Privacy Policy – DietLoom
Effective Date: 09.07.2025
Contact Email: info@dietloom.com
At DietLoom.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy is regulated by and governed in accordance with the laws of the UK and explains how we collect, use, store, and share your information when you visit our website or use our services. We comply with the General Data Protection Regulation (GDPR/UK GDPR), Strong Customer Authentication (SCA), and Payment Services Directive 2 (PSD2) requirements.
1. Who We Are
DietLoom is a digital marketplace where customers can purchase diet plans and consultations from verified professionals. We act as a data controller in relation to personal data you provide when using our platform.
Legal Entity: DIVERTECH LIMITED
Email Contact: info@dietloom.com
Website: www.dietloom.com
2. Data We Collect
We collect the following types of personal data:
a. Information You Provide
- Full name
- Email address
- Password (hashed and encrypted)
- Payment and billing details (processed via third-party providers)
- Professional credentials (for sellers)
- Communication preferences
- Any content voluntarily submitted in reviews, messages, or profiles
b. Automatically Collected Data
- IP address
- Browser type and version
- Time zone and device settings
- Pages visited and interaction data (via cookies and tracking tools)
3. Legal Basis for Processing (GDPR/UK GDPR Art. 6)
We process your data based on:
- Contractual necessity – to deliver the services you requested.
- Legal obligation – for tax, fraud prevention, and regulatory compliance.
- Consent – for email marketing or cookies (where applicable).
- Legitimate interests – for analytics, customer support, and service improvement.
4. How We Use Your Data
We use your information to:
- Create and manage your account
- Process payments securely
- Enable transactions between buyers and sellers
- Deliver customer support and respond to inquiries
- Improve website performance and personalization
- Comply with legal and financial regulations
- Send you transactional or marketing communications (if opted in)
5. Sharing Your Data
We only share your data with:
- Payment processors (e.g., Stripe, PayPal) for secure transactions
- Service providers (e.g., hosting, email, analytics) under strict confidentiality agreements
- Sellers, for the purpose of delivering purchased services (e.g., consultations)
- Authorities, where legally required (e.g., tax agencies, law enforcement)
We do not sell your personal data.
6. Payment Security and SCA/PSD2 Compliance
All payment transactions on DietLoom comply with PSD2 and Strong Customer Authentication (SCA) requirements:
- Payments are processed through PCI DSS-compliant third-party processors (e.g., Stripe).
- Two-factor authentication (2FA) or biometric authorization may be required during payment.
- We do not store your full card details on our servers.
7. Your Rights Under GDPR
You have the following rights:
- Right to Access – You can request a copy of your data.
- Right to Rectification – You can request corrections to inaccurate data.
- Right to Erasure (Right to be Forgotten) – You may request deletion of your data.
- Right to Restrict Processing – You may limit how your data is used.
- Right to Data Portability – You can request a transfer of your data to another provider.
- Right to Object – You can object to processing based on legitimate interests.
- Right to Withdraw Consent – You can withdraw consent for non-essential processing at any time.
To exercise any of these rights, contact info@dietloom.com.
8. Data Retention
We retain your personal data:
- For as long as your account is active, and
- As required to fulfill legal, tax, and compliance obligations (usually up to 6 years post-transaction)
If you request account deletion, we will anonymize or securely delete your personal data where legally permissible.
9. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain session states
- Analyze traffic and behavior
- Offer personalized content and features
You may manage your cookie preferences through your browser or our cookie banner settings.
10. International Data Transfers
If you are outside the EU, your data may be transferred to servers hosted in other countries. Where this happens, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your information.
11. Children’s Privacy
DietLoom is not intended for individuals under the age of 18. We do not knowingly collect data from children.
12. Data Breach Notification
In the unlikely event of a data breach, we will:
- Notify affected users promptly
- Inform the relevant data protection authorities within 72 hours, as required by GDPR
13. Changes to This Policy
We may update this policy to reflect legal or operational changes. The updated version will always include a revision date and will be posted on our website. Continued use of our services constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
You also have the right to lodge a complaint with your local Data Protection Authority.
DIVERTECH LIMITED
Registration number 16568183
Suite10 Capital House, 61 Amhurst Road, London, United Kingdom, E8 1LL