Privacy Policy

This Privacy Policy describes how BodyLab by Nikita Lord (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data when you visit or make a purchase from our website (the “Site”).

1. Data Controller

BodyLab by Nikita Lord is the data controller responsible for your personal data under applicable data-protection laws.
If you have any questions about this Privacy Policy or our data practices, you can contact us at: support@bodylabco.com

2. Personal Data We Collect

When you visit the Site, place an order, or contact us, we may collect the following categories of personal data:

a. Device Information
Examples: browser type, IP address, time zone, cookie data, pages or products viewed, search terms, and interaction data.
Purpose: to operate the Site correctly, improve performance, and analyze usage.
Source: collected automatically through cookies and similar technologies.
Disclosure: shared with service providers and data processors solely to operate, support, and improve our services.
b. Order Information
Examples: name, billing and shipping address, email address, phone number, and payment or transaction details.
Purpose: to process and fulfil orders, arrange shipping, provide confirmations and invoices, communicate with you, screen transactions for fraud, and—where aligned with your preferences—provide information about our products or services.
Source: collected directly from you.
Disclosure: shared with service providers and data processors (such as payment, logistics, and e-commerce infrastructure providers) solely for legitimate business operations.
c. Customer Support Information
Examples: communications, inquiries, and related contact details.
Purpose: to provide customer support and respond to your requests.
Source: collected directly from you.
Disclosure: shared with service providers where necessary to provide support.

3. Minors

We do not intentionally collect personal data from children. If you are a parent or guardian and believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete such information.

4. Purpose of Processing

We process personal data to:

Operate, maintain, and improve the Site
Process and fulfil orders
Provide customer support
Communicate with you regarding orders or inquiries
Comply with legal, tax, accounting, and regulatory obligations
Protect against fraud, misuse, and security incidents

5. Lawful Basis for Processing (GDPR & UAE PDPL)

Where applicable under the General Data Protection Regulation (“GDPR”) and the United Arab Emirates Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) (“UAE PDPL”), we process personal data on one or more of the following lawful bases:

Your consent, where required
Performance of a contract or steps taken at your request prior to entering into a contract
Compliance with legal obligations
Protection of vital interests
Performance of a task carried out in the public interest or under official authority, where applicable
Legitimate interests pursued by us, provided such interests do not override your fundamental rights and freedoms

Where processing is based on consent, you may withdraw consent at any time, subject to applicable law.

6. Sharing of Personal Data

We may share personal data with trusted third-party service providers and processors who support our operations (such as hosting, payments, analytics, logistics, and customer support). These parties process data solely on our behalf and under appropriate contractual and security safeguards.

We may also disclose personal data where required to comply with applicable laws, regulations, or lawful requests, or to protect our rights.

7. Behavioral Advertising

We may use personal data to deliver marketing communications and advertising that are relevant to your interests and to measure campaign effectiveness.
This may involve analytics, advertising, and measurement technologies that collect information about your interaction with the Site, such as pages visited, purchases, device information, and engagement with advertisements.
Such data may be shared with third-party advertising and analytics partners solely for marketing, attribution, and performance measurement purposes, and only where permitted under applicable data-protection laws. Where required, this processing is based on your consent.
You can manage advertising preferences, withdraw consent, or opt out of certain forms of targeted advertising through your browser, device settings, or any consent-management tools provided on the Site.

8. Selling or Sharing Personal Information (CCPA/CPRA)

We do not sell personal information for monetary consideration.
We may share limited personal information with service providers, analytics providers, or advertising partners for business and commercial purposes, as permitted by law. Such disclosures do not constitute a “sale” or “sharing” of personal information as defined under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”).

9. International Data Transfers

Personal data may be processed or stored outside your country of residence, including in jurisdictions that may not provide the same level of data protection. Where required, we implement appropriate safeguards to ensure international data transfers comply with applicable data-protection laws.

10. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including order processing, record-keeping, legal, tax, and accounting requirements, and dispute resolution.
Personal data is not retained longer than necessary unless required or permitted by law. You may request erasure of your personal data, subject to applicable legal obligations and legitimate business requirements.

11. Automated Decision-Making

We do not engage in automated decision-making, including profiling, that produces legal effects concerning you or otherwise significantly affects you.
We may use limited automated processes for security, fraud prevention, and system integrity purposes. These measures are proportionate, time-limited, and do not result in decisions with legal or similarly significant effects on individuals.

12. Your Rights

EEA Residents (GDPR)
If you are a resident of the European Economic Area, you have the right to:

Access personal data we hold about you
Request correction or updating of inaccurate data
Request erasure, subject to legal limitations
Object to or restrict certain processing
Request data portability

UAE Residents (UAE PDPL)

If you are a resident of the United Arab Emirates, you have the right to access, correct, erase, restrict, or object to the processing of your personal data, subject to applicable legal limitations.

California Residents (CCPA/CPRA)
If you are a California resident, you have the right to:

Know what personal information we collect, use, or disclose
Request access to or deletion of personal information, subject to legal exceptions
Request correction of inaccurate personal information
Designate an authorized agent to act on your behalf

Requests may be submitted by contacting support@bodylabco.com.

13. Cookies

We use cookies and similar technologies to operate the Site, analyze performance, and enhance user experience. Cookies may be session-based or persistent and may remain on your device for varying periods depending on their purpose.
You can manage or disable cookies through your browser settings. Disabling cookies may affect Site functionality.

14. Do Not Track

There is no consistent industry standard for responding to “Do Not Track” signals. Accordingly, we do not alter our data-collection practices when such signals are detected.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Updates will be effective when posted on the Site.

16. Contact

For questions about this Privacy Policy, to exercise your rights, or to make a complaint, please contact us at:
support@bodylabco.com