Privacy Policy
Privacy Policy: XNutrion
Effective: October 4, 2026 | Last Updated: October 4, 2026 | Applies to: xnutrion.com
Privacy at a Glance
- We collect only what we need: your name and email if you contact us, subscribe, or comment, plus basic usage data.
- We use Google Analytics, Google AdSense, and Amazon Associates, which need your consent before they set cookies if you are in the EEA, UK, or Switzerland.
- We do not sell your personal data.
- We do not collect health data, payment details, or other sensitive data.
- You can access, correct, delete, or export your data, and withdraw consent at any time: contact@xnutrion.com.
1. Who We Are (Data Controller)
XNutrion (“we,” “us,” “our”) operates www.xnutrion.com (“the Website”) and is the controller of personal data collected through it.
Email: contact@xnutrion.com
Contact form: www.xnutrion.com/contact-us
This policy applies to the Website only. It should be read with our Cookies Policy, Terms and Conditions, and Affiliate Disclosure.
2. Personal Data We Collect
Data you give us
- Contact form: name, email address, and your message.
- Newsletter: email address.
- Comments: name, email address, and the comment content. Your name and comment are shown publicly. Your email is not.
Data collected automatically
- Device and log data: IP address, browser type, operating system, device type, referring URL, pages visited, and time spent.
- Analytics data (Google Analytics), if you consent: pages viewed, traffic source, approximate location, and device information.
- Advertising data (Google AdSense), if you consent: ad interaction and interest-based identifiers.
- Affiliate data (Amazon Associates and similar): click and referral data when you use a product link.
What we do not collect. We do not ask for or intentionally collect special categories of data (such as health data, ethnicity, religion, political opinions, or biometrics), government ID numbers, or payment card details. Please do not include such details in comments or messages. Purchases happen on third-party sites, not on ours.
3. Why We Use Your Data and Our Legal Basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Reply to your messages | Name, email, message | Legitimate interest (Art. 6(1)(f)) |
| Send newsletters and recipe updates | Consent (Art. 6(1)(a)) | |
| Publish and moderate comments | Name, email, comment | Consent (Art. 6(1)(a)) |
| Website analytics | Cookie IDs, usage data | Consent (Art. 6(1)(a)) |
| Show ads and measure them | Cookie IDs, ad data | Consent (Art. 6(1)(a)) |
| Track affiliate referrals | Click and referral data | Consent (Art. 6(1)(a)) |
| Security, spam, and fraud prevention | IP address, log data | Legitimate interest (Art. 6(1)(f)) |
| Meet legal obligations | As required | Legal obligation (Art. 6(1)(c)) |
You can withdraw consent at any time. Doing so does not affect processing done before. We do not make automated decisions that have legal or similarly significant effects on you.
4. Cookies and Similar Technologies
We use cookies for essential functions, analytics, advertising, affiliate tracking, and saved comment details. Non-essential cookies are not set until you agree, if you are in the EEA, UK, or Switzerland. You can change your choice at any time with “Cookie Settings” in the footer.
Full details, a cookie table, and opt-out links are in our Cookies Policy.
5. Who We Share Data With
We share data only with service providers that help us run the Website, and only as needed:
| Provider | Purpose | Notes |
|---|---|---|
| Google LLC (Analytics, AdSense) | Analytics and advertising | policies.google.com/privacy |
| Amazon.com, Inc. (Associates) | Affiliate tracking | www.amazon.com/privacy |
| WordPress and our hosting provider | Website, comments, security | Under hosting terms |
| Email newsletter provider | Sending newsletters | Under a data processing agreement |
We may also disclose data if required by law or a valid legal request, or to protect our rights, our users, or the public. If the Website is ever sold or merged, data may be transferred to the new owner, who must follow this policy.
We do not sell your personal data.
6. International Transfers
XNutrion is operated from the United States, and our providers may process data there or in other countries. For transfers from the EEA, UK, or Switzerland, we rely on safeguards under GDPR Chapter V, such as the EU-US Data Privacy Framework (for certified providers like Google and Amazon), Standard Contractual Clauses, or adequacy decisions. Contact us for a copy of the safeguards we use.
7. How Long We Keep Data
| Data | Retention |
|---|---|
| Newsletter email | Until you unsubscribe or ask us to delete it |
| Contact form messages | Up to 12 months |
| Comments | Until you ask for deletion or we remove the comment |
| Google Analytics data | As set in our account, no longer than 26 months |
| Server logs | Up to 90 days |
| Advertising and affiliate data | As set by Google, Amazon, or the partner |
When data is no longer needed, we delete it or make it anonymous.
8. Your Rights Under GDPR (EEA, UK, Switzerland)
You have the right to:
- Access your data (Art. 15).
- Correct inaccurate data (Art. 16).
- Erase your data (Art. 17).
- Restrict processing (Art. 18).
- Port your data in a machine-readable format (Art. 20).
- Object to processing based on legitimate interest (Art. 21), including direct marketing.
- Withdraw consent at any time (Art. 7).
- Complain to your data protection authority. In the EU, find yours at edpb.europa.eu. In the UK, contact the ICO at ico.org.uk.
We may need to confirm your identity first. We reply within 30 days, and we tell you if we need more time.
9. Your Rights Under CCPA/CPRA (California)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose.
- Delete your personal information, with some exceptions.
- Correct inaccurate information.
- Opt out of “sale” or “sharing” of personal information.
- Limit the use of sensitive personal information. We do not collect it.
- Non-discrimination for using these rights.
We do not sell personal information for money. However, the advertising cookies we use (Google AdSense) may count as “sharing” for cross-context behavioral advertising under California law. You can opt out through “Cookie Settings” in the footer, through a Global Privacy Control signal (which we honor), or at www.google.com/settings/ads.
Categories collected in the last 12 months: identifiers (IP address, cookie IDs, email, name), internet activity (pages viewed), and approximate geolocation. We collect them for the purposes in Section 3 and share them with the providers in Section 5.
To use your rights, contact contact@xnutrion.com. An authorized agent may act for you with proof of authorization.
10. Affiliate and Advertising Partners
We earn revenue from affiliate links (Amazon Associates) and ads (Google AdSense). These partners may set their own cookies and are responsible for their own data practices. See our Affiliate Disclosure and Cookies Policy.
11. Data Security
We protect personal data with technical and organizational measures, including:
- SSL/TLS encryption between your browser and the Website.
- Regular security updates and monitoring of our hosting.
- Limited internal access to personal data.
- Reputable service providers that follow data protection standards.
No online system is 100% secure. If a breach puts your rights at risk, we will notify the supervisory authority within 72 hours where required, and affected people without undue delay (GDPR Articles 33 and 34).
12. Children’s Privacy
The Website is not directed to children under 13 (or under 16 where the law requires). We do not knowingly collect their data. If you think a child has given us data, email contact@xnutrion.com and we will delete it.
13. Third-Party Links
The Website links to other sites, including retailers. This policy does not cover them. Read their privacy policies before sharing personal data.
14. Changes to This Policy
We may update this policy. The “Last Updated” date shows the latest revision. For significant changes, we will post a notice on the Website, email newsletter subscribers where required, and ask for fresh consent where the law requires it.
15. Contact Us
Email: contact@xnutrion.com
Contact form: www.xnutrion.com/contact-us
Related pages: Cookies Policy · Terms and Conditions · Disclaimer · Affiliate Disclosure · Editorial Process & Integrity
Frequently Asked Questions
What personal data does XNutrion collect?
Your name and email if you contact us, subscribe, or comment, plus basic usage data such as IP address and pages visited. We do not collect health or payment data.
Does XNutrion sell my personal data?
No.
Does XNutrion use cookies?
Yes: essential cookies, plus Google Analytics, Google AdSense, and affiliate cookies, which need your consent in the EEA, UK, and Switzerland.
How do I delete my data?
Email contact@xnutrion.com. We reply within 30 days.
How do I unsubscribe from the newsletter?
Use the unsubscribe link in any email, or write to contact@xnutrion.com.
How do I withdraw my cookie consent?
Click “Cookie Settings” in the footer or delete cookies in your browser.
Is my data transferred outside the EU?
Possibly to the United States, under safeguards such as the EU-US Data Privacy Framework and Standard Contractual Clauses.
© 2026 XNutrion. All rights reserved.