This Privacy Policy applies to visitors of https://prostalix-kenya.site. Our primary audience is located in Kenya. Specific rights and disclosures vary by your country of residence — refer to the section below that applies to you:
| If you are located in... | Read this section |
|---|---|
| Kenya | Section 17 — Kenya (Data Protection Act, 2019) |
| The European Economic Area (EEA), United Kingdom, or Switzerland | Section 18 — GDPR Rights |
| California, USA | Section 19 — CCPA/CPRA Rights |
| Brazil | Section 20 — LGPD Rights |
| Any other country or jurisdiction | Section 21 — General Rights |
The rest of this Policy (Sections 1–16) applies to all users regardless of location.
Part I — General Privacy Policy
Part II — Regional Privacy Rights
Part III
This Privacy Policy ("Policy") describes how Marcelo Jose Ribeiro Filho, acting as an independent affiliate marketer in the health and wellness sector (referred to as "we", "us", "our", or "the Operator"), collects, uses, stores, discloses, and protects personal information obtained through the website https://prostalix-kenya.site ("the Website" or "the Service").
By accessing or using the Website, or by submitting an order request through it, you confirm that you have read, understood, and agree to this Policy. If you do not agree, please do not use the Website.
This Policy is designed to align with leading data protection standards, including but not limited to:
This Website is an independent marketing and order-referral platform for the featured product, Prostalix. We are not the manufacturer, distributor, or official seller of the product.
When you submit your name and phone number through the order form on this Website, your request is transmitted to our order-processing and affiliate fulfillment network, which arranges confirmation, shipping, and cash-on-delivery (COD) payment directly with you. We may receive a commission from the official supplier when an order is confirmed, at no additional cost to you.
All order confirmation, shipping, payment collection, customer support, returns, and warranty claims are handled by the official supplier and its fulfillment network, under their own terms and privacy practices. Editorial content and recommendations reflect the author's independent opinion.
The party responsible for processing your personal information is:
A Data Protection Officer (DPO) has not been appointed, as the scale and nature of processing does not meet mandatory thresholds under applicable laws. The Operator handles privacy inquiries directly.
We collect personal information in three ways:
When you complete the order or contact form on the Website, you may provide:
When you use the Website, we and our service providers automatically collect:
We may receive limited information from analytics, advertising, and order-fulfillment providers (see Section 8) to measure performance, confirm orders, prevent fraud, and improve the Service.
We do not knowingly collect or process special categories of data (such as detailed health records, biometric data, racial or ethnic origin, or religious beliefs). Please do not submit such information through any form. Your interest in a prostate-health supplement is treated with confidentiality and is not used to build health profiles about you.
We process personal information for the following purposes:
We do not use your data for automated decision-making or profiling that produces legal effects on you.
We process personal information under one or more of the following legal bases, depending on your jurisdiction:
Jurisdiction-specific legal bases are described in Sections 17–21.
We use cookies and similar technologies (pixels, web beacons, local storage) to operate the Website, measure advertising, and improve user experience.
Where a cookie consent banner is presented on your first visit, you may accept, reject, or customize non-essential cookies there. You can also block or delete cookies at any time through your browser settings. Blocking non-essential cookies will not prevent you from submitting an order.
Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry consensus on how DNT signals should be honored, the Website does not currently respond to DNT signals. We honor opt-out mechanisms required by applicable law (such as the Global Privacy Control where mandated).
To improve the quality and measurement of our advertising campaigns, we may share with Google Ads an irreversibly hashed version (SHA-256) of the phone number you provide at checkout. This hashed value does not allow direct identification and is used solely to match your visit to our Website with the subsequent confirmation of your order, for measurement and optimization purposes. The data recipient is Google LLC, acting as an independent controller for this processing. Where consent is legally required, the legal basis is your consent, collected via our cookie consent mechanism. You may object to or withdraw from this processing at any time via the contact email listed in this Policy.
We do not sell personal information in the traditional sense. Disclosures for the term "sale" as defined under California law are addressed in Section 19.
We share information only in the following circumstances:
| Service | Purpose | Provider's Privacy Policy |
|---|---|---|
| Order-fulfillment / affiliate network (LemonAD) | Receiving your order request and arranging confirmation, shipping, and cash-on-delivery payment | Provided by the order network at the point of order confirmation |
| Google Ads | Conversion tracking and campaign optimization | policies.google.com/privacy |
| Google Ads — Enhanced Conversions | SHA-256 hashed phone matching for conversion attribution (see Section 7.4) | policies.google.com/privacy |
| Microsoft Clarity | Website analytics and session/heatmap measurement | privacy.microsoft.com/privacystatement |
| Hostinger | Website hosting and infrastructure | hostinger.com/legal/privacy-policy |
These providers act as our data processors or independent controllers, depending on their role, and are contractually or legally bound to safeguard your information.
Once your order request is transmitted to the order-fulfillment network and the official supplier, they become the controller of the data required to confirm, ship, and collect payment for your order, under their own privacy practices and terms.
We may disclose information when required by law, court order, or legitimate request from public authorities, or to protect our rights, security, or the safety of others.
If we are involved in a merger, acquisition, asset sale, or transfer of operations, your information may be transferred as part of that transaction. You will be notified of any such change.
The Website operates with providers located in multiple countries. Your personal information may be transferred to, stored in, or processed in countries outside your country of residence, including the United States and other jurisdictions where our service providers operate.
When we transfer personal information across borders, we rely on appropriate safeguards required by applicable law, which may include:
You may request a copy of the safeguards in place by contacting privacy@prostalix-kenya.site.
We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law.
| Data Category | Retention Period |
|---|---|
| Order and contact form submissions | 12 months after last interaction |
| Analytics data | Up to 14 months |
| Advertising cookies / identifiers | Up to 13 months, or until consent is withdrawn |
| Server logs | 6 months |
| Records retained for legal obligations | As required by applicable law |
After the retention period expires, data is securely deleted or fully anonymized.
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction, including:
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and affected users without undue delay, in accordance with applicable laws (within 72 hours where required by GDPR, and as required by the Kenya Data Protection Act, 2019).
Regardless of your location, you may always:
Additional rights granted by specific jurisdictions are described in Sections 17–21.
The Website and the product featured on it are intended exclusively for adults aged 18 years or older. We do not knowingly collect personal information from minors. If you believe a minor has provided us with information, please contact privacy@prostalix-kenya.site and we will delete it without undue delay.
This Policy applies an 18+ standard, which is stricter than, and consistent with, the age thresholds set by applicable data protection laws.
This disclaimer supplements, and does not replace, the manufacturer's own product information.
The Website may contain links to external websites, including the official supplier page, social media platforms, and reference sources. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policy of every third-party website you visit.
We may update this Policy from time to time to reflect changes in legislation, our practices, or the services we use. When we do, we will update the "Last Updated" date at the top.
Material changes will be announced on the Website's homepage or via a banner notification for a reasonable period. The current version is always available at:
https://prostalix-kenya.site/privacy-policy/
We recommend reviewing this Policy periodically.
If you are located in Kenya, the following additional disclosures apply under the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021.
For the purposes of the Act, the Operator identified in Section 3 acts as the data controller for personal data collected through this Website. Where registration with the Office of the Data Protection Commissioner is required for our processing, we comply with that obligation.
We process your personal data on the basis of your consent (Section 30 of the Act), the performance of the order you request, our legitimate interests (security, fraud prevention, and service improvement), and compliance with legal obligations.
Under Section 26 of the Act, you have the right to:
Send a request to privacy@prostalix-kenya.site. We will respond within a reasonable time as required by the Act. We may request identity verification before processing your request.
You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya. Details are available at odpc.go.ke.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following additional disclosures apply.
| Processing activity | Legal basis |
|---|---|
| Processing and transmitting your order request | Performance / pre-contract — Art. 6(1)(b), and Consent — Art. 6(1)(a) |
| Audience measurement and analytics | Legitimate interest — Art. 6(1)(f) |
| Fraud prevention and security | Legitimate interest — Art. 6(1)(f) |
| Compliance with legal obligations | Legal obligation — Art. 6(1)(c) |
| Advertising cookies and Enhanced Conversions (Section 7.4) | Consent — Art. 6(1)(a) |
You have the right to:
Send a request to privacy@prostalix-kenya.site. We will respond within 30 days of receipt, as required by Article 12(3) GDPR. We may request identity verification before processing your request.
You may file a complaint with the data protection authority in your country of residence. A list of EU authorities is available at edpb.europa.eu. UK residents may contact the ICO at ico.org.uk. Swiss residents may contact the FDPIC at edoeb.admin.ch.
If you are a California resident, the following additional disclosures apply under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
| Category (Cal. Civ. Code § 1798.140) | Collected? | Sources |
|---|---|---|
| A. Identifiers (name, IP address, click IDs) | Yes | Directly from you; automatically |
| B. Customer records (phone number) | Yes (when provided) | Directly from you |
| C. Protected classifications | No | — |
| D. Commercial information (order request) | Yes | Directly from you |
| E. Biometric information | No | — |
| F. Internet/network activity | Yes | Automatically; analytics providers |
| G. Geolocation (approximate) | Yes | Automatically |
| H. Sensory data | No | — |
| I. Professional/employment information | No | — |
| J. Education information | No | — |
| K. Inferences from the above | Limited (audience interest categories) | Advertising providers |
| L. Sensitive personal information | No | — |
We collect personal information for the business purposes described in Section 5 of this Policy.
We do not sell personal information in exchange for monetary consideration. However, under the broad definition of "sale" and "sharing" in the CPRA, the use of advertising cookies and Enhanced Conversions (Google Ads) may be considered "sharing" of personal information for cross-context behavioral advertising.
You have the right to opt out of this sharing. To opt out:
Do Not Sell or Share My Personal Information
You have the right to know, delete, and correct your personal information; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and to non-discrimination for exercising your rights.
Send a request to privacy@prostalix-kenya.site. We will respond within 45 days, extendable by another 45 days when reasonably necessary, with notice. Identity verification will be required. You may designate an authorized agent to submit requests on your behalf.
If you are located in Brazil, the following additional disclosures apply under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados, Law No. 13,709/2018).
Send a request to privacy@prostalix-kenya.site. We will respond within 15 days of receipt, as required by Article 19 LGPD.
The national data protection authority in Brazil is the Autoridade Nacional de Proteção de Dados (ANPD). You may file a complaint at gov.br/anpd.
If you are located in a country or region not specifically addressed in Sections 17–20, you may still have rights under your local data protection laws (for example, POPIA in South Africa, PIPEDA in Canada, the Privacy Act 1988 in Australia, the PDPA in Singapore, or similar laws worldwide).
Regardless of your location, you may always:
To exercise any of these rights, contact privacy@prostalix-kenya.site. We will respond as required by your local law, and in any event within a reasonable period from receipt of your request.
For any privacy-related question, request, or complaint:
This Privacy Policy was last updated on 04 July 2026.