessary to provide the products and services reasonably expected by you. - Right to Objection (GDPR Article 21, LGPD, POPIA)
Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for processing which override your interests and rights, or if we need to continue to process the Personal Data for the establishment, exercise or defense of a legal claim. - Nondiscrimination and nonretaliation (CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA)
You have the right not to be denied service or have an altered experience for exercising your rights. - File an Appeal (CPA, VCDPA, CTDPA)
You have the right to file an appeal based on our response to you exercising any of these rights. In the event you disagree with how we resolved the appeal, you have the right to contact the attorney general located here:
If you are based in Colorado, please visit this website to file a complaint.
If you are based in Virginia, please visit this website to file a complaint.
If you are based in Connecticut, please visit this website to file a complaint. - File a Complaint (GDPR Article 77, LGPD, POPIA)
You have the right to bring a claim before their competent data protection authority.
If you are based in the EEA, please visit this website (https://edpb.europa.eu/about-edpb/about-edpb/members_en) for a list of local data protection authorities.
Withdrawing Consent
If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, such as where you wish to opt out from marketing messages that you receive from us. If you wish to withdraw your consent, please contact us using the information found at the bottom of this page.
How to Exercise Your Rights
You can make a request to exercise any of these rights in relation to your Personal Data by sending the request to our privacy team by using the form below.
For your own privacy and security, at our discretion, we may require you to prove your identity before providing the requested information.
Changes
We may modify this Policy at any time. If we make changes to this Policy then we will post an updated version of this Policy at this website. When using our services, you will be asked to review and accept our Privacy Policy. In this manner, we may record your acceptance and notify you of any future changes to this Policy.
Contact Us
To request a copy for your information, unsubscribe from our email list, request for your data to be deleted, or ask a question about your data privacy, we've made the process simple:
Make a Data Request
To contact us, please email [email protected]
Write to us at:
Data Privacy Officer of Designed Healthy Living, Inc.
11357 Nuckols Road 1197, Glen Allen, VA, 23059
Call us at:
18047986565