Last updated: 24 July 2026
1. Introduction
This policy explains what personal data vitmax.uk collects, why I collect it, how I use it, and your rights under UK law. This site operates under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
VitMax operates vitmax.uk. For data protection questions, contact me at admin@vitmax.uk.
3. Data We Collect
Data you provide directly:
- Any information you include when contacting me by email or through the contact form (name, email address, and message)
Data collected automatically:
- IP address, for security and analytics
- Browser type, device type, and pages visited, via Google Analytics
- Cookie preferences, recorded by CookieYes
I do not collect sensitive personal data such as health conditions, financial details, or payment information.
4. Legal Basis for Processing
| Data | Purpose | Legal basis |
|---|---|---|
| IP address, usage data | Analytics | Legitimate interests (Art. 6(1)(f)) |
| Cookie preferences | Compliance with PECR | Legal obligation (Art. 6(1)(c)) |
| Contact enquiries | Responding to you | Legitimate interests (Art. 6(1)(f)) |
5. How I Use Your Data
I use data to:
- Analyse site traffic and improve content
- Respond to contact enquiries
- Record and honour your cookie preferences
I do not sell your data. I do not share it with third parties for advertising.
6. Third-Party Services
I use the following third-party services that process data on my behalf:
- Google Analytics and Google Tag Manager — track site usage. Data is processed by Google LLC in the United States under Standard Contractual Clauses. See Google’s Privacy Policy at policies.google.com.
- Amazon Associates — when you click an affiliate link, Amazon sets its own cookies and processes data under its own privacy policy at amazon.co.uk/privacy.
- CookieYes — records your cookie consent preferences. See cookieyes.com/privacy-policy.
- Cloudflare Turnstile — verifies that form submissions come from a real visitor, not a bot. Cloudflare processes limited technical data (such as IP address and browser signals) to perform this check. See Cloudflare’s Privacy Policy at cloudflare.com/privacypolicy.
These services operate under their own privacy policies. I am not responsible for their data practices.
7. International Data Transfers
Google Analytics transfers data to the United States. Google applies Standard Contractual Clauses approved under UK GDPR to protect this data.
Cloudflare, which provides Turnstile (my form’s bot-verification tool), also processes some technical data — such as IP address and browser signals — across its global network, which can include the United States. Cloudflare relies on Standard Contractual Clauses and the UK extension to the EU-U.S. Data Privacy Framework to protect this data.
I do not transfer your personal data to any other countries beyond these two services.
8. Data Retention
| Data | Retention period |
|---|---|
| Contact enquiry emails | 12 months |
| Analytics data (Google Analytics) | 14 months (default setting) |
| Cookie consent records | 12 months |
9. Your Rights
Under UK GDPR you have the right to:
- Access the personal data I hold about you
- Correct inaccurate data
- Request deletion of your data, where applicable
- Restrict or object to processing
- Withdraw consent at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113
To exercise any of these rights, email admin@vitmax.uk. I respond within 30 days.
10. Cookies
I use cookies as described in my Cookie Policy at vitmax.uk/cookie-policy. You control cookie categories via the banner on your first visit or the cookie settings link in the footer.
11. Data Security
I use secure hosting and HTTPS encryption. No online system is completely immune to breaches. In the event of a breach that poses risk to your rights, I will notify affected individuals and the ICO as required by UK GDPR.
12. Changes to This Policy
I update this policy when my data practices change. The date at the top shows when I last made changes. Continued use of the site does not, by itself, constitute consent to updated data processing practices — where UK GDPR requires fresh consent for a specific processing activity, I will seek it separately.
13. Contact
Email: admin@vitmax.uk Contact form: Contact us