Privacy policy
Last updated: July 1, 2026
This Privacy Policy sets out how Vitaler's (the ‘Site’ and any variation of the personal pronoun ‘we’) collects, uses and discloses the personal information of Users who visit the Site or use our services from the Site or make a purchase on the Site at { { shop_domain }} (the ‘Site’) or otherwise communicate with us in connection with the Site (collectively, the ‘Services’) . For the purposes of this Privacy Policy, the term ‘User’ means a user of the Services, whether a customer, website visitor or other individual whose information we collect in accordance with this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to this Privacy Policy
We may update this Privacy Policy, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on the Website and then update the date of the last update to this Privacy Policy and take any other steps required by applicable law.
Collection and Use of Your Personal Information
In order to provide the Services, we collect and have collected over the past 12 months personal information about you from various sources as described below. The information we collect and use varies depending on how you interact with us.
In addition to the specific uses set out below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend our Services, our rights, and the rights of our users or others.
Personal Information We Collect
The types of personal information we collect about you depend on how you interact with the Website and use our Services. We define ‘personal information’ as information that identifies, relates to, describes, or is reasonably capable of being associated with you. The following sections describe the categories and specific types of personal information we collect.
Information collected directly from you
Information you provide to us directly through our Services may include:
- Contact information, including your name, address, telephone number, and email address.
- Order information, including your name, billing address, shipping address, payment confirmation, email address, and telephone number.
- Account information, including your username, password, security questions, and other information used for the security of your account.
- Customer service information, including information you provide in your communications with us, such as when you send us a message through the Services.
Certain features of the Services may require you to directly provide us with certain information about yourself. You do not have to provide this information, but doing so may prevent you from using or accessing those features.
Collection of Usage Information
We may also automatically collect certain information about your interaction with the Services (‘Usage Data’). For this purpose, we may use cookies, pixels and similar technologies (‘Cookies’). Usage Data may include information about your use of and access to the Website and your account, including device information, browser information, network connection information, IP address information, and other information about your interaction with the Services.
Information obtained from third parties
We may also obtain information about you from third parties, including suppliers and service providers who may collect information on our behalf, such as:
- Companies that operate the Website and Services, such as Shopify.
- Our payment processors, who collect payment information (such as bank account, credit or debit card information, or billing address) to process your payment for the purpose of fulfilling your orders and providing you with the products or services you have requested, in order to fulfil our obligations under the contract we have with you.
- When you visit the Website, open or click on emails we send you, or interact with the Services or our advertisements, certain information may be collected by us or third parties with whom we cooperate, may be automatically collected using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries and cookies.
Any information we obtain from third parties will be processed in accordance with this Privacy Policy. Please also see the section below entitled Third-party websites and links.
Use of your personal information
- Delivering products and providing Services. We use your personal information to provide you with Services, perform our contract with you, including processing your payments, fulfilling your orders, sending you notifications related to your account, purchases, returns, exchanges, or other transactions, creating and maintaining your account and otherwise managing your account, fulfilling shipments, facilitating returns and exchanges, and using other features related to your account. We may also enhance your shopping experience by allowing Shopify to link your account to other Shopify services you may choose to use. In this case, Shopify will process your information as described in its Privacy Policy and Consumer Privacy Policy.
- Marketing and advertising. We may use your personal information for marketing and promotional purposes, such as sending you marketing, advertising and promotional information by email, SMS or post, and displaying advertisements for products or services. This may include using your personal information to better tailor the Services and advertisements on the Website and other websites. If you are a resident of the European Economic Area (EEA), the legal basis for these data processing activities is our legitimate interest in selling our products, in accordance with Article 6(1)(f) of the GDPR.
- Security and fraud prevention. We use your personal information to detect, investigate, or take appropriate action regarding potential fraudulent, illegal, or malicious activity. If you choose to use the Services and register for an account, you are responsible for keeping your account credentials secure. We strongly recommend that you do not share your access details, including your username and password, with anyone. If you believe your account has been compromised, please contact us immediately. If you are a resident of the European Economic Area (EEA), the legal basis for these data processing activities is our legitimate interest in ensuring the security of our website for you and other customers, in accordance with Article 6(1)(f) of the GDPR.
- Communication with you and improvement of our services. We use your personal information to provide you with appropriate service and to improve our Services. It is in our legitimate interest to respond to your needs, provide you with effective services and maintain a business relationship with you in accordance with Article 6(1)(f) of the GDPR.
Cookies
Our Website, like many other websites, uses cookies. For more information about the cookies we use in connection with our Shopify-powered shop, please visit https://www.shopify.com/legal/cookies. We use cookies to enable and improve the Website and Services (including remembering your actions and preferences), to perform analytics and to better understand your interactions with the Services (in our legitimate interest to administer, improve and optimise the Services). In addition, we may allow third parties and service providers to use cookies on the Website to better tailor the services, products and advertisements on the Website and other websites.
Most browsers automatically accept cookies by default, but you can set your browser to delete or reject Cookies using your browser controls. Please note that deleting or blocking Cookies may adversely affect your experience and may cause certain Services, including specific features and overall functionality, to malfunction or become unavailable. Furthermore, blocking Cookies may not fully prevent us from sharing information with third parties, such as our advertising partners.
Our website also recognises the GPC (Global Privacy Control) signal, which allows you to opt out of certain uses or disclosures of your information. If you notify us of your preferences via GPC, we will consider the signal as a valid opt-out request for shared/targeted advertising for the associated browsers or devices, and if we are able to link the device sending the signal to a Shopify account, we will apply the opt-out request to that account as well. For more information about Global Privacy Control, please visit https://globalprivacycontrol.org/ . We do not recognise Do Not Track signals that may be sent from your web browser or device other than Global Privacy Control signals.
Disclosure of Personal Information
In certain circumstances, we may disclose your personal information to third parties for purposes related to the performance of a contract, for lawful purposes, and for other reasons subject to the provisions of this Privacy Policy. These circumstances may include sharing personal information:
- Suppliers or other third parties who provide services on our behalf (e.g., IT management, payment processing, data analysis, customer service, cloud storage, fulfilment and shipping).
- Business and marketing partners to provide services and display advertisements to you. Our business and marketing partners will use your information in accordance with their own privacy policies.
- When you instruct us to disclose or otherwise consent to our disclosure of certain information about you to third parties, such as to ship your products or in connection with your use of social media widgets or login integrations, with your consent.
- To our affiliates or otherwise within our group of companies, in our legitimate interest to run a successful business.
- In connection with a business event, such as a merger or bankruptcy, to comply with all applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others. li>
In the last 12 months, we have disclosed the following categories of personal information and sensitive personal information about users for the purposes set out above in the sections entitled ‘How we collect and use your personal information’ and ‘How we disclose personal information’:
| Category | Recipient Categories |
|---|---|
|
|
We do not use or disclose your sensitive personal information without your consent or to infer characteristics about you.
With your consent, we share personal information for advertising and marketing purposes as follows.
We have ‘sold’ and ‘shared’ (as those terms are defined under applicable law) personal information within the past 12 months for advertising and marketing purposes as follows.
| Category of personal information | Categories of recipients |
|---|---|
| Identifying information, such as name, email address, and telephone number | Business and marketing partners |
| Commercial information, such as records of products or services purchased | Business and marketing partners |
| Usage data | Business and marketing partners |
Third-party websites and links
The Website may contain links to websites or other online platforms operated by third parties. If you use these links to visit websites that are not affiliated with us, you should review the privacy and security policies and other relevant provisions of those websites. We do not guarantee or assume responsibility for the privacy or security of such websites, including the accuracy, completeness or reliability of the information contained on these websites. Information posted by you in public or semi-public areas, including information shared by you on third-party social media platforms, may also be visible to other users of the Services or those platforms without any restrictions on their use by us or any third party. Our inclusion of such links does not in itself imply any endorsement of the content on such platforms or their owners or operators, unless specified within the Services.
Children's Data
The Services are not intended for use by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the details below to request that it be deleted.
As of the Effective Date of this Privacy Policy, we have no actual knowledge that we are ‘sharing’ or ‘selling’ (as those terms are defined under applicable law) personal information about individuals under the age of 16.
Security and retention of your information
Please note that no security measures are perfect or impenetrable, and we cannot guarantee ‘perfect security.’ Furthermore, any information you transmit to us may not be secure during transmission. We recommend that you avoid using unsecured channels to transmit confidential or sensitive information to us.
The length of time we retain your personal information depends on various factors, such as whether we need the information to maintain your account, provide the Services, comply with legal obligations, resolve disputes, or enforce other provisions of applicable agreements and policies.
Your rights
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute and may only apply in certain circumstances, and where permitted by law, we may reject your request.
- Right to know/right of access to personal information. You may have the right to request access to the personal information we hold about you, including information about how we use and share your information.
- Right to erasure of personal information. You may have the right to request that we erase the personal information we hold about you.
- Right to rectify personal information. You may have the right to request that we rectify any inaccurate personal information we hold about you.
- Right to transfer personal information. You may have the right to receive a copy of the personal information we hold about you and to request that it be transferred to a third party, in certain circumstances and with certain exceptions.
- Right to opt out of sale, sharing or targeted advertising. You may have the right to prohibit us from ‘selling’ or ‘share’ your personal information or to opt out of the processing of your personal information for purposes considered ‘targeted advertising’ as defined in applicable privacy laws. Please note that if you visit the Website with your GPC opt-out preference signal enabled, then depending on your location, we will automatically consider that signal as a request to opt out of the ‘sale’ or ‘sharing’ of information for the device and browser you use to visit the Website.
- Restriction of processing. You may request that we stop or restrict our processing of your personal information.
- Withdrawal of consent. Whenever we require your consent to process your personal information, you may have the right to withdraw that consent.
- Appeal. If we refuse to comply with your request, you may have the right to appeal our decision. To do so, you should respond directly to our refusal.
- Managing your communication preferences. We may send you promotional emails, and you may opt out of receiving them at any time by using the unsubscribe option displayed in our emails. If you opt out, we may still send you non-promotional emails, such as messages about your account or orders.
You may exercise any of these rights as specified on the Website or by contacting us using the contact details provided below.
We will not discriminate against you for exercising any of these rights. Before providing a substantive response to your request, we may need to collect information from you (e.g., your e-mail address or account information) to verify your identity. In accordance with applicable law, you may appoint an authorised representative to submit a request on your behalf to exercise your rights. Before accepting such a request from a representative, we will require the representative to provide appropriate authorisation to act on your behalf, and we may also require the User to verify their identity directly with us. We will respond to the User's request in a timely manner, in accordance with the requirements of applicable law.
Complaints
If you have any complaints about how we process your personal information, please contact us using the contact details below. If you are not satisfied with our response to your complaint, depending on where you live, you may have the right to appeal our decision (by contacting us using the contact details below) or to lodge a complaint with your local data protection authority. A list of the relevant data protection supervisory authorities in the EEA can be found here.
International Users
Please note that we may transfer, store and process your personal information outside your country of residence. Your personal information is also processed by our employees and external service providers and partners in these countries.
If we transfer your personal information outside of Europe, we will rely on recognised data transfer mechanisms, such as the Standard Contractual Clauses adopted by the European Commission or any equivalent documents adopted by the competent authority in the United Kingdom, unless the data is transferred to a country that has been recognised as providing an adequate level of protection.
Contact
If you have any questions about our privacy practices or this Privacy Policy, or to exercise any of your rights, please contact us by telephone or email at kontakt@vitalers.com or write to us at NMM Sp. z o.o., Bocheńska 3, 17, 31-061 Kraków, Poland.
Within the meaning of the applicable data protection laws and unless expressly stated otherwise, we are the controller of your personal information.