Your privacy matters. This Privacy Policy explains how Malyte collects, uses, stores, and protects your personal data — including sensitive health-related information — in compliance with the EU General Data Protection Regulation (GDPR). By registering or using the Platform, you explicitly consent to the processing described in this Policy.
The data controller responsible for your personal data is:
Malyte
Italy
Email: hello@malyte.com
This Privacy Policy applies in favour of Malyte and any individual, company, or legal entity that at any time owns, manages, operates, or is responsible for the Malyte platform and its associated services, whether now or in the future.
We collect the following categories of personal data:
In order to generate personalised wellness plans, we collect the following information from Buyers. This data may constitute sensitive personal data under the GDPR and is processed only with your explicit consent:
Sensitive Data Notice: Physical measurements, health habits, and related personal information are classified as sensitive personal data under Article 9 of the GDPR. By completing a Buyer questionnaire, you explicitly consent to the collection and processing of this data solely for the purpose of generating your personalised wellness plan.
Malyte currently uses essential cookies only. In the future, we may deploy analytics, marketing, and third-party tracking cookies and technologies (including but not limited to Google Analytics, Meta Pixel, and similar tools). By accepting this Privacy Policy, you consent to the use of such cookies and tracking technologies, now and as they may be introduced in the future. You will be notified of any material changes via an in-platform notice or email, and will have the opportunity to update your preferences at any time through our Cookie Settings.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Creating and managing your account | Performance of a contract (Art. 6(1)(b)) |
| Generating personalised wellness plans | Explicit consent (Art. 6(1)(a) and Art. 9(2)(a)) |
| Processing payments and managing transactions | Performance of a contract (Art. 6(1)(b)) |
| Communicating with you about your account or purchases | Performance of a contract (Art. 6(1)(b)) |
| Sending platform updates, product news, and marketing | Consent (Art. 6(1)(a)) — you may opt out at any time |
| Improving the Platform and AI models | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Analytics and usage tracking (current and future) | Consent (Art. 6(1)(a)) |
| Fraud prevention and platform security | Legitimate interests (Art. 6(1)(f)) |
We do not sell your personal data. We may share your data with the following categories of third parties, strictly as necessary to operate the Platform:
All third-party processors are bound by data processing agreements and are required to handle your data in compliance with applicable privacy laws.
Some of our third-party service providers may process data outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, or equivalent measures as permitted under the GDPR.
We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law:
As a data subject under the GDPR, you have the following rights:
To exercise any of these rights, please contact us at hello@malyte.com. We will respond within 30 days.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:
Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and accept no liability for unauthorised access beyond our reasonable control.
Malyte is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has registered on our Platform, please contact us at hello@malyte.com.
We currently use only essential cookies necessary for the Platform to function. In the future, we intend to introduce additional cookies including:
By accepting this Privacy Policy at registration, you provide advance consent to the use of these cookie categories as they are introduced. You will always have the ability to manage your cookie preferences through our Cookie Settings panel, which will be made available when additional cookies are deployed.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Where changes are material, we will notify you by email or through a prominent notice on the Platform. Your continued use of the Platform following notification constitutes your acceptance of the updated Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:
Malyte — Data Protection Contact
Italy
hello@malyte.com