Privacy policy

Updated: 23 October 2026

This policy explains what personal information we process, why we use it and the rights you have.

1. Who is responsible?

VitaReliv is responsible for the personal information processed in connection with this shop.

Vitareliv LLC
1200 Valley W Dr, West Des Moines, IA 50266, United States
Email: contact@vitareliv.com

2. When you visit our website

When you visit our website, technical information is processed automatically, including your IP address, the date and time, browser and device. This is needed to keep the website working and secure.

Our lawful basis under Article 6(1)(f) of the UK GDPR is our legitimate interest in providing a secure, functioning website.

3. Hosting by Shopify

Our shop runs on Shopify. Shopify stores and processes information associated with our shop to provide its services. Information may be processed in countries outside the United Kingdom, including Canada and the United States. The safeguards used depend on the transfer and applicable law.

For more information about Shopify and its international transfers, please read Shopify’s privacy policy.

4. When you place an order

We need your name, delivery and billing addresses, email address, the products you order and, if you provide it, your telephone number. Without this information, we cannot process your order.

Our lawful basis is performance of a contract under Article 6(1)(b) of the UK GDPR. We keep order and invoice records for as long as applicable tax and commercial laws require, which may be up to 10 years. The lawful basis for legally required retention is Article 6(1)(c).

5. Payment

When you pay, the information necessary to process payment is shared with the payment provider you select at checkout. The available payment methods are displayed there. We do not see your full card details.

Our lawful basis is performance of a contract under Article 6(1)(b) of the UK GDPR.

6. Delivery

We share your name and delivery address with our fulfilment supplier and the delivery company so that your parcel can reach you. Your email address or telephone number may also be shared for delivery updates.

Our lawful basis is performance of a contract under Article 6(1)(b) of the UK GDPR.

7. When you contact us

If you contact us by email or through our contact form, we use the information you provide to respond to your enquiry. Our lawful basis is Article 6(1)(b) of the UK GDPR for order-related enquiries, or our legitimate interest in responding to general enquiries under Article 6(1)(f).

8. Cookies and marketing preferences

We use cookies that are strictly necessary to provide services you request, such as remembering the contents of your basket. Other cookies, such as advertising or analytics cookies that require consent, are used only with your consent under the Privacy and Electronic Communications Regulations (PECR). Where consent is required, our lawful basis for associated personal-data processing is Article 6(1)(a) of the UK GDPR. You can change or withdraw your consent through the cookie settings.

If you subscribe to our marketing emails, you can unsubscribe at any time using the link in an email.

9. Processing outside the United Kingdom

Your information may be processed outside the United Kingdom by Shopify, our fulfilment supplier and us when handling your order. Where UK data-protection rules require safeguards for an international transfer, the relevant safeguards must be in place. You can contact us for information about the safeguards applicable to your data.

10. How long do we keep your information?

We keep personal information only for as long as it is needed for the relevant purpose. We then delete it unless the law requires us to retain it for longer.

11. Your rights

Subject to the conditions in applicable data-protection law, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your information.
  • Restrict how we use your information.
  • Receive your information in a portable format.
  • Withdraw consent at any time, without affecting processing carried out before withdrawal.
  • Object to processing based on legitimate interests. You can object to direct marketing at any time.
  • Complain to a data-protection authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO).

To exercise your rights, email contact@vitareliv.com.

12. Automated decisions

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.