Privacy policy

Last updated: October 1, 2026

This policy explains what personal data we collect when you visit nataliahendler.com or buy Nat's Protein Picks, why we collect it and what you can do about it. We keep it short and collect only what we need to sell you the book and help you with it.

Who we are

The data controller is Lucas Francozo Bataglia ME (CNPJ 34.810.346/0001-77), São Carlos, SP, Brazil, which sells Nat's Protein Picks. Contact: nat@nataliahendler.com.

What we collect

• Order details: your name, email address and country, the order number, the amount paid and the order status (paid or refunded). Stripe collects these at checkout and shares them with us.
• Download records: how many times your download link was used, to keep the link from being shared widely.
• Messages you send us: the content of your emails and your email address.
• Technical data: like any website, our hosting provider processes your IP address and browser information to deliver pages and protect the site from abuse.

We never see or store your card details. Payments are handled entirely by Stripe, which is certified to the highest level of security in the payments industry (PCI DSS Level 1).

Why we use it

• To deliver the book you bought, give you access to the download and email you the download link.
• To process refunds and answer your questions.
• To prevent fraud and misuse of download links.
• To keep the accounting and tax records the law requires.

We use your data because it's necessary to fulfil our contract with you, to comply with legal obligations, and for our legitimate interest in preventing fraud. We don't sell your data, and we don't send you marketing emails unless you ask for them.

Cookies and tracking

This site doesn't use advertising or analytics cookies, and it doesn't track you across other sites. The Stripe checkout page uses its own cookies to process the payment securely and prevent fraud; see Stripe's privacy policy.

Who we share it with

Only with the service providers we need to run the store, each bound by its own data protection terms:

• Stripe, for payments and receipts.
• Cloudflare, which hosts this site, stores order records and delivers the PDF.
• Google Workspace, for our email.
• Resend, which sends the email with your download link.

We may also share data when the law requires it. These providers may process data outside your country, including in the United States, with appropriate safeguards.

How long we keep it

• Order and payment records: 5 years, as required for accounting and tax purposes.
• Support emails: up to 2 years after the conversation ends.
• Technical logs: kept by our hosting provider for a short period, normally a few days.

Your rights

Depending on where you live (for example under Brazil's LGPD, the EU and UK GDPR or California's CCPA), you can ask us to:

• confirm whether we hold your data and get a copy of it;
• correct data that is wrong or incomplete;
• delete your data, except what we must keep by law;
• object to or limit how we use it;
• receive your data in a portable format.

Write to nat@nataliahendler.com and we'll reply within 15 days. You can also complain to your local data protection authority (in Brazil, the ANPD).

Children

This store is not directed at children under 16, and we don't knowingly collect their data.

Changes to this policy

If we change this policy, we'll update the date at the top of this page. Significant changes will be highlighted here.