NourishMinute
Home Meal Plans Pricing Contact

Privacy Policy

Last Updated:

1. Introduction

Welcome to NourishMinute, operated by Xivralondhep. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://xivralondhep.world/ and use our meal planning services. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

We are committed to protecting your privacy and ensuring the security of your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in Germany and the European Union.

2. Data Controller

The data controller responsible for your personal information is:

Xivralondhep
Chausseestraße 116
10115 Berlin, Germany
Phone: +493057703324
Email: office@xivralondhep.world

3. Information We Collect

3.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

  • Register for an account or subscription
  • Create meal plans or customize preferences
  • Submit contact forms or customer support requests
  • Subscribe to our newsletter or marketing communications
  • Participate in surveys, promotions, or contests
  • Make payments for our services

The types of personal information we may collect include:

  • Name and contact details (email address, phone number, postal address)
  • Account credentials (username, password)
  • Dietary preferences, restrictions, and health-related information you choose to share
  • Household size and composition
  • Cooking skill level and time availability
  • Payment information (credit card details, billing address)
  • Communication preferences

3.2 Automatically Collected Information

When you access our website, we automatically collect certain information about your device and browsing activity:

  • Device information (IP address, browser type, operating system, device identifiers)
  • Usage data (pages visited, time spent on pages, click patterns, referral URLs)
  • Location data (approximate geographic location based on IP address)
  • Cookies and similar tracking technologies (see our Cookies Policy for details)

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

  • Payment processors for transaction verification
  • Analytics providers for website usage insights
  • Marketing partners if you interact with our advertisements
  • Social media platforms if you choose to connect your account

4. How We Use Your Information

We process your personal information for the following purposes, based on legitimate legal grounds:

4.1 Service Provision and Performance

To provide, maintain, and improve our meal planning services:

  • Create and manage your account
  • Generate personalized meal plans based on your preferences
  • Provide shopping lists and recipe recommendations
  • Process your subscription payments
  • Deliver customer support and respond to your inquiries
  • Send transactional emails (account confirmations, payment receipts, plan updates)

Legal basis: Performance of contract (GDPR Article 6(1)(b))

4.2 Communication and Marketing

To communicate with you about our services:

  • Send newsletters, tips, and meal planning advice (with your consent)
  • Notify you about new features, special offers, and promotions
  • Conduct surveys to improve our services
  • Provide personalized recommendations based on your preferences

Legal basis: Consent (GDPR Article 6(1)(a)) - You may withdraw consent at any time

4.3 Analytics and Service Improvement

To understand how our services are used and improve user experience:

  • Analyze usage patterns and trends
  • Conduct research and development
  • Test new features and functionalities
  • Optimize website performance and navigation
  • Personalize content and recommendations

Legal basis: Legitimate interests (GDPR Article 6(1)(f))

4.4 Legal Compliance and Protection

To comply with legal obligations and protect our rights:

  • Comply with applicable laws, regulations, and legal processes
  • Prevent fraud, unauthorized access, and security threats
  • Enforce our Terms of Use and other policies
  • Resolve disputes and investigate complaints
  • Maintain business records and accounting

Legal basis: Legal obligation (GDPR Article 6(1)(c)) and legitimate interests (GDPR Article 6(1)(f))

5. Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We engage trusted third-party service providers who perform functions on our behalf:

  • Payment processors (to handle transactions securely)
  • Cloud hosting providers (to store data)
  • Email service providers (to send communications)
  • Analytics providers (to analyze website usage)
  • Customer support tools (to manage inquiries)

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your data under contractual agreements.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders, subpoenas, or legal processes
  • Requests from government or regulatory authorities
  • Investigation of potential legal violations
  • Protection of our rights, property, or safety
  • Prevention of fraud or security threats

5.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

  • Encryption of data in transit using SSL/TLS protocols
  • Encryption of sensitive data at rest
  • Regular security assessments and vulnerability testing
  • Access controls and authentication mechanisms
  • Employee training on data protection practices
  • Secure backup and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

  • Account information: Retained while your account is active and for 3 years after account closure for legal and accounting purposes
  • Transaction records: Retained for 10 years as required by German tax law
  • Marketing communications: Retained until you unsubscribe or withdraw consent
  • Website analytics: Aggregated data retained indefinitely, individual data anonymized after 26 months
  • Customer support communications: Retained for 5 years for quality assurance and dispute resolution

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.

8. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of your personal information. You may request access by contacting us at office@xivralondhep.world.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings or by contacting us.

8.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. Please note that we may retain certain information as required by law or for legitimate business purposes.

8.4 Right to Restrict Processing

You have the right to request restriction of processing of your personal information in certain situations, such as when you contest the accuracy of the data or object to processing.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller where technically feasible.

8.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes. If you object to marketing communications, we will cease processing your data for such purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your rights under GDPR have been violated. In Germany, you may contact:

Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Graurheindorfer Str. 153
53117 Bonn, Germany
Phone: +49 228 997799-0
Email: poststelle@bfdi.bund.de

8.9 Exercising Your Rights

To exercise any of these rights, please contact us at office@xivralondhep.world or +493057703324. We will respond to your request within one month of receipt. If your request is complex or we receive numerous requests, we may extend this period by two additional months, and we will inform you of such extension.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA) where data protection laws may differ. When we transfer your information internationally, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection levels
  • Binding Corporate Rules for intra-group transfers
  • Explicit consent for specific transfers where applicable

We only work with service providers who demonstrate commitment to data protection and comply with applicable regulations.

10. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16 without parental consent. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at office@xivralondhep.world. If we discover that we have inadvertently collected personal information from a child under 16, we will delete that information promptly.

11. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party websites. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about the cookies we use, how we use them, and your choices regarding cookies, please refer to our Cookies Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email if you have an account with us
  • Display a prominent notice on our website
  • Request your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our services after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Xivralondhep
Chausseestraße 116
10115 Berlin, Germany
Phone: +493057703324
Email: office@xivralondhep.world

We will make every effort to resolve your concerns and address your questions in a timely and transparent manner.

15. Specific Provisions for Meal Planning Services

In addition to the general provisions above, the following applies specifically to our meal planning services:

15.1 Dietary and Health Information

When you provide dietary preferences, restrictions, or health-related information (such as allergies or dietary goals), we use this information solely to personalize your meal plans and provide relevant recommendations. We treat this information as sensitive personal data and apply enhanced security measures. We do not share this information with third parties except as necessary to provide our services (such as generating meal plans) and only with service providers bound by strict confidentiality obligations.

15.2 Recipe and Meal Plan Data

Your saved meal plans, favorite recipes, cooking history, and shopping lists are stored in your account and used to improve your experience and provide better recommendations. This data is associated with your account and can be accessed, modified, or deleted through your account settings or by contacting us.

15.3 Anonymized Usage for Improvement

We may anonymize and aggregate meal planning data (such as popular recipes, common dietary preferences, or usage patterns) to improve our services, develop new features, and conduct research. This anonymized data cannot be used to identify you personally.

16. Data Processing Agreement

For business customers or partners who process personal data through our services, we offer a Data Processing Agreement (DPA) that complies with GDPR Article 28 requirements. Please contact us at office@xivralondhep.world to request a DPA.

17. Automated Decision-Making

Our meal planning algorithm uses automated processing to generate personalized meal recommendations based on your preferences and dietary information. This automated decision-making does not produce legal effects or similarly significantly affect you. You have the right to request human intervention, express your point of view, and contest any automated decision by contacting our support team.

NourishMinute

Simple meal plans for busy lives

Privacy Policy Terms of Use Cookies Policy Return Policy

© Xivralondhep. All rights reserved.