Privacy Policy
Who we are
Vits4Man (“we”, “us”, “our”) is committed to protecting your personal data. This policy explains what information we collect when you visit [website URL] or buy from us, how we use it, and the rights you have under UK data protection law, including the UK GDPR and the Data Protection Act 2018.
The data controller responsible for your information is:
- Company: [Company Legal Name], registered in England and Wales, company number [Company Number]
- Registered address: [Registered Address]
- Email: [Contact Email]
- Phone: [Phone Number]
- ICO registration number: [ICO Number]
Our website is intended for adults. We do not knowingly collect personal data from anyone under 18.
Information we collect
We collect only the information we need to run our shop and serve you well.
Information you give us
- Account and order details: your name, billing and delivery address, email address and phone number.
- Payment information: card payments are handled securely by our payment provider. We never see or store your full card number.
- Communications: messages you send us by email, contact form or social media, and any reviews you leave.
- Newsletter sign-ups: your email address and your marketing preferences.
Information we collect automatically
- Device and usage data: IP address, browser type, device type, pages viewed, time on site and the page that referred you.
- Cookies and similar technologies: see the Cookies section below.
Information from third parties
- Delivery updates from our couriers, and fraud-check results from our payment provider.
How we use your information
We use your data only where the law allows it. The table below shows each purpose and its lawful basis under the UK GDPR.
|
Purpose |
Lawful basis |
|---|---|
|
Processing and delivering your orders, including returns and refunds |
Performance of a contract |
|
Managing your account and answering your questions |
Performance of a contract |
|
Sending order confirmations and delivery updates |
Performance of a contract |
|
Sending newsletters and promotional offers |
Consent (you can withdraw it at any time) |
|
Preventing fraud and keeping our website secure |
Legitimate interests |
|
Improving our website, products and service through analytics |
Legitimate interests or consent (for non-essential cookies) |
|
Keeping tax, accounting and other legal records |
Legal obligation |
We do not sell your personal data, and we do not make decisions about you based solely on automated processing.
Who we share it with
We share your data only with trusted service providers who help us run our business, and only as much as they need.
|
Provider type |
Why we share data |
Example |
|---|---|---|
|
Payment processor |
To take payments and prevent fraud |
[Payment Provider] |
|
Couriers and fulfilment partners |
To deliver your order |
[Courier Names] |
|
Website hosting |
To run our website and store data securely |
[Hosting Provider] |
|
Email marketing platform |
To send newsletters you signed up for |
[Email Platform] |
|
Analytics provider |
To understand how our website is used |
Google Analytics |
|
Professional advisers |
Accounting, legal and insurance services |
Our accountants |
We may also disclose information if required by law, for example to HMRC, the police or a court.
International transfers
Some providers may store data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision or the International Data Transfer Agreement approved by the ICO.
Cookies
Cookies are small text files stored on your device. We use them to make our website work and, with your permission, to understand how it is used.
- Essential cookies keep your basket, login and checkout working. These do not need your consent.
- Analytics cookies show us which pages are popular so we can improve the site. We set these only if you accept them.
- Marketing cookies help us show relevant ads on other websites. We set these only if you accept them.
You can accept or reject non-essential cookies using the banner when you first visit, and change your choice at any time through [cookie settings link]. You can also block cookies in your browser settings, though parts of the site may then stop working.
How long we keep it and how we protect it
We keep personal data only for as long as we need it.
|
Data |
How long we keep it |
|---|---|
|
Order and transaction records |
6 years after the end of the financial year, to meet tax law |
|
Customer account details |
Until you close your account, or after 3 years of inactivity |
|
Newsletter subscriptions |
Until you unsubscribe |
|
Customer service messages |
2 years after the query is resolved |
|
Analytics data |
Up to 26 months |
We protect your data with SSL encryption across our website, secure hosting, restricted staff access and PCI DSS-compliant payment processing. No system is completely secure, but we work hard to keep your information safe and will tell you and the ICO about any serious breach where the law requires it.
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you
- Correct data that is inaccurate or incomplete
- Delete your data where there is no good reason for us to keep it
- Restrict or object to how we use your data, including for direct marketing
- Data portability, meaning a copy of your data in a common format
- Withdraw consent at any time, where we rely on consent
To use any of these rights, email [Contact Email]. We will reply within one month and will not charge a fee in most cases.
Marketing: you can unsubscribe from our emails at any time by clicking the link at the bottom of any newsletter or contacting us.
Complaints: if you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.