At MYBLNZ LTD (trading as “MyBalance”) we are committed to safeguarding your personal data. Protecting your privacy is of paramount importance to us. Our data protection practices comply with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (the “General Data Protection Regulation” or “GDPR”), which governs our operations in Cyprus.

Names and Address of the Controller

MYBLNZ LTD
Archiepiskopou Leontiou A’ 183, 3020, Limassol, Cyprus.
Tel: +357 25 010399
Email: wellbeing@mybalance.global

Introduction

MYBLNZ LTD (referred to as “we”, “our”, “us” or “MyBalance”) recognise and respect the rights and privacy of individuals. This includes our clients, customers, applicants, current and former employees, and other third parties.

This privacy notice (“Privacy Notice”) explains how we collect, handle, and process your personal data, and how, in doing so, we comply with our legal obligations. It applies whether we are providing you with a nutritional service, considering your or if you are visiting our premises or our website.

How do we collect and use data?

You directly provide us with most of the data we collect. We collect and process data when you:

• Provide data by email or by hand or other method;
• Provide your data through our website;
• Use or view our website via your browser’s cookies.

We may also collect personal data through third parties, such as your employer in case we have a direct relationship with them and our services are offered to you through them.

What personal data do we collect?

We may collect the following information about you.

Information we get directly from you:

We collect personal data that you voluntarily provide to us through our website, by telephone, email, online forms, social media, or other communication channels. This includes information you provide when:

• contacting us to enquire about our services;
• booking or attending consultations;
• subscribing to communications;
• submitting enquiries, complaints, or feedback; or
• applying for a job opportunity.
  
  

Depending on the nature of your interaction with us, we may collect the following categories of personal data:

• identification and contact details, such as your name, surname, email address, telephone number, postal address, and, where necessary, identification/passport details;
• appointment and service-related information;
• health and nutrition-related information that you voluntarily provide in connection with nutritional assessments, consultations, or the provision of our services;
• billing or payment-related information, where applicable; and
• communications you exchange with us.
  
  

If you apply for a job opening with us, we may also collect recruitment-related information, including:

• your CV/resume;
• employment history and professional experience;
• qualifications, certifications, and memberships of professional bodies; and
• references or appraisals from previous employers, where provided.
  
  

Special Category Information:

Where you choose to use our services, you may provide us with information relating to your health in order for us to deliver appropriate nutritional advice and tailor our services to your individual needs and health requirements. This may include information necessary to take into account factors such as allergies, intolerances, underlying health conditions, lifestyle factors, or other considerations relevant to your nutritional plan. In such cases, we may process your special category personal data, including:

• information relating to your physical or mental health;
• information about allergies, medical conditions, dietary requirements, or genetic or metabolic factors (where provided by you); and
• where relevant and voluntarily disclosed by you, information revealing racial or ethnic origin or religious beliefs, insofar as this is relevant to dietary preferences or requirements.

We only process such information where it is necessary for the provision of our services and in accordance with applicable data protection law, and we apply appropriate safeguards to protect this information.

Website Information and Website Users

As you interact with our website, we may automatically collect Technical Data (i.e. internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website) about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please refer to further information provided below on the Cookies section of this Privacy Notice.  

Information We Receive from Other Sources

In some cases, our services are provided to individuals as part of an employee benefit arranged by their employer or another organisation. Where this applies, we may receive limited personal data from your employer in order to facilitate the provision and administration of our services.

This may include:

• your name and contact details (such as email address);
• confirmation of your eligibility to access the service under your employer’s programme; and
• basic administrative information necessary to schedule or manage your access to the service.

We do not generally receive detailed personal or health information from your employer. Any health-related information is collected directly from you during your interaction with our services and is processed in accordance with this Privacy Notice.

Where your employer acts as the contracting party for the service, we and your employer act as independent controllers in relation to different aspects of the processing. Your employer is responsible for determining eligibility and providing access to the benefit, while we are responsible for delivering the services and processing your personal data in connection with those services.

We only use information received from your employer for the purpose of administering your access to the service and ensuring proper delivery of the agreed services.

Information about Visitors

When visiting our premises, we collect the necessary personal data required for security and notification purposes.

How do we store your data?

We have in place the necessary technical and organizational measures for the security and confidentiality of the personal data that we process.

Personal data are stored securely, using a mixture of encryption, password protection, access-controlled areas and servers/back-ups all kept with multiple lock protection.

The legal bases we use for lawful processing

We process personal data only where we have an appropriate lawful basis. Depending on the specific processing activity, we rely on one or more of the following legal bases:

1. Performance of a contract:

Processing of your data is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof;

• Establishing and maintaining contractual relationships
• Provision of contracted services
• Invoicing, payments, remittances, and collections
• Contract review and administration
• Responding to enquiries and requests related to our services

2. Consent:

We rely on the individual’s consent (or explicit consent), which may be withdrawn at any time. This includes:

• Processing of any special category data where required as part of our nutritional services
• Marketing and other promotional communications
• Certain optional communications or activities where consent is the most appropriate legal basis
  
  

3. Compliance with a legal obligation:

Processing is required to comply with applicable legal and regulatory obligations, including:

• Compliance with legal and regulatory requirements
• Record-keeping and reporting obligations
• Responding to lawful requests from competent authorities
• Employment-related statutory obligations

4. Legitimate interests:

Processing is necessary for our legitimate business interests, provided these interests are not overridden by the rights and freedoms of individuals. Such processing includes:

• Risk management and fraud prevention
• Performance measurement and business analytics and internal administration
• IT, information security, and telecommunications support
• Handling complaints and improving service quality

We ensure that appropriate safeguards are applied and that our legitimate interests are carefully balanced against the interests and fundamental rights of data subjects.

Third-Party Access and Data Disclosure

We will not disclose your personal data to third parties except where necessary for the purposes described in this Privacy Notice. In particular, we may share your personal data with trusted third-party service providers, contractors, consultants, business partners, or other outsourced providers who assist us in delivering our services to you or our clients. Such parties will only process your personal data on our instructions and will be subject to appropriate contractual, confidentiality, and data protection obligations.

We may also share limited personal data with third parties where necessary to conduct, due-diligence checks, fraud-prevention activities, provided that such third parties are subject to appropriate contractual, confidentiality and data-protection obligations.

In addition, we may disclose your personal data where required to comply with applicable law, regulations, court orders or lawful requests from public authorities. We will only disclose personal data to competent authorities where there is a valid legal basis for doing so.

The countries where data will be stored, processed and/or transferred

Your personal data will be stored and processed within the European Union (EU) and the European Economic Area (EEA).

We do not currently transfer your personal data outside the EU/EEA.

However, in the event that we need to engage service providers or otherwise transfer personal data outside the EU/EEA in the future, we will ensure that such transfers are carried out in compliance with applicable data protection laws and that appropriate safeguards are in place to protect your personal data.

How long will the data be retained

Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, including for legal, regulatory, contractual, operational, accounting, and reporting purposes, and in accordance with our internal retention policy and applicable law.

Where personal data is processed on the basis of consent, such data will be deleted upon withdrawal of consent unless another lawful basis permits or requires continued retention.

Once the applicable retention period expires, personal data will be securely deleted, anonymised, or archived in accordance with our internal policies and applicable legal requirements.

What happens if the data is not collected?

Your personal data is required for communication and for providing our services. Without this data we will not be able to communicate with you or enter into a contractual agreement with you. This includes both business and employment contracts.

In certain cases, failure to provide required information may result in our inability to proceed with employment, training enrolment, service provision, onboarding as a supplier or customer, or compliance with mandatory legal obligations.

Surveys, Feedback and Evaluation Activities

When you take part in our feedback survey, we record your organisation name, your job role, and your answers to questions we ask about your opinion of, and use of, our services.

We use this information to develop and improve our services and our customer relationships. Your job role, organisation and some or all of your comments may be publicly displayed on our website as a testimonial. We will do this based in our legitimate interest in marketing our products and services.

Your details will not be shared with any third parties nor to make any automated decisions that might affect you.

Automated decision making

We do not use automated decision making.

Hyperlinks

Our website may contain hyperlinks (i.e., electronic cross-references) with which internet sites from other companies can be called up. This Data Privacy Notice does not apply to these linked internet sites belonging to other companies. We are not responsible for the content, security, or data-protection practices of such external sites and encourage you to review the privacy policies of any third-party websites you visit.

Cookies

A cookie (sometimes also referred to as a browser cookie, HTTP cookie, Internet cookie or Web cookie) is a small file sent from a Web server to your computer whenever you visit a website. Cookies allow your browser to store information that can be sent back to the server during subsequent visits. If you return to the website later, your Web browser sends the small file to the server to notify the website of any previous activity you engaged in on the site. Once you return to a website, the server can retrieve the cookie file from local computer to assist in expediting certain functions such as logging in and retrieving account or user data.

When do we use cookies on our websites?

Cookies may also be placed in your browser when visiting our website via third party application plugins or when using third party modules on the website. This applies when using social media “sharing” tools via third party application plugins. We do not, however, have access to details regarding your social media or personal data during this process. Some cookies are essential for the basic functioning of our website, while others help us analyse usage patterns, improve website performance, or personalise your experience. You can manage or disable cookies through your browser settings; however, doing so may affect the functionality of certain parts of the website.

 The table below demonstrates the cookies that we use and explains why we use them.

We use cookies and similar technologies to help improve your experience on our website, ensure the proper functioning of the website, and collect limited statistical information regarding website usage and performance.

You can manage your cookie preferences at any time through the cookie banner/settings available on our website. In addition, most web browsers allow you to control cookies through the browser settings, including blocking or deleting cookies. Please note that disabling certain cookies may affect the functionality of the website.

We do not use cookies to directly identify you personally. Some cookies are essential for the operation of the website, while others help us analyse and improve website performance and user experience.

Rights of the data subject

You have the following rights under the GDPR:

1. Right of access: You may request confirmation of whether we process your personal data and, where applicable, access to that data, including information about the purposes of processing, categories of data, recipients, storage periods, and your related rights.
2. Right to rectification: You may request that we correct inaccurate personal data or complete incomplete data we hold about you.
3. Right to erasure: You may request deletion of your personal data, where there is no legal obligation or other lawful reason for us to retain it.
4. Right to restrict processing: You may request that we restrict the processing of your personal data in certain cases, including where you contest its accuracy, the processing is unlawful, you need the data for legal claims, or you have objected to processing pending verification of overriding grounds. Restricted data will continue to be stored but not otherwise processed.
5. Right to data portability: You may request to receive your personal data in a structured, commonly used, machine-readable format, or have it transferred to another controller where technically feasible.
6. Right to object: You may object at any time to processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.
7. Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.

Procedure for Exercising Your Rights:

To exercise any of your rights as a data subject, please contact us as outlined at the end of this Privacy Notice.

Upon receipt of your request, we will aim to respond within one month.

When a request is made electronically, and unless you request otherwise, we will provide the information in a commonly used electronic format.

Modifications to Privacy Notice

We reserve the right to amend this Privacy Notice from time to time, and the updated versions will be posted on our website Your continued use of our Website following the posting of changes to these terms means you accept these changes. Where required by applicable law, we will notify you of any material changes to this Privacy Notice through appropriate means, such as a notice on our website or direct communication.

Contacting Us

If you have any questions about this Privacy Notice or the processing of your personal data, please email or contact us at:

MYBLNZ LTD,
Archiepiskopou Leontiou A’ 183, 3020, Limassol, Cyprus.
Email: wellbeing@mybalance.global

You also have the right to lodge a complaint with the relevant supervisory authority.

For any complaints you may have for Cyprus you may contact the Data Commissioner of the Republic of Cyprus at:

http://www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/home_en/home_en?opendocument

Last update: 17 June 2026