Privacy Policy
Last Updated: 04/11/2025
1. Who we are
Vytalise are owned by By Nature BV. By Nature BV gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.
By Nature BV registered office is at Vogt 19 6422 RK Heerlen and we are a company registered in Netherlands under company number 64618471. We are registered on the Information Commissioner's Office Register; registration number ZA450361, and act as the data controller when processing your data.
Our designated Data Protection Appointed Person is William Brennand, who can be contacted at 3 Maclaren House, Skerne Road, Driffield, YO25 6PN, UK or email contact@vytalise.co.uk
2. Information that we collect
Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data, which we have grouped as follows:
- Identity Data: Your name and email address.
- Contact Data: Your email address and telephone numbers.
- Technical Data: login data, browser type/version, time zone, operating system, and other technology on the devices you use to access our site.
- Profile Data: Your username and password, purchases or orders, interests, preferences, feedback, and survey responses.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences for receiving marketing from us and third parties, and your communication preferences.
We also collect Aggregated Data (like demographic statistics), which is derived from your personal data but does not directly or indirectly reveal your identity.
A Note on Sensitive Data: We do not collect any Special Categories of Personal Data about you (which includes details about your race, health, or religious beliefs), nor do we collect information about criminal convictions and offences.
How We Collect Your Data
We use different, transparent methods to collect data:
- Direct Interactions: You give us your Identity, Contact, and Financial Data directly by filling in forms or corresponding with us (e.g., when you apply for a product, subscribe to a service, or give us feedback).
- Automated Technologies or Interactions: As you interact with our website, we automatically collect Technical Data using cookies, server logs, and similar technologies. For more details, please see our Cookie Policy below.
- Third Parties or Publicly Available Sources: We may receive data from parties such as analytics providers (like Google and Microsoft Clarity outside the EU) and publicly available sources (like Companies House and the Electoral Register inside the EU).
How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use it to:
- Perform the contract we are about to enter into or have entered into with you (e.g., fulfilling your order).
- Meet our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests (e.g., improving our service).
- Comply with a legal or regulatory obligation.
|
Purpose/Activity |
Type of Data |
Lawful Basis for Processing |
|
To register you as a new customer |
Identity, Contact |
Performance of a contract with you |
|
To process and deliver your order (payments, fees, debt recovery) |
Identity, Contact, Financial, Transaction, Marketing & Comms |
Performance of a contract with you; Necessary for our legitimate interests (debt recovery) |
|
To manage our relationship (notify of changes, request reviews/surveys) |
Identity, Contact, Profile, Marketing & Comms |
Performance of a contract with you; Necessary to comply with a legal obligation; Necessary for our legitimate interests (record keeping, studying customer use) |
|
To administer and protect our business (security, data analysis, and troubleshooting) |
Identity, Contact, Technical |
Necessary for our legitimate interests (running our business, security, fraud prevention); Necessary to comply with a legal obligation |
|
To use data analytics to improve our website, products, and experiences |
Technical, Usage |
Necessary for our legitimate interests (to keep the site relevant, develop the business, inform strategy) |
|
To make suggestions and recommendations to you |
Identity, Contact, Technical, Usage, Profile |
Necessary for our legitimate interests (to develop products and grow the business) |
Marketing and Opting Out
We use your data to send you relevant information and offers.
You will receive marketing communications from us if you have requested information or provided your details when entering a competition or promotion, and you have not opted out.
- We will get your express opt-in consent before sharing your personal data with any company outside the Vyta Health Limited group for marketing purposes.
- Opting Out: You can ask us or third parties to stop sending you marketing messages at any time by adjusting your marketing preferences on the website, using the opt-out links on any message, or by contacting us directly.
Disclosures, Security, and Data Retention
Disclosures of Your Personal Data
We may need to share your personal data with the following parties for the purposes set out above:
- Internal Third Parties: Other companies in the Vyta Health Limited Group.
- External Third Parties: Service providers (IT, administration), professional advisors (lawyers, bankers), and regulatory authorities (HMRC).
- Business Changes: Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets.
We require all third parties to respect the security of your personal data and only permit them to process it for specified purposes and in accordance with our instructions.
International Transfers
We do not directly transfer your personal data outside the European Economic Area (EEA).
However, some of our external third parties (like Google and Facebook) are based outside the EEA. When this happens, we ensure a similar degree of protection is afforded to your data by using safeguards approved by the European Commission, such as approved contracts.
Data Security and Retention
- Security: We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your data to those employees and contractors who have a business need to know, and they are subject to a duty of confidentiality.
- Retention: We only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including to satisfy any legal (e.g., tax), accounting, or reporting requirements. We must legally keep basic customer information for six years after they cease being a customer for tax purposes.
Your Legal Rights
As a Vytalise customer, you have important rights regarding your personal data. If you wish to exercise any of these, please contact us.
|
Your Right |
What It Means |
|
Request access |
Receive a copy of the personal data we hold about you. |
|
Request correction |
Have any incomplete or inaccurate data we hold about you corrected. |
|
Request erasure |
Ask us to delete or remove personal data where there is no good reason for us continuing to process it. |
|
Object to processing |
Object where we are relying on a legitimate interest and it impacts your fundamental rights (e.g., for direct marketing). |
|
Request restriction |
Ask us to suspend the processing of your personal data (e.g., while we verify its accuracy). |
|
Request transfer |
Receive your personal data in a structured, machine-readable format to move it to a third party. |
|
Withdraw consent |
Withdraw your consent for us to process your data at any time (this will not affect any processing done before you withdrew consent). |
Please Note: You usually won't have to pay a fee to exercise your rights, but we may charge a reasonable fee if your request is clearly unfounded or excessive.
Sharing and disclosing your personal information
We may share your personal information for the purposes specified in this notice with the following third parties who provide services to Vytahealth:
Klaviyo
We use Klaviyo to send you emails, for product reviews, and the deliver of offers via email and within your account.
We will share contact, profile and order details.
https://www.klaviyo.com/legal/privacy/privacy-notice
eDesk
We use eDesk to receive and mange customer service emails.
https://www.edesk.com/privacy-policy/
Microsoft Clarity
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit:
https://privacy.microsoft.com/en-US/privacystatement
Paypal
We use Paypal to process transactions. To find out what data Paypal collects and how it is used please use the following link:
https://www.paypal.com/en/webapps/mpp/ua/privacy-full
Shopify/ShopPay
We use Shopify/ShopPay to process transactions. To find out what data Shopify/ShopPay collects and how it is used please use the following link:
https://www.shopify.com/uk/legal/privacy
Google Analytics
When you browse our website or interact with an email that we send to you, we may use Google Analytics to collect information about your behaviour in regards to browsing our website and the emails we send. This may include details of your operating system, location, IP address, browser ID, browsing activity, and other information about how you interacted with our digital platforms. The data we access through Google analytics is anonymous, we do not store any personally identifiable information.
https://www.google.com/analytics/terms/us.html
Google Adwords & Google Remarketing
Google Adwords may use cookies to analyse behaviour, track movements around the website, provide targeted advertisements, and gather demographic information. You can opt out of Google’s use of cookies by visiting https://adssettings.google.com/ for more information on Google’s privacy policy visit:
https://policies.google.com/privacy
Meta
Meta may use cookies to analyse behaviour, track movements around the website, provide targeted advertisements, and gather demographic information. You can opt out of Meta’s within your Meta account settings. More information on Meta’s privacy policy visit:
https://www.facebook.com/privacy/policy/
Loop
We use Loop to power our subscription service. Customer and order data for products on subscription will be shared with Loop
https://www.loopwork.co/legal/privacy
Referralcandy
We use referalcandy to power our recommend a friend scheme. Customer and order data is shared.
https://www.referralcandy.com/privacy
Vytalise Cookie Policy
Our website uses cookies to provide you with the best possible experience and allow us to constantly improve our site. A cookie is a small file of letters and numbers stored on your browser or computer's hard drive if you agree.
The Vytalise website uses cookies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS.
The Cookies We Use
|
Cookie Type |
Purpose (Clarity and Care) |
|
Strictly Necessary |
Essential for the basic operation of our website (e.g., letting you log in, use the shopping cart). |
|
Analytical or Performance |
Helps us track visitor numbers and understand how our site is used, ensuring users find what they need easily. |
|
Functionality |
Helps us remember your preferences, greet you by name, and personalise content when you return. |
|
Targeting |
Records your visit, the pages you view, and the links you follow to make our website and advertising more relevant to your interests. |
Key Third-Party Cookies We Use
We partner with trusted third-party services that also use cookies to improve your experience. These are primarily Analytical or Targeting cookies.
- Facebook Pixel: Used with your express consent to show you relevant Vytalise ads on Facebook and measure their effectiveness (conversion tracking). You can revoke this consent at any time via the “Cookie Consent Tool” on our website.
- Google Analytics/gtag: Helps us understand how users interact with our site (retained for up to 2 years).
- Microsoft Clarity & Hotjar: Used to better understand user behaviour (e.g., time on pages, clicks) to optimise our service and experience.
- Trustpilot & Klaviyo: Used for collecting and displaying reviews and for improving our email performance and conversion rates.
Your Control Over Cookies
You are always in control. You can manage or block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies.
Warning: If you block all cookies (including the strictly necessary ones), you may not be able to access all or parts of our website, as it may not function properly.
Expiry: Except for essential cookies, cookies on our website will expire after 24 hours or up to 2 years, depending on the cookie type.