Privacy policy

(Effective as of 2025)

1. Introduction

This Privacy Policy explains how Sweet & Bulk s.r.o., with its registered office at Nerudova 209/10, 118 00 Prague, Czech Republic, Identification Number (IČO): 11857382, VAT ID: CZ11857382, registered with the Commercial Register maintained by the Municipal Court in Prague under file no. C 355460 (the "Company", "we", "our", "us"), collects, uses, processes, and protects your personal data when you access the website www.nutripeak.me (the "Website") or purchase our products (the "Products").

We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), as well as other applicable laws in the jurisdictions in which we operate, including relevant United States privacy standards. By using our Website, submitting personal data, or purchasing our Products, you agree to the terms of this Privacy Policy.

2. Data We Collect

When you interact with our Website or purchase Products, we may collect the following categories of personal data:

  • Identification and contact information such as your name, billing address, shipping address, telephone number, and e-mail address.

  • Payment and transaction information including payment method, billing details, and records of orders and refunds, processed securely via our payment providers (Stripe, PayPal).

  • Technical information such as your IP address, browser type, device information, and Website usage patterns, collected through cookies and similar technologies.

  • Marketing preferences, communication history, and feedback you provide in connection with customer service or promotional activities.

We only collect the minimum data necessary to fulfill the purposes set out in this Policy and we never sell your personal data to third parties.

3. Purposes and Legal Basis for Processing

We process your personal data strictly in accordance with applicable data protection laws and only for legitimate purposes, including:

  • To fulfill and manage your orders, deliver Products, and provide related customer support.

  • To process payments and issue refunds.

  • To communicate with you about your purchases, inquiries, and account information.

  • To send you promotional and marketing communications, subject to your explicit consent where required by law.

  • To improve our Website, Products, and customer experience, using aggregated and anonymized analytics.

  • To comply with legal obligations such as tax, accounting, and consumer protection laws.

The primary legal bases for processing are the performance of a contract (Article 6(1)(b) GDPR), compliance with legal obligations (Article 6(1)(c) GDPR), and our legitimate interests (Article 6(1)(f) GDPR). Where consent is required for specific processing activities, we will obtain it separately and ensure that you may withdraw consent at any time.

4. Data Sharing and International Transfers

We may share your personal data with trusted third parties who provide essential services, including payment processors, logistics and shipping providers, IT hosting companies, and marketing platforms. All such third parties are bound by contractual obligations to protect your personal data and process it solely in accordance with our instructions.

As an international brand serving customers worldwide, your personal data may be transferred outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards are implemented, including the use of standard contractual clauses approved by the European Commission or equivalent mechanisms under applicable law.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with applicable legal, tax, and accounting requirements. Typically, transaction records are retained for a minimum of ten (10) years under Czech and EU law. Marketing data is retained until you withdraw your consent or unsubscribe. Technical data such as cookies are retained in accordance with our Cookie Policy and applicable laws.

6. Security of Data

We implement strict technical and organizational measures to safeguard your personal data against unauthorized access, loss, alteration, or disclosure. This includes encryption of payment transactions, secure server infrastructure, restricted access to personal data on a need-to-know basis, and continuous monitoring of our systems for vulnerabilities. While no system is absolutely secure, we continuously update our security practices to reflect industry best standards.

7. Your Rights

As a data subject under GDPR, you have the following rights:

  • The right to access your personal data and obtain a copy of the information we hold about you.

  • The right to rectification of inaccurate or incomplete data.

  • The right to erasure ("right to be forgotten") under conditions prescribed by law.

  • The right to restrict processing of your personal data in certain circumstances.

  • The right to data portability, allowing you to receive your data in a structured, commonly used format.

  • The right to object to processing based on legitimate interests or for direct marketing purposes.

  • The right to withdraw consent at any time where processing is based on consent.

Requests may be submitted by e-mail at info@nutripeak.me, and we will respond within the statutory period of thirty (30) days.

8. Children’s Privacy

Our Website and Products are not directed to individuals under the age of eighteen (18). We do not knowingly collect personal data from children. If we become aware that data from a minor has been collected, we will promptly delete it.

9. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Changes will take effect upon publication on the Website. We encourage you to review this Privacy Policy regularly to remain informed about how we protect your data. Continued use of our Website and Products after publication of changes constitutes your acceptance of the revised Policy.

10. Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, please contact us at:

Sweet & Bulk s.r.o.
Nerudova 209/10
118 00 Prague
Czech Republic
E-mail: info@nutripeak.me

If you are located in the European Union, you also have the right to lodge a complaint with the relevant data protection authority, in particular the supervisory authority in your place of residence, workplace, or the place of the alleged infringement.