Privacy Policy

Privacy Policy
Effective date: July 11, 2026
Last updated: July 11, 2026
1. Who We Are
This Privacy Policy explains how POPA MARIA-SUSANA PERSOANĂ FIZICĂ AUTORIZATĂ (PFA), trading as Keto Reset by Shine™ (“Keto Reset by Shine,” “we,” “us,” or “our”), collects, uses, stores, discloses, and protects personal data when you visit ketoshine.com, purchase a digital product, enroll in a premium coaching program or membership, participate in a corporate wellness program, communicate with us, or otherwise use our health-focused services.
Our registered office is:
POPA MARIA-SUSANA PFA
Str. Virgil Madgearu, Nr. 25-27, Bl. Corp B, Et. 1, Ap. 215
Sector 1, Bucharest, Romania
Romanian Tax Identification Number (CUI): 54000506
Trade Register Number: F2026008899
We are established in Romania and act as the data controller for the information described in this Policy, except where expressly stated otherwise.
The EU General Data Protection Regulation (“GDPR”) applies to our processing because our business is established in the European Union, regardless of your global location.
For privacy inquiries, contact:
Email: shine@ketoshine.com
Phone: +40 724 987 956
Postal address: POPA MARIA-SUSANA PFA, Str. Virgil Madgearu, Nr. 25-27, Bl. Corp B, Et. 1, Ap. 215, Sector 1, Bucharest, Romania
2. Scope and Separate Health Data Notice
This Policy covers general personal data. Because our coaching involves details about weight, wellness conditions, cycles, and lifestyle, we also publish a separate Consumer Health Data Privacy Policy.
That document provides additional rights, including specific disclosures for Washington State residents under the My Health My Data Act. Where policies differ, the one providing greater consumer protection will prevail.
3. Personal Data We Collect
3.1 Information You Provide Directly
We collect the following categories of information:
Identity and contact data
Includes your name, email, phone number, billing address, and account credentials. We use this to administer programs, deliver support, and comply with legal requirements.
Order and transaction data
Includes purchased products, subscription status, amount, and limited payment info from our provider. We do not store full credit card numbers.
Communications
Includes emails, support tickets, survey responses, and messages via WhatsApp, Telegram, or Zoom during your coaching journey.
Program and preference data
Includes wellness goals, dietary needs, lifestyle habits, and program feedback to personalize your experience.
Health-related data
For our premium keto coaching, you may share: weight history, PCOS or Hashimoto’s details, insulin resistance, menstrual cycle data, and allergies. This is “special category” data under GDPR and “consumer health data” under U.S. laws.
Corporate-participant data
When sponsored by an employer, we collect eligibility and enrollment data. We do not share identifiable health data with your employer.
Consent records
Documentation of your agreement to our terms, health data consent, and marketing preferences.
Please avoid sending medical records via unsecure channels like common email or WhatsApp unless specifically requested via our secure systems.
3.2 Information Collected Automatically
When navigating our site, we collect technical data such as IP address, browser type, device info, and engagement metrics via cookies. We only use non-essential marketing tech with your explicit consent.
3.3 Information From Other Sources
Sources include our platform provider Wix, payment processors like Stripe, and message services like Zoom or Telegram. We never purchase health-data lists from brokers.
4. Why We Use Personal Data and Legal Bases
4.1 Contract Performance
Processing needed to deliver your Keto Reset Guide, manage coaching sessions, and provide member support (Article 6(1)(b) GDPR).
4.2 Explicit Consent for Health Data
We process sensitive health details only with your explicit permission to provide the educational wellness services you requested (Article 9(2)(a) GDPR). You may withdraw consent at any time.
4.3 Legal Obligations
Processing required for tax, accounting, and consumer protection laws (Article 6(1)(c) GDPR).
4.4 Legitimate Interests
Data used to secure our site, prevent fraud, and maintain business records (Article 6(1)(f) GDPR).
4.5 Marketing
We send promotional content only with your consent, which can be revoked via the unsubscribe link or by emailing us.
5. How We Disclose Personal Data
We do not sell your personal data. We share only necessary info with trusted partners:
- Wix (Hosting & CRM)
- Usercentrics (Cookie Consent)
- Stripe (Payment Processing)
- Zoom, WhatsApp, Telegram (Communication)
- Professional Advisers (Legal/IT)
Corporate clients only receive anonymized, aggregated engagement reports.
6. International Data Transfers
While based in Romania, your data may be processed in the U.S., UK, or Israel. We utilize Standard Contractual Clauses and the EU-U.S. Data Privacy Framework to ensure your protection.
7. Data Retention
We keep data only as long as required for our coaching relationship or legal compliance:
- Customer Profiles: up to 24 months after last interaction.
- Health Intake & Coaching Notes: up to 24 months after program completion.
- Tax Records: as required by Romanian law.
8. Your Privacy Rights
You have the right to access, correct, or delete your data, object to processing, and withdraw consent. To exercise these, email shine@ketoshine.com with “Privacy Request” in the subject line. We do not discriminate against users who exercise their rights.
9. U.S. State Disclosures
We voluntarily apply principles of the CCPA/CPRA where practicable. We do not sell info or use health data for targeted ads. Residents of Washington should refer to our separate Health Data Policy.
10. Cookies
Essential cookies for security and checkout run automatically. All analytics and marketing cookies require your affirmative “Accept All” choice in our footer banner.
11. Security
We use multi-factor authentication, encryption, and strict access controls. However, no digital system is 100% secure.
12. Children
Our services are for adults 18+. We do not knowingly collect info from minors.
13. Automated Decisions
We do not use beauty/health algorithms for automated legal decisions. Coaching content is educational, not medical.
14. Complaints
Contact us at shine@ketoshine.com first. You also have the right to contact the Romanian ANSPDCP or your local regulator.
15. Policy Changes
Updates will be posted here. Material changes to health data usage will prompt a new consent request.
16. Contact
POPA MARIA-SUSANA PFA
Trading as Keto Reset by Shine™
Str. Virgil Madgearu, Nr. 25-27, Bl. Corp B, Et. 1, Ap. 215
Sector 1, Bucharest, Romania
Email: shine@ketoshine.com
Phone: +40 724 987 956