Privacy policy
Last Updated: August 28, 2025
NATURALEBIO S.R.L. (“NaturaleBio”, “We”, “Us”, “Our”) is committed to maintaining the privacy of its users and customers (“You”, “Your”).
We invite You to carefully read this Privacy Policy, which describes how We collect and use Your personal information about You when You use and/or interact with www.naturalebio.com (“Our Website”) – for example, by placing an order and completing a purchase. This Privacy Policy also explains the purposes of the processing and Your rights under applicable data protection regulations.
If You do not agree with any part of this Privacy Policy, You should refrain from using or interacting with Our Website.
1. Data Controller
The Data Controller is NATURALEBIO S.R.L., trading as “NaturaleBio”.
Company Number: IT16450161001
Registered Office: Via Lima 7, 00198, Rome, Lazio
Email: help@naturalebio.com
2. Categories of Personal Data Collected and Processed
Please note that mere access to Our Website does not require You to provide any Personal Data, except as otherwise specified in Our Cookie Policy.
However, the use of certain services, functionalities or features of Our Website may require the provision of specific Personal Data, as indicated in the relevant forms. In such cases, the Processing of Your Personal Data will take place for the purposes described in this Privacy Policy.
The categories of Personal Data We collect and process include:
-
Identification data, such as first name, last name, identification number (only if required for billing purposes).
-
Contact data, such as postal address, e-mail address, telephone number.
-
Delivery data, such as preferred delivery date, delivery instructions, or access information required by the logistics provider.
-
Order notes or specifications, such as product customization requests or special handling requirements.
-
Financial data, such as payment information.
-
Transaction data, such as information on purchases, orders, returns and completed transactions.
-
Other data: any additional information that You voluntarily provide to Us when submitting a request, enquiry, complaint, or other form of contact.
Refusal to provide the Personal Data marked as mandatory in the relevant forms, or the Personal Data required for the performance of a contract between the parties, may result in Our inability to provide certain services or functionalities, or to process Your requests or contractual relationship.
3. How We Use Your Information
|
Purpose of Processing |
Legal Basis |
Retention period |
|
Handling of Queries, Requests for Information and Other Related Communications. |
Where Your enquiry or request relates to the performance of a contract already in place — for instance, in connection with an order — the processing is necessary for the performance of that contract. If Your request involves the exercise of data protection rights, the processing is carried out in order to comply with Our legal obligations. In the rest of the cases, the legal basis for the processing is Your consent. |
Your Personal Data will be retained for the time strictly necessary to address Your enquiry or request. Once the matter, request, query etc. is resolved, Your Personal Data may continue to be retained for the time strictly necessary to comply with legal obligations or to establish, exercise or defend potential legal claims arising from the processing. Once this period has elapsed, Your Personal Data will be securely deleted or rendered irreversibly anonymous. |
|
Management of orders and purchases |
The processing is necessary for the performance of a contract We have with You or because You have asked Us to take specific steps before entering into a contract. |
Your Personal Data will be retained until the order has been fully completed — including delivery, invoicing, and the resolution of any related queries or disputes —. Thereafter, Your Personal Data may continue to be retained for the time strictly necessary to comply with legal obligations or to establish, exercise or defend potential legal claims arising from the processing. Once this period has elapsed, Your Personal Data will be securely deleted or rendered irreversibly anonymous. |
|
Management of incidents, returns and/or complaints |
The processing is necessary for the performance of a contract We have with You or because You have asked Us to take specific steps before entering into a contract. |
Your Personal Data will be retained for the time strictly necessary to process and resolve the relevant incident, return or complaint, and to ensure proper follow-up. After the issue has been fully resolved, Your Personal Data may continue to be retained for the time strictly necessary to comply with legal obligations or to establish, exercise or defend potential legal claims arising from the processing. Once this period has elapsed, Your Personal Data will be securely deleted or rendered irreversibly anonymous. |
|
Management and Maintenance of the Commercial Relationship with Suppliers. |
The processing is necessary for the performance of a contract We have with You. In certain cases, the processing is necessary for compliance with a legal obligation to which we are subject, such as those arising from tax, accounting or other applicable regulatory requirements. |
Your Personal Data will be retained for the duration of the contractual relationship. Once the contractual relationship has ended Your Personal Data may continue to be retained for the time strictly necessary to comply with legal obligations or to establish, exercise or defend potential legal claims arising from the processing. Once this period has elapsed, Your Personal Data will be securely deleted or rendered irreversibly anonymous. |
|
Sending Commercial Communications by Email or Equivalent Means Concerning Products, Services, Promotions, Training Courses, Newsletters, Surveys and Other Marketing Content. |
The processing is based in Your consent. You are entitled to withdraw Your consent at any time. This withdrawal will not affect the lawfulness of any data sharing or processing carried out before Your consent was withdrawn. |
Your Personal Data will be retained for marketing purposes until You withdraw Your consent or, where applicable, until You cease to interact with Us for a prolonged period of time. Once this period has elapsed, Your Personal Data may be retained only for the time strictly necessary to comply with legal obligations or to establish, exercise, or defend potential legal claims arising from the processing. Afterwards, Your Personal Data will be securely deleted or anonymized. |
|
Sending commercial information and/or offers on products offered by YABA Group companies |
The processing is based in Your consent. You are entitled to withdraw Your consent at any time. This withdrawal will not affect the lawfulness of any data sharing or processing carried out before Your consent was withdrawn. |
Your Personal Data will be retained for marketing purposes until You withdraw Your consent or, where applicable, until You cease to interact with Us for a prolonged period of time. Once this period has elapsed, Your Personal Data may be retained only for the time strictly necessary to comply with legal obligations or to establish, exercise, or defend potential legal claims arising from the processing. Afterwards, Your Personal Data will be securely deleted or anonymized. |
4. How Your Information Is Shared
We may share some or all of the categories of Your information, as identified above, with the following categories of recipients:
-
Third-party service providers provide services to us for a variety of business purposes, such as payment processing, customer service, email deployment, advertising and marketing, fraud prevention, performance monitoring, maintaining or servicing accounts, information hosting, auditing, and information processing.
-
Public Administrations.
-
State Security Forces and Bodies.
-
Banks and Financial Entities.
-
Judges and Courts and Security Forces and Corps
We carry out international data transfers only where necessary for the conclusion or performance of a contract, entered into in Your interest, between Us and another natural or legal person. When international transfers occur, We ensure that adequate safeguards are in place, in accordance with applicable data protection laws, as applicable.
5. Your Responsibilities
You are responsible for ensuring that the Personal Data You provide is true, accurate, complete, and up to date. You undertake to inform Us of any change to such data, insofar as it remains relevant for the purposes for which it was collected by Us.
Failure to provide accurate, current or complete information may hinder or prevent the proper handling of Your requests and/or queries, the conclusion or performance of the services You request, or the fulfilment of any other obligation derived from Your relationship with Us.
Where applicable, You shall be liable for any direct or indirect damages, including liquidated damages, that may result from a breach of this obligation.
If You provide Personal Data relating to third parties, You declare and warrant that You have obtained their prior and informed consent to communicate their data to Us, and that You have informed them of the terms set out in this Privacy Policy. You agree to hold Us harmless from any liability, claim or sanction that may arise as a result of non-compliance with this obligation.
6. YOUR DATA PROTECTION RIGHTS
Regardless of the specific purpose or legal basis under which We process Your Personal Data, You may exercise the following rights in accordance with applicable data protection legislation:
-
Right of Access. You have the right to obtain confirmation as to whether We are processing Your Personal Data and, if so, to access such data.
-
Right to Rectification. You may request the rectification of inaccurate or incomplete Personal Data concerning You, without undue delay. Please ensure that all data provided to Us is accurate and up to date and inform Us promptly of any changes. You are solely responsible for any loss or damage caused as a result of providing inaccurate, incomplete, or outdated information.
-
Right to Erasure You may request the erasure of Your Personal Data when it is no longer necessary for the purposes for which it was collected, when You withdraw Your consent (where applicable), or when We are no longer legally permitted to retain it.
-
Right to Restriction of Processing. In certain circumstances, You may request the restriction of the processing of Your Personal Data — for example, while We verify the accuracy of the data or assess an objection to processing.
-
Right to Data Portability. Where processing is based on consent or a contract and carried out by automated means, You may request to receive the Personal Data You provided in a structured, commonly used, and machine-readable format, and to have it transmitted directly to another controller, where technically feasible.
-
Right to Object. Where We rely on Our legitimate interest as a legal basis, You have the right to object to the processing of Your Personal Data. We will evaluate such objection and cease processing unless We can demonstrate compelling legitimate grounds that override Your interests, rights, and freedoms.
-
Right to Withdraw Consent. Where We rely on Your consent to process Your Personal Data, You have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
-
Right to lodge a complaint with supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority. You may contact the Italian Data Protection Authority: Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
7. How to Exercise Your Rights.
You may exercise any of the above rights by contacting Us via email at help@naturalebio.com, or via regular mail at NATURALEBIO S.R.L., Via Lima 7, 00198, Rome, Lazio (Italia).
8. MODIFICATION OF THE PRIVACY POLICY
This Privacy Policy may be amended, supplemented, or updated at any time in order to reflect changes in Our data processing activities, legal obligations, or technological developments.
Any material changes will be communicated through the same channels by which this Policy is made available (e.g., via publication on the Website), or, where appropriate, via direct notification.
The version of the Privacy Policy published at the time of access or interaction with Us shall apply, until it is replaced by a new version duly published. We encourage You to check this page periodically to stay informed of how We protect Your Personal Data.