Privacy Policy

The short version

Who we are

This site is operated by Toothache Solutions (Pty) Ltd, a South African company registered in Cape Town. For any privacy-related questions, contact hello@nervitol.com.

This policy applies to nervitol.com and any subdomains. It applies to visitors from all countries, including the European Union, United Kingdom, United States, Australia, and South Africa.

What we collect and why

If you complete the free formula consultation, the following information is collected:

• Email address — to deliver your formula and send follow-up emails
• Age range — to filter ingredients not suitable for under-18s
• Location (country) — to understand where our audience is based
• Health behaviour, oral health concerns, DIY affinity, mouth feel, trust sources, switch triggers — to select the most appropriate formula for your situation and to personalise follow-up communication
• Sensitivities — to exclude ingredients you may react to from your formula
• Your selected recipe — stored so we can reference it in follow-up emails

If you purchase through Payhip, their own privacy policy applies to that transaction. We do not receive your payment details.

We do not collect any information from visitors who do not complete the consultation form.

How your data is used

• To send you your personalised mouthwash formula by email
• To send a small number of follow-up emails (typically 2–3 over one week) about your formula and Nervítol products
• To understand who uses the consultation so we can improve it

Your data is never sold to third parties. It is never used for advertising on other platforms. It is not shared with anyone except the service providers listed below, who process it solely on our behalf.

Third-party services

We use the following services to operate this site:

• Netlify — hosts the website and runs the serverless functions that process your consultation. Your data passes through Netlify's infrastructure. Netlify Privacy Policy →
• Brevo (formerly Sendinblue) — stores your email address and consultation attributes, and sends your formula email and follow-ups. Brevo is GDPR-compliant and processes data in the EU. Brevo Privacy Policy →
• Anthropic (Claude API) — used to write the personalised introduction to your formula. Only three non-identifying fields are sent: your oral health concern, how your mouth feels, and your recipe name. No personal data is transmitted to Anthropic. Anthropic Privacy Policy →
• Google Fonts — loads fonts from Google's servers. Google may log your IP address as part of this request. Google Privacy Policy →

Cookies

This site does not use tracking or advertising cookies. Netlify may set basic technical cookies for performance and security purposes. These do not identify you personally and are not used for marketing.

Google Fonts requests may result in a cookie being set by Google. You can manage or block cookies through your browser settings.

Legal basis for processing (GDPR)

For visitors in the European Union or United Kingdom, our legal basis for processing your data is consent — you provide your information voluntarily by completing the consultation and submitting your email address. You can withdraw consent at any time by unsubscribing or contacting us.

South African residents (POPIA)

This site complies with the Protection of Personal Information Act (POPIA). As a South African company, we are the responsible party for all personal information collected. You have the right to access, correct, or delete your personal information at any time by contacting us at hello@nervitol.com.

Your rights

Regardless of where you are based, you have the right to:

• Request a copy of the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data
• Unsubscribe from emails at any time using the unsubscribe link in any email
• Object to how your data is being used

To exercise any of these rights, email hello@nervitol.com. We will respond within 30 days.

Data retention

Your data is held in Brevo for as long as you remain subscribed. If you unsubscribe or request deletion, your record is removed within 30 days. We do not retain personal data beyond what is needed to provide the service.

Children

This site is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted data through this site, contact us and we will delete it promptly.

Changes to this policy

If this policy changes materially, we will update the date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

Contact