Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal data.

Last updated: September 2026

1. Who We Are

LHYTE is a supplement brand based in Spain, operated by Luka Felice (autónomo), registered address Carrer de Balmes, 191, Sarrià-Sant Gervasi, 08006 Barcelona, Spain. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

2. Information We Collect

We collect the following types of personal data:

  • Contact Information: Name, email address, phone number, shipping and billing addresses
  • Payment Information: Payment card details are processed securely through our payment providers (Shopify Payments) - we do not store full card numbers
  • Order Information: Products purchased, order history, delivery preferences
  • Usage Data: Information about how you interact with our website (pages visited, time spent)
  • Communication Data: Any messages or inquiries you send us

3. How We Use Your Data

We use your personal data only where we have a valid legal basis. The table below sets out each purpose, the legal basis under GDPR, and how long the data is kept.

  • Process and fulfill your orders - Contract (Article 6(1)(b) GDPR) - 6 years from order date (Spanish Commercial Code)
  • Send order confirmations and shipping updates - Contract (Article 6(1)(b) GDPR) - 6 years from order date
  • Respond to inquiries and provide customer support - Legitimate interest (Article 6(1)(f) GDPR) - 3 years from last contact
  • Send marketing communications - Consent (Article 6(1)(a) GDPR) - Until you withdraw consent
  • Improve our website and services (analytics) - Consent for non-essential analytics; legitimate interest for essential/error data - 26 months for GA4 data, or until consent is withdrawn
  • Comply with legal obligations (tax, accounting, consumer law) - Legal obligation (Article 6(1)(c) GDPR) - As required by law (e.g., 6 years for tax/accounting records)

4. Cookies

We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, and personalize content. Essential cookies are required for the website to function properly. Non-essential cookies (such as analytics and advertising) only load after you give consent through the cookie banner shown when you first visit the site. Our Cookie Policy at lhyte.com/cookies lists every cookie by name, provider, purpose and duration. You can change or withdraw your consent at any time using the "Cookie Settings" link at the bottom of every page, which reopens the banner, or by managing cookies through your browser settings.

5. Data Sharing

We may share your data with:

  • Shipping Carriers: To deliver your orders
  • Payment Processors: To securely process payments
  • Analytics Providers: To understand website usage (anonymized data)
  • Legal Authorities: When required by law

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Order data is retained for 6 years in line with Spanish Commercial Code requirements.

7. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (right to be forgotten)
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, please contact us at info@lhyte.com.

If you believe your rights have been infringed, you also have the right to lodge a complaint with the Spanish data protection supervisory authority (AEPD) at aepd.es.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data transmission is encrypted using SSL/TLS technology.

9. International Transfers

Most of your personal data is processed within the European Economic Area. Some of the tools we use to run our website, payments, and marketing transfer data to the United States: Shopify Payments and our storefront platform (Shopify), which relies on Standard Contractual Clauses approved by the European Commission for data processed outside the EEA; Google (Google LLC), for website analytics (GA4), certified under the EU-U.S. Data Privacy Framework; and Meta Platforms, Inc., for advertising (Meta Pixel), certified under the EU-U.S. Data Privacy Framework. The EU-U.S. Data Privacy Framework is recognized by the European Commission as providing an adequate level of protection for personal data transferred to certified US organizations under Article 45 GDPR. Where a provider is not covered by an adequacy decision, we rely on Standard Contractual Clauses as an alternative safeguard.

10. Contact Us

For any privacy-related questions or to exercise your rights, please contact us:

Email: info@lhyte.com

Address: LHYTE - Luka Felice, Carrer de Balmes, 191, Sarrià-Sant Gervasi, 08006 Barcelona, Spain

See also: