Privacy policy

Privacy Policy

This policy explains how Vitalin collects and uses your personal data when you visit vitalin.uk or buy from us, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data controller

The controller responsible for your personal data is Vitalin, Woodgate Studios, 2-8 Games Road, Cockfosters, Barnet EN4 9HN, United Kingdom. E-mail: contact@vitalin.uk. Phone: +447848740570.

2. Data we collect

Order data: name, delivery and billing address, e-mail, phone number, items purchased and order history.
Payment data: payments are handled by our payment providers; we receive only confirmation of payment and limited card details (such as card type and last four digits).
Communication data: messages you send us through our contact form, e-mail or phone.
Technical data: IP address, browser and device information, and cookie data according to your cookie choices.

3. How we use your data and our lawful bases

To process, deliver and support your order - performance of a contract (Art. 6(1)(b) UK GDPR).
To meet tax and accounting obligations - legal obligation (Art. 6(1)(c)).
To prevent fraud and keep our website secure - legitimate interests (Art. 6(1)(f)).
To send our newsletter and to set non-essential cookies - your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Sharing your data

We share personal data only where needed: with Shopify (our e-commerce platform and hosting), our payment providers, Royal Mail (delivery), ParcelPanel (order tracking page), Pandectes (cookie consent management) and our e-mail provider. We never sell your personal data.

5. Cookies and consent

When you first visit our website, our cookie banner (provided by Pandectes) asks for your consent before any non-essential cookies are set. The banner groups cookies into four categories: Strictly necessary (always active), Functional, Performance and Targeting. You can change or withdraw your consent at any time with the cookie icon at the bottom left of every page or the "Cookie settings" link in the footer. Full details are in our Cookie Policy.

6. How long we keep your data

We keep order and invoice records for 6 years to meet HMRC tax and accounting requirements. Contact-form messages are kept for up to 2 years. Newsletter data is kept until you unsubscribe.

7. Your rights under UK GDPR

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, e-mail contact@vitalin.uk; we reply within one month. You also have the right to complain to the Information Commissioner's Office (ICO), ico.org.uk, phone 0303 123 1113.

8. International transfers

Some of our service providers, including Shopify, may process data outside the UK. Where they do, the transfer is protected by UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU standard contractual clauses.