Last updated: 23 September 2026

This Privacy Policy explains how [TO COMPLETE: full legal entity name] (“TODAA”, “we”, “us”, “our”) processes personal data in connection with www.todaalife.com, online purchases, customer support, marketing and related services.

4.1 Data Controller

[TO COMPLETE: full legal entity name and registered address] is the data controller for personal data processed in connection with the Website, unless otherwise stated.

Privacy contact: support@todaalife.com

If an EU representative or Data Protection Officer is legally required for the final business structure, their details should be inserted here: [TO COMPLETE].

4.2 Personal Data We Collect

• Identity and contact data: name, email, telephone number, billing and delivery address.
• Order and transaction data: products purchased, order history, payment status and transaction references. We do not generally receive or store full payment-card details where payment is processed by a third-party payment provider.
• Account data, where accounts are offered: login credentials and account preferences.
• Customer-service communications and information you provide when contacting us.
• Technical and usage data: IP address, device/browser information, approximate location derived from IP where applicable, log data and Website interactions.
• Marketing preferences and cookie/advertising identifiers where you have consented to their use or where another lawful basis applies.

4.3 Purposes and Legal Bases

We process personal data only where a lawful basis applies. Depending on the circumstances, this may include:

• Contract: processing orders, payments, delivery, returns, customer accounts and customer support.
• Legal obligation: accounting, tax, product-safety, consumer-protection and other legal requirements.
• Legitimate interests: fraud prevention, Website security, service improvement, business administration and defending legal claims, where our interests are not overridden by your rights.
• Consent: optional marketing communications and non-essential cookies or similar technologies where consent is legally required. You may withdraw consent at any time without affecting processing that took place before withdrawal.

4.4 Marketing

Where required by law, we will send marketing communications only with your consent or on another lawful basis permitted by applicable law. Every marketing communication will provide an easy way to unsubscribe.

4.5 Cookies and Similar Technologies

We use essential cookies required for Website operation and, subject to applicable consent requirements, analytics, preference, advertising and other non-essential technologies. Please see our separate Cookie Policy.

4.6 Service Providers and Sharing

We may share personal data with service providers that process data on our behalf, including hosting and e-commerce providers, payment processors, fulfilment and delivery providers, customer-support providers, analytics providers and marketing technology providers. We may also disclose information where required by law, to protect rights and safety, or in connection with a corporate transaction.

4.7 International Transfers

Some service providers may process personal data outside the European Economic Area. Where EU/EEA data-protection law applies, we will use an appropriate transfer mechanism where required, such as an adequacy decision or appropriate safeguards including Standard Contractual Clauses.

4.8 Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including legal, tax, accounting, dispute-resolution and security requirements. Retention periods vary according to the type of data and purpose.

4.9 Your Rights

Subject to applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain data portability, and withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with the competent data-protection supervisory authority in your country.

Requests may be sent to support@todaalife.com. We may need to verify your identity before fulfilling a request.

4.10 Children

The Website is not intended to knowingly collect personal data from children in circumstances where parental consent is legally required. If you believe a child has provided us with personal data unlawfully, please contact us.

4.11 Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.