Privacy Policy
1. Introduction
Welcome to Max Muscle Labs. We are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
By using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy.
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide when you:
- Create an account
- Place an order
- Subscribe to our newsletter
- Contact us
This information may include:
- Identity Data: Full name
- Contact Data: Email address, telephone number, delivery address, billing address
- Account Data: Username, password, order history, saved addresses
- Payment Data: Payment method details (processed securely by our payment providers)
- Communication Preferences: Marketing preferences and consents
2.2 Information Collected Automatically
When you visit our website, we automatically collect certain information, including:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, click patterns, referral source
- Location Data: General geographic location based on IP address
- Cookie Data: Information collected through cookies and similar tracking technologies
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 To Fulfill Orders and Provide Services
- Process and deliver your orders
- Manage your account
- Provide customer support
- Send transactional emails (order confirmations, shipping updates)
3.2 To Communicate With You
- Send marketing communications via email, SMS, and WhatsApp (with your consent)
- Respond to inquiries and support requests
- Send important updates about our services
3.3 To Improve Our Services
- Analyze website usage and performance
- Understand customer preferences and behavior
- Develop new products and services
3.4 For Advertising and Marketing
- Display personalized advertisements on third-party platforms
- Measure the effectiveness of our advertising campaigns
- Create lookalike/similar audiences for marketing purposes
3.5 For Legal and Security Purposes
- Comply with legal obligations
- Prevent fraud and unauthorized access
- Enforce our terms and conditions
4. Legal Basis for Processing (EEA, UK, and Switzerland)
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Order fulfillment | Performance of a contract |
| Account management | Performance of a contract |
| Transactional communications | Performance of a contract |
| Marketing communications | Consent |
| Analytics and personalization | Legitimate interests / Consent |
| Advertising (Meta, Google) | Consent |
| Legal compliance | Legal obligation |
| Fraud prevention | Legitimate interests |
5. Cookies and Tracking Technologies
5.1 What Are Cookies?
Cookies are small text files placed on your device when you visit our website. We use cookies and similar tracking technologies to enhance your experience.
5.2 Types of Cookies We Use
- Essential Cookies: Required for the website to function properly (shopping cart, checkout, security)
- Analytics Cookies: Help us understand how visitors interact with our website (Google Analytics)
- Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness (Meta Pixel, Google Ads)
- Functional Cookies: Remember your preferences and settings
5.3 Managing Your Cookie Preferences
When you first visit our website, you will see a cookie consent banner. You can:
- Accept all cookies
- Customize your cookie preferences
- Change your preferences at any time through our cookie settings
To modify your cookie preferences, click on the cookie settings link in our website footer or contact us at moc.sbalelcsumxam@ycavirp.
5.4 Third-Party Cookies
Our website uses the following third-party services that may set cookies:
- Google Analytics: Website analytics and performance measurement
- Meta (Facebook) Pixel: Advertising measurement and optimization
- Stripe: Payment processing
- PayPal: Payment processing
6. Sharing Your Information
We may share your personal information with the following categories of third parties:
6.1 Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment and transaction data |
| PayPal | Payment processing | Payment and transaction data |
| Royal Mail | Order delivery | Name, address, phone number |
| Postmark | Email communications | Email address, name |
| Analytics and advertising | Usage data, device information | |
| Meta (Facebook) | Advertising | Usage data, device information |
| WordPress/WooCommerce | Website hosting and e-commerce | All data necessary for website operation |
6.2 Other Disclosures
We may also share your information:
- To comply with legal obligations
- To protect our rights and safety
- In connection with a business transfer or acquisition
- With your consent
We do not sell your personal information to third parties.
7. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence, including:
- United States (Google, Meta, Stripe, PayPal, Postmark)
- United Kingdom (Royal Mail)
- European Union
When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with our service providers
- Compliance with the UK International Data Transfer Agreement (IDTA) where applicable
8. Data Retention
We retain your personal information as follows:
| Data Type | Retention Period |
|---|---|
| Order data and transaction history | Indefinitely (for warranty, returns, and legal purposes) |
| Account information | Until account deletion is requested |
| Marketing data | Until you unsubscribe or request deletion |
| Cookie data | As per individual cookie lifespans (see cookie policy) |
| Communication records | Indefinitely (for customer service purposes) |
9. Your Privacy Rights
Depending on your location, you may have the following rights:
9.1 Rights for All Users
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Opt-Out: Unsubscribe from marketing communications
9.2 Additional Rights for EEA and UK Residents (GDPR/UK GDPR)
- Data Portability: Receive your data in a structured, machine-readable format
- Restriction: Request restriction of processing
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
- Lodge a Complaint: File a complaint with a supervisory authority
Supervisory Authority: For Poland, contact UODO (Urząd Ochrony Danych Osobowych) at uodo.gov.pl
9.3 Additional Rights for California Residents (CCPA/CPRA)
- Right to Know: Request disclosure of data collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt-out of sale/sharing of personal information
- Non-Discrimination: We will not discriminate against you for exercising your rights
Note: We do not sell personal information as defined under the CCPA.
9.4 How to Exercise Your Rights
To exercise any of these rights, please contact us at moc.sbalelcsumxam@ycavirp
We will respond to your request within 30 days (or as required by applicable law).
10. Marketing Communications
10.1 How We Contact You
With your consent, we may send marketing communications via:
- SMS
10.2 Opting Out
You can opt out of marketing communications at any time by:
- Clicking the “unsubscribe” link in any marketing email
- Replying “STOP” to SMS messages
- Contacting us at moc.sbalelcsumxam@ycavirp
Please note that opting out of marketing will not affect transactional communications related to your orders.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Secure Socket Layer (SSL) encryption for data transmission
- Secure payment processing through PCI-DSS compliant providers (Stripe, PayPal)
- Regular security assessments
- Access controls and authentication measures
While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.
13. Children's Privacy
We do not knowingly collect personal information from children under 16 without verifiable parental consent. If you believe we have collected information from a child under 16, please contact us immediately at moc.sbalelcsumxam@ycavirp.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on our website
- Updating the “Last Updated” date
- Sending an email notification (for significant changes)
We encourage you to review this Privacy Policy periodically.
15. Additional Disclosures
16.1 Google Advertising
We use Google Analytics and Google Ads to analyze website traffic and measure advertising effectiveness. Google may use cookies to serve ads based on your prior visits to our website. You can opt out of personalized advertising by visiting Google Ads Settings.
16.2 Meta (Facebook) Advertising
We use Meta Pixel to measure conversions, optimize ads, and build targeted audiences. You can manage your ad preferences in your Facebook settings or opt out through the cookie consent banner on our website.
By using our website, you acknowledge that you have read and understood this Privacy Policy.