Privacy Policy — DetoxMetals.com

Last updated: 25th September 2026.

At Detox Metals, we respect your privacy and recognise the importance of handling personal information responsibly. This policy explains what information we collect, why we use it, who we share it with, and the choices and rights available to you.

This policy applies specifically to https://detoxmetals.com, including purchases, subscriptions, customer accounts, enquiries and other services provided through this website. It does not cover other websites, even where they are linked to DetoxMetals.com or operated by an associated business.

1. Who is responsible for your information?

DetoxMetals.com is operated by GMG Da Vinci Health Ltd, a company registered in Cyprus under registration number HE356332.

GMG Da Vinci Health Ltd is the data controller for the personal information it collects and uses in connection with this website. This means we determine why and how that information is processed.

For privacy questions or requests, please contact:

GMG Da Vinci Health Ltd
Larnaca, Cyprus
Email: admin@detoxmetals.com
Telephone: +357 24 823 322

Please include “Privacy Request” in your email subject line to help us direct your enquiry.

2. Information we collect

The information we collect depends on how you interact with us.

Orders and deliveries

When you place an order, we collect information needed to process and deliver it, including your name, billing and delivery addresses, email address, telephone number, products ordered and transaction details.

Customer accounts and subscriptions

If you create an account or purchase a subscription, we process account credentials, order history, subscription preferences, billing schedules, renewal records and any changes or cancellation requests.

Payments

Our payment providers process payment information. We receive information needed to administer the transaction, such as payment status, transaction references and, where applicable, limited payment-method details or a payment token used for authorised recurring payments.

Enquiries and customer support

When you contact us, we collect your contact details, the content of your message and information needed to respond. This may include order references, correspondence or photographs relating to a delivery or product issue.

Newsletters and marketing preferences

When you subscribe to our newsletter or request promotional communications, we collect your email address, any name you provide, your preferences and records of your consent or withdrawal.

Reviews and testimonials

If you submit a review or testimonial, we collect the information you provide for that purpose. Information identified as public, such as your display name, rating and review, may appear on the website.

Please avoid including private medical information or another person’s personal details in a public review.

Website and device information

When you visit the website, technical information may be recorded, including your IP address, browser type, device information, pages requested, referring website, and the dates and times of access.

IP addresses, cookie identifiers and similar information can constitute personal data, even when they do not directly reveal your name.

Health information and hair testing

If you request a service involving health information, or provide information about symptoms, medical history or test results, additional protections apply. Please see Section 5.

We obtain information directly from you and, where relevant to your transaction, from payment providers, delivery partners and service providers. For a testing service, this may also include information from the laboratory or a practitioner you have authorised.

3. Why we use your information

We process personal information only where we have an appropriate legal basis.

Where we rely on legitimate interests, we consider the necessity of the processing and its effect on your rights and reasonable expectations.

Health information requires an additional legal condition, as explained below.

Some information is necessary to fulfil an order or comply with the law. If you do not provide it, we may be unable to complete your purchase or deliver the requested service. Optional information and optional marketing consent are not required simply to purchase products.

4. Payments and recurring subscriptions

Payments are handled through the payment providers offered at checkout, including Stripe and PayPal.

These providers process payment information under their own privacy notices and may carry out identity, security and fraud-prevention checks.

For subscriptions, we and the relevant payment provider process the information necessary to manage your chosen billing schedule and authorised recurring payments. This may include a payment token or billing-agreement reference rather than the full payment-card number.

Do not send full card details, card security codes or banking passwords to us by email or through a general contact form.

Cancelling a subscription stops future renewals in accordance with the applicable subscription terms. It does not automatically erase previous order, accounting or transaction records that we must retain.

Unsubscribing from marketing does not cancel a product subscription, and cancelling a product subscription does not automatically change your marketing preferences.

5. Health information and hair-testing services

Information about your health, including test results and certain information inferred from them, may be special-category personal data under data protection law.

Purchasing ordinary supplements does not require you to provide a medical history. Please send health information only where it is necessary for an enquiry or service you have requested.

Where a service requires us to process health information, we explain the specific purpose, recipients and handling arrangements before collecting it. We require an appropriate general legal basis and an additional condition permitting the processing of health information.

Where we rely on your explicit consent, we request this separately. Merely using the website or accepting general terms does not provide that consent. You may withdraw it by contacting us, although this may prevent us from continuing a service that depends on that information. Withdrawal does not affect processing lawfully carried out beforehand.

Access to health information is limited to people and providers who need it for the stated purpose. Any use of identifiable health information in a testimonial, research project or other separate activity requires its own appropriate legal basis and information for the individual concerned.

6. Newsletters, free resources and marketing

If you choose to receive our newsletter, we may send educational articles, product news, offers and other Detox Metals updates through Brevo.

Where a free guide is offered with a newsletter subscription, the sign-up form will explain what you are subscribing to. Requesting information or placing an order does not, by itself, constitute consent to unrelated marketing.

You may unsubscribe at any time by using the link in a marketing email or contacting admin@detoxmetals.com.

We may retain a limited suppression record, such as your email address and opt-out status, to help ensure that you are not added back to the mailing list unintentionally.

We may still send necessary non-marketing communications, such as order confirmations, delivery updates, subscription notices, security messages and responses to enquiries.

7. Cookies and similar technologies

The website uses cookies and similar technologies for different purposes.

Strictly necessary technologies support functions such as the shopping basket, account login, security and recording privacy preferences.

Optional technologies, where enabled, may support analytics, advertising, personalisation or third-party content such as embedded videos.

Where consent is required, optional technologies must not be activated until you have made the relevant choice. You can refuse optional categories without losing access to the basic shopping functions of the website.

Browser settings allow you to manage cookies, although blocking necessary cookies may affect checkout or account functions.

8. Who receives your information?

We share information only where there is an appropriate purpose and legal basis. Recipients may include:

• Website hosting, maintenance, security and technical-support providers.

• Payment providers and subscription-management services.

• Warehousing, fulfilment, courier and postal partners.

• Customer-support and email-delivery providers.

• Email-marketing providers, according to your choices.

• Analytics and advertising providers, where enabled and permitted by your choices.

• Laboratories and authorised practitioners involved in a testing service you request.

• Accountants, legal advisers, insurers and other professional advisers.

• Public authorities where disclosure is required or otherwise lawfully justified.

For example, a fulfilment partner may need your name, delivery address, contact information and order contents to dispatch your purchase.

Where a provider processes information on our behalf, we require appropriate contractual safeguards and instructions. Some recipients, including certain payment providers and laboratories, may act as independent data controllers for particular activities and have their own privacy notices.

If the business undergoes a sale, merger or restructuring, relevant information may be disclosed where necessary and lawful, subject to appropriate confidentiality protections and any required notices.

9. International transfers

Detox Metals is based in Cyprus. Some services involve providers or fulfilment operations in other countries, including the United States.

Where personal information is transferred outside the European Economic Area, we apply the safeguards required by applicable data protection law. Depending on the recipient and circumstances, these may include a relevant adequacy decision or approved Standard Contractual Clauses, together with additional protections where needed.

You may contact us for information about the safeguards relevant to your data and how to obtain a copy, subject to necessary redactions.

10. How long we retain information

We retain personal information only for as long as needed for the purpose for which it was collected, including applicable legal, accounting, security and dispute-resolution requirements.

The retention period depends on the information involved:

• Order and accounting records: for the period required by applicable tax and accounting rules and any relevant dispute or claims period.

• Account and subscription information: while needed to maintain your account or subscription, followed by any necessary legal or administrative retention.

• Customer enquiries: until the matter is resolved and for a proportionate period afterwards to handle follow-up questions or disputes.

• Marketing information: while your subscription remains active, subject to periodic review. Limited opt-out records may be retained to respect your preferences.

• Technical and security records: for a period proportionate to security, troubleshooting and incident-investigation needs.

• Health information and testing records: according to the specific testing-service notice and applicable requirements.

• Cookie and tracking data: for the durations stated in the cookie notice or relevant provider information.

When information is no longer needed, we delete it or anonymise it. Backup copies may remain temporarily until replaced or removed through the backup-retention cycle and remain protected during that period.

11. How we protect your information

We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Access is limited according to business need, and security arrangements are reviewed in light of the nature of the information and the risks involved.

No website, transmission method or storage system can be guaranteed completely secure. If a personal-data breach occurs, we assess it and notify the relevant authority and affected individuals where legally required.

Please keep your account credentials confidential and contact us promptly if you suspect unauthorised account access.

12. Your privacy rights

Subject to applicable conditions and exceptions, you may have the right to:

• Obtain confirmation of whether we process your personal data and request access to it.

• Correct inaccurate or incomplete information.

• Request deletion of your information.

• Restrict certain processing.

• Receive certain information in a portable format.

• Object to processing based on legitimate interests.

• Object at any time to direct marketing, including related profiling.

• Withdraw consent where processing relies on consent.

• Challenge qualifying decisions based solely on automated processing.

These rights are not absolute. For example, we may need to retain some records to comply with legal obligations or establish, exercise or defend legal claims.

To make a request, contact admin@detoxmetals.com. We may ask for proportionate information to verify your identity.

We respond without undue delay and normally within one month. Where permitted because of the complexity or number of requests, we may extend this by up to two further months and explain the extension within the first month.

Requests are normally free of charge. If a lawful exception applies, we will explain it.

Depending on where you live and which laws apply, you may have additional privacy rights.

13. Children’s information

Our purchasing and account services are intended for adults.

If a parent or guardian requests an eligible service for a child, any necessary information about the child must be handled under the specific arrangements for that service, including appropriate authority or consent and additional protections.

Please contact us if you believe a child has provided personal information without the necessary involvement of a parent or guardian, so that we can assess the situation and take appropriate action.

14. External websites

The website may contain links to third-party websites or services.

When you follow a link, the destination’s privacy notice applies to its own handling of your information. We encourage you to read it before providing personal details.

This does not remove our responsibility for any personal information that we ourselves disclose to a third party.

15. Complaints

If you have a concern about how we handle your information, please contact admin@detoxmetals.com.

You also have the right to complain to a competent data protection authority. In Cyprus, this is the:

Office of the Commissioner for Personal Data Protection
Email: commissioner@dataprotection.gov.cy
Official information: Cyprus Commissioner for Personal Data Protection — complaints

Where applicable, you may also complain to the supervisory authority in the country of your habitual residence, place of work or the alleged infringement. You do not have to contact us first to exercise that right.

16. Changes to this policy

We may update this policy when our services, data-handling practices or legal requirements change.

The latest version will appear on this page with its updated date. Where required, we will provide additional notice of significant changes.

Updating this policy does not automatically provide consent for a new use of your information. Where new consent is required, we will request it separately.