Privacy Policy
LAST UPDATED: 29 AUGUST 2026
Herbs for Lions (“HFL”, “we”, “us”, or “our”) is committed to protecting your privacy and being transparent about how we collect, use, store, and share personal data.
This Privacy Policy explains how we process personal data when you visit www.herbsforlions.com, create an account, participate in our community, contact us, register for a course or event, make a purchase, or otherwise interact with our services.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR), applicable Swedish data protection law, and other applicable legislation.
Who We Are
Herbs for Lions (HFL)
C/O Sandra Karlsson
Norra Åbyvägen 172-0
231 73 Anderslöv
Sweden
Contact email: info@herbsforlions.com
Herbs for Lions is based in Sweden and provides herbal education, courses, community features, editorial content, and related products and services.
Herbs for Lions is the Data Controller responsible for the personal data described in this policy.
What Personal Data We Collect
Information you provide directly
Depending on how you use the website, we may collect:
• your first and last name
• your email address
• your phone number, if provided
• the contents of messages and enquiries you send to us
• newsletter subscription details and marketing preferences
• course, workshop, event, or booking information
• billing, delivery, and transaction information when purchases are available
• account and profile information when you register as a member
• posts, comments, group activity, exchange listings, and other content you choose to share
• correspondence and customer-support history
Payment card details are processed by the payment provider shown during checkout. We do not store complete payment card details ourselves.
Information collected automatically
Our website is created and hosted using Wix. When you visit or interact with the website, Wix and its connected services may automatically collect:
• IP address
• browser type and version
• device type and identifiers
• operating system
• language and general location, such as country or city
• pages viewed, links selected, and time spent on the website
• referring page or website
• date and time of visits
• login, session, security, and authentication information
• shopping-cart, transaction, and account activity, where applicable
• cookie identifiers and consent preferences
• diagnostic, performance, fraud-prevention, and security data
The exact information collected may depend on your device, browser settings, cookie choices, and the features you use.
Third-party Sign-in And Embedded Services
If you register or sign in using a third-party service such as Google or Facebook, that provider may share information with Wix and Herbs for Lions, such as your name, email address, profile image, and account identifier.
The information shared depends on the permissions you grant and the provider’s privacy settings.
The website may also include embedded content from third parties, including Spotify podcast players and social-media features. When embedded content loads or you interact with it, the relevant provider may collect information such as your IP address, device and browser information, cookie identifiers, and interaction data.
These providers process personal data under their own privacy policies and may act as independent Data Controllers for their processing.
Why We Collect Your Data
We process personal data to:
• operate, maintain, secure, and improve the website
• create and manage member accounts and community features
• display profile information, posts, comments, and exchange activity that you choose to make public
• respond to enquiries and provide customer support
• administer courses, workshops, events, bookings, and purchases
• process payments and fulfil orders
• send newsletters and marketing communications when you have consented
• remember preferences and manage cookie choices
• analyse website traffic, performance, and use
• prevent fraud, misuse, and security incidents
• maintain business, accounting, and legal records
• comply with legal obligations and respond to lawful requests
We do not sell personal data.
Legal Bases For Processing
We process personal data under one or more of the following legal bases:
Consent
We may rely on your consent for newsletters, optional marketing communications, non-essential cookies, and other processing where we specifically request consent. You may withdraw your consent at any time.
Contractual necessity
We process data when necessary to provide a requested service, manage a course, event, booking, membership, or purchase, process payments, deliver products or services, or take steps at your request before entering into a contract.
Legitimate interests
We may process data where necessary to respond to enquiries, operate and improve the website, understand general website use, protect our users and business, prevent fraud, and manage ordinary business administration.
Legal obligation
We process data when required to comply with applicable accounting, tax, consumer-protection, and regulatory requirements.
How We Use Your Personal Data
We may use your personal data to provide and manage our services, respond to messages, administer member accounts and community features, process bookings and purchases, send communications you have requested, improve website performance, analyse general usage, maintain security, and comply with legal obligations.
We only use personal data for the purposes described in this policy or for another compatible purpose permitted by law.
Member Accounts And Public Community Content
The Herbs for Lions community and exchange features allow members to create profiles, join groups, publish posts, comment, and interact with other members.
Information you choose to publish may be visible to other members or to the public, depending on the feature and your settings. This may include your display name, profile image, biography, posts, comments, group membership, exchange activity, and join date.
Please avoid publishing sensitive personal data or information you do not want others to see. You are responsible for the information you voluntarily make public.
You may update your profile settings or contact us if you need assistance managing or removing content.
Sharing Your Data With Third Parties
We may share personal data only when necessary with:
• Wix.com, for website hosting, infrastructure, member accounts, community functions, analytics, security, forms, CRM, ecommerce, and related services
• payment providers, for payment processing and fraud prevention when purchases are available
• email and communication providers, for newsletters, service emails, and customer communication
• Spotify, when podcast players or other Spotify content are embedded or used
• Google or Meta/Facebook, when you use their sign-in services or connected features
• professional service providers, such as IT, accounting, legal, or technical advisers
• public authorities or other parties when required by law or necessary to establish, exercise, or defend legal claims
Service providers processing data on our behalf may only use it for the agreed purposes and must protect it appropriately.
Some third-party providers may process data as independent Data Controllers under their own privacy policies.
We do not sell personal data.
International Transfers
Wix and other service providers may process personal data in countries outside Sweden or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we rely on appropriate safeguards required by applicable law. These may include an adequacy decision by the European Commission, approved Standard Contractual Clauses, or another lawful transfer mechanism.
Cookies
Cookies are small files stored on your device. Wix and connected services may use cookies, local storage, pixels, and similar technologies to operate the website and remember information.
Essential cookies
These are required for website security, fraud prevention, network management, site stability, member login, authentication, session management, shopping-cart functions, checkout, and storing cookie-consent choices.
Essential cookies may be placed without consent where permitted by law because the website cannot function properly without them.
Functional cookies
These support optional features and preferences, including embedded media and certain third-party services.
Analytics cookies
These help us understand how visitors use the website, identify technical problems, and improve performance and usability.
Marketing cookies
If enabled, these may be used to measure campaigns, personalise content or advertising, and understand activity across websites.
Where consent is required, non-essential cookies and related scripts are not activated until you make a choice through the cookie banner. You can change or withdraw your consent through the website’s cookie settings.
You can also manage cookies through your browser, although disabling essential cookies may affect website functionality.
Because third-party services may change their technologies, the specific cookies used can change over time. The cookie banner or cookie settings provide the most current available information about active cookie categories.
Ai-generated And Ai-enhanced Content
Some images, videos, visual environments, effects, or other creative materials on the website may be wholly or partly generated, altered, or enhanced using artificial intelligence.
This content is used for artistic, illustrative, editorial, or storytelling purposes. Unless clearly stated otherwise, AI-generated or AI-enhanced material should not be interpreted as a photographic or documentary record of an actual person, location, event, medical outcome, or historical occurrence.
We review AI-assisted content before publication and do not intentionally use it to impersonate real individuals, fabricate endorsements, or misrepresent health results.
Where AI-generated or manipulated images, audio, or video appreciably resemble authentic people, objects, places, entities, or events and could reasonably be mistaken for authentic content, we aim to provide clear and appropriate disclosure in accordance with applicable transparency requirements.
Where technically available and relevant, content may also contain machine-readable indications that it was generated or modified using AI.
For artistic or creative works, disclosure may be presented in a way that informs visitors without unnecessarily disrupting the display or enjoyment of the work.
How Your Data Is Stored and Protected
Our website is hosted on the Wix.com platform. Wix provides technical and organisational security measures for its infrastructure, including encrypted connections, access controls, monitoring, and security protections.
We limit access to personal data to people and service providers who need it for legitimate business purposes.
However, no online service can guarantee absolute security, and you should take appropriate care when sharing information online.
Data Retention
We keep personal data only for as long as necessary for the relevant purpose or as required by law.
Our general retention periods are:
• contact-form messages and ordinary enquiries: normally up to 12 months after the matter is concluded
• newsletter subscription data: until you unsubscribe or the service is discontinued
• member-account and profile information: while the account remains active and for a limited period afterwards where necessary for security, backup, disputes, or legal purposes
• public posts, comments, and community content: until removed by you or us, subject to technical backups and legal requirements
• purchase, payment, and accounting records: normally 7 years where required under Swedish accounting law
• course, event, and booking information: for as long as necessary to administer the service and handle legal or contractual claims
• analytics and cookie data: according to our settings, consent choices, and the relevant provider’s retention periods
When data is no longer needed, it is deleted, anonymised, or securely retained only where required by law.
Your Rights Under GDPR
Subject to applicable conditions and exceptions, you have the right to:
• request access to your personal data
• request correction of inaccurate or incomplete data
• request deletion of your data
• request restriction of processing
• object to processing based on legitimate interests
• object to direct marketing at any time
• withdraw consent at any time
• request data portability where applicable
• lodge a complaint with a supervisory authority
To exercise your rights, contact info@herbsforlions.com. We may need to verify your identity before completing a request.
You may also lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or with the competent supervisory authority in the country where you live or work.
Third-Party Links
The website may link to or embed third-party websites and services.
We are not responsible for their content, security, or privacy practices. We encourage you to review the privacy policy of any third-party service you use.
Children’s Privacy
Our services are not directed to children under 16, and we do not knowingly collect personal data from children under 16 without appropriate authorisation.
If you believe a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete it.
Updates to This Privacy Policy
We may update this Privacy Policy to reflect changes in our website, services, providers, or legal obligations.
The current version will be published on this page with the date of the latest update.
Contact Us
If you have any questions about this Privacy Policy or how your data is handled, contact:
Herbs for Lions
Email: info@herbsforlions.com
