Privacy Policy

Last updated: July 10, 2026

This Privacy Policy explains how healthy live club (healthylive.club) — an independent editorial magazine — collects, uses, and protects your personal data when you visit or interact with our website. We are committed to processing your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller and Contact

The controller responsible for data processing on this website is:

If you have any questions or concerns about how your personal data is handled, or wish to exercise your data subject rights, please contact us at the email address above.

2. Data We Collect and Why

Depending on how you use our website, we may collect the following categories of personal data:

2.1 Automatically Collected Data (Server Logs)

When you visit our website, our web server automatically records technical information, including:

• IP address (anonymised where possible)
• Date and time of access
• URL and pages visited
• Browser type and version
• Operating system and device type
• Referring URL

This data is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in maintaining the security and stable operation of our website. Log files are retained for a maximum of 30 days and then deleted or anonymised.

2.2 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device. We use the following categories:

When you first visit our website, you will be shown a cookie consent banner where you can accept or decline non-essential cookies. You can also manage or withdraw your consent at any time through your browser settings or by clearing your cookies. Please note that disabling certain cookies may affect the functionality of the website.

2.3 Contact and Enquiries

If you contact us by email, we will process the personal data you provide (such as your name and email address) solely for the purpose of responding to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in handling correspondence). We will delete this data once it is no longer required, unless statutory retention periods apply.

3. Hosting and Infrastructure

Our website is hosted by a professional third-party hosting provider. In the course of providing hosting services, the provider may process technical data (such as IP addresses and log data) on our behalf as a data processor. We have concluded a Data Processing Agreement (DPA) with our hosting provider in accordance with Art. 28 GDPR to ensure appropriate data protection safeguards.

Server infrastructure may be located within or outside the European Economic Area (EEA). Where data is transferred to countries outside the EEA, we ensure that appropriate safeguards are in place, such as the EU Standard Contractual Clauses (SCCs) adopted by the European Commission.

4. Data Security and SSL Encryption

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. Our website uses SSL/TLS encryption (indicated by the padlock icon and "https://" in your browser's address bar) for all data transmitted between your browser and our server. This ensures that any information you send to us cannot be intercepted by third parties during transmission.

5. Third-Party Services and Data Sharing

We may share your data with the following categories of third parties, strictly to the extent necessary for the purposes described in this policy:

• Hosting providers — to operate and maintain our website infrastructure.
• Analytics providers — to understand website usage (only with your consent, where required).
• Advertising networks — to serve relevant advertisements (only with your consent, where required).
• Legal and regulatory authorities — if we are required to disclose information by law, court order, or to protect our legal rights.

We do not sell your personal data to third parties. We do not share your data for purposes other than those described in this Privacy Policy. All third-party service providers acting as data processors are bound by appropriate contractual safeguards (Art. 28 GDPR), and any international data transfers are carried out under recognised transfer mechanisms (e.g. Standard Contractual Clauses).

6. Legal Bases for Processing

We process personal data only where a valid legal basis exists under Art. 6 GDPR:

• Art. 6(1)(a) — Consent: Where you have given us your explicit consent (e.g. for analytics and marketing cookies).
• Art. 6(1)(b) — Contract: Where processing is necessary to fulfil a contract or take pre-contractual steps at your request.
• Art. 6(1)(c) — Legal obligation: Where we are required to process data to comply with a legal obligation.
• Art. 6(1)(f) — Legitimate interests: Where processing is necessary for our legitimate interests (e.g. website security, fraud prevention, handling enquiries), provided these are not overridden by your fundamental rights and freedoms.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods depend on the category of data and the purpose of processing:

• Server log files: Up to 30 days, then deleted or anonymised.
• Contact enquiries: Deleted once the enquiry has been resolved, unless longer retention is required by law.
• Analytics / cookie data: In accordance with the respective provider's data retention settings and your consent preferences.

8. Your Data Subject Rights

As a data subject under the GDPR, you have the following rights with respect to your personal data:

• Right of access (Art. 15 GDPR): You have the right to obtain confirmation of whether we process personal data about you and, if so, to receive a copy of that data.
• Right to rectification (Art. 16 GDPR): You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data where the applicable conditions are met ("right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability (Art. 20 GDPR): You have the right to receive personal data you have provided to us in a structured, commonly used, machine-readable format, and to transmit it to another controller.
• Right to object (Art. 21 GDPR): You have the right to object at any time to the processing of your personal data where we rely on legitimate interests as the legal basis, or where your data is processed for direct marketing purposes.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. As our controller is based in Hong Kong, you may also contact the supervisory authority in your EU/EEA member state of residence or workplace, or the authority competent for the place of the alleged infringement.

To exercise any of these rights, please contact us at: